last executing test programs: 1m18.678592511s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX]) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1c9) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000a1f000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000340)="6a0cc193beb70a52", 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x40) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc0405602, &(0x7f0000000b40)=@fd={0x0, 0x1, 0x4, 0x100000, 0x0, {}, {0x0, 0xc, 0x4, 0x0, 0x0, 0x82, ';\'S;'}, 0x0, 0x4, {}, 0x8000008}) syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 1m18.49541602s ago: executing program 2 (id=5): mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYRESOCT=0x0]) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000a9fdf914e774216dc7e10652dbde700ffdbdf250a0000000e0001106e657464657673696d0000000f0002006e65746465767369"], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x8014) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="33fa2bbd7000fbdbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x82010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8084}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004014}, 0x8b0) sendmsg$nl_route(r4, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xb3dd}]}}}]}, 0x40}}, 0x0) 1m18.163862289s ago: executing program 3 (id=9): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 1m18.163660446s ago: executing program 3 (id=10): r0 = socket$igmp6(0xa, 0x3, 0x2) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x80000) (async) accept4$inet6(r0, 0x0, &(0x7f00000000c0), 0x80000) socket$kcm(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r2, 0x6a, 0x1, 0x0, 0xc) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60041411000a7403004714000037153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f0000000100)="7bdda57f54c5e7c285aecf65e29d7b13a5e7ac262c4d7604d1a665100eaa72f6d452d8d57530944cac3d1f0adc2af569dc60addf9adfab8b26cb8f93252a04f367e3b67e02ecab4104d98395cadbf52f86827cb2647fec70125c"}]}, 0x0) 1m18.092626541s ago: executing program 3 (id=11): r0 = msgget(0x2, 0xac6fe029c189ba39) r1 = msgget(0x2, 0x320) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006402000000008001340"], 0x64}}, 0x24002000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x7c, r4, 0x1, 0x70bd2c, 0x25dfdbf8, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4c, 0xa8, @random="448deb5ac1ac70730d139eb7ed25f15eb10a8c641721e1df85be9cfe060cb02ab26cf1a9d70648b6cccc13d568b529c910f39a23cb88fa0669a39adfef0bb1157d330250b5aa98fd"}, @handle=@pci={{0x8}, {0x11}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) msgctl$IPC_RMID(r0, 0x0) r5 = msgget(0x3, 0x3) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000001c0)={r7, r7, 0xb, 0x3}) msgctl$IPC_RMID(r5, 0x0) msgctl$IPC_RMID(r1, 0x0) 1m18.044067216s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX]) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1c9) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000a1f000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000340)="6a0cc193beb70a52", 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x40) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc0405602, &(0x7f0000000b40)=@fd={0x0, 0x1, 0x4, 0x100000, 0x0, {}, {0x0, 0xc, 0x4, 0x0, 0x0, 0x82, ';\'S;'}, 0x0, 0x4, {}, 0x8000008}) syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 1m17.934983142s ago: executing program 3 (id=13): gettid() (async, rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000380)="3508ddb21f7be52f0d1b9016609768b182bb24c78b0fdfe35740db636defcb5924510ac0e0a5af743974caed21f9834b3f2c0adbe619b49abc9d4ae7", &(0x7f00000003c0)="9adb1f61c48b40c1268ab90a91c859792742c190c49145bb8d2fa37db32a2e4f7e0683e27e87654960defbc0a9aacf4cc041112a76a170cdfaadb7abc20e288d73e394e43539a1996976767f58e3813efda5ce0088621f426896c53cf67b062f8dc74fb3f3b88b9bb85217489007c62c34538426de19284870323cd3cef9a5119472017a5a8afcb5e5ffc70e4db14886c9cd380009247b0eeb7a3251fb919fd1a6d8893dc3191c7ecdd3f331de1b607432"}}, &(0x7f0000bbdffc)=0x0) (rerun: 32) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {0xff}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x19}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x15}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc008551b, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="34cf80df", @ANYRES16=r4, @ANYBLOB="010000001000dfffffff10fbffff170001801400020067656e6576653100000000000000000008000a0008000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000051}, 0x200048c1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3ec}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000340)={0x0, 0xd, 0x204, 0x9, 0x1, 0xdf36, 0x8, 0x7fff, r8}, 0x20) (async) r9 = landlock_create_ruleset(&(0x7f0000000140)={0xc000}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021300000200000000000000000000000de47d6501eb6f54194b6cb32a25be395814b70f54e8bc8a74da207faeb3728695b09928a3c2b37a44e6a0e5b52e"], 0x10}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r11, 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r12, 0x2) 1m17.633700506s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) setregid(0x0, 0xee01) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001880)={{0x1, 0x1, 0x18, r4, {0xf}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x6, 0x7, 0x7ff, 0x0, 0xd}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xd, 0xc, "41a0a18ef515814e914ddb349f24d2d4fdf2029d4ea0d5c318c72a7f44575de5928931313688f80c00e226d5f9de71854d921504681829ab9aea7bb39083bd3e", "b52d2e8698032804ba481f878cc65fac11ec880364f7acb23df30827152197f46a9f88676e0b06b603b41a00352efa0e1e53c5153c1a7cc757f3186cc14548be", "8b65cc03d13d051bee0900000006000800f15bc5104e6a8500000055b2a07060", [0x895, 0xcbd]}) write$binfmt_format(r5, &(0x7f0000000040)='0\x00', 0x1) r8 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.442879008s ago: executing program 1 (id=17): syz_emit_ethernet(0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe80000000fe80009cd17f66da38fe00000000000000aa"], 0x0) 1m17.442691601s ago: executing program 1 (id=18): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3}, 0x48, r0) keyctl$clear(0x7, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='fscrypt:', r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x11}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4091) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRES8=0x0], 0x50}}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x94) 1m17.323976283s ago: executing program 1 (id=19): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4e000000010040", 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc044) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESDEC=r2], 0x114}], 0x1, 0x0, 0x0, 0x85}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m17.264095873s ago: executing program 1 (id=20): msgget(0x2, 0x8) 1m17.263786364s ago: executing program 1 (id=21): creat(&(0x7f0000000080)='./file1\x00', 0x59) (async) creat(&(0x7f0000000080)='./file1\x00', 0x59) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000051000000040000000300080300000000"], 0x4000) socket(0x2a, 0x2, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) (async) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) write$sndseq(r4, &(0x7f00000002c0)=[{0x9, 0xc, 0xa, 0x3, @tick=0xfffffffb, {0x9, 0x6}, {0x6, 0x6}, @raw32={[0x3, 0x8, 0x8]}}], 0x1c) (async) write$sndseq(r4, &(0x7f00000002c0)=[{0x9, 0xc, 0xa, 0x3, @tick=0xfffffffb, {0x9, 0x6}, {0x6, 0x6}, @raw32={[0x3, 0x8, 0x8]}}], 0x1c) close(r3) syz_usb_disconnect(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYRES8=r5], 0x7c}}, 0x80) 1m16.973696694s ago: executing program 2 (id=22): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='xfrm0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 1m16.912340503s ago: executing program 32 (id=22): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='xfrm0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 1m16.442887644s ago: executing program 3 (id=28): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4e000000010040", 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc044) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESDEC=r2], 0x114}], 0x1, 0x0, 0x0, 0x85}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m16.397161273s ago: executing program 33 (id=28): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4e000000010040", 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc044) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESDEC=r2], 0x114}], 0x1, 0x0, 0x0, 0x85}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m14.123592554s ago: executing program 4 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="0100280000000000000001000000a80008802800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b5400098028000080060001000a0000001400020000000000000000000000000000000000050003000200000028000080060001000a0000001400020000000000000000000000000000000000050003000100000014000200776730000000000000000000000000000800050001"], 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x34, 0x2e, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0}, {0xfff3, 0xffff}, {0x0, 0xb}}, [{0x8}, {0x8, 0xb, 0xfffffad5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044884}, 0x0) munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xc2, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000010180c200000381002800080045f800b0100000000011907800000000000000004e244e20009c9078010000000400200044cb6de00a5f3116cf425f37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae33493789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a52e5da89a0ace8edabc766b388285d39f375c5bef000000000d46000000000000"], 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) write$tun(r5, &(0x7f0000000040)={@void, @val={0x2, 0x0, 0x5, 0xffff, 0x9, 0x4}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @broadcast, @rand_addr=0x64010100, @remote, @broadcast}}, 0x26) 1m13.25256934s ago: executing program 4 (id=37): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4e000000010040", 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0xc044) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESDEC=r2], 0x114}], 0x1, 0x0, 0x0, 0x85}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0}], 0x1, 0x7ff, 0x4f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r11, 0x107, 0x6, 0x0, &(0x7f0000000100)) sendfile(r10, r10, 0x0, 0x200000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m13.049547997s ago: executing program 4 (id=38): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) write(r3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0x100}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x310, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5fc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x37, 0x3, "7a45222b026bc22491477b3bd5ae1397004504ef6c087361411e5a35ea288a027dd4e6ab821bb7329e9c5d32de5f89f9302abc"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c5363edf8f235a4e0d0f365cee94969f843eb55549fc0dd2cfbe"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fa3bb5710c60fab83111c7bae780a34545f55c64"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x44, 0x3, "50968aab5f4a0770dd1aff4a54023cd8d5440190aed9d9785dc90d0a3457e23983bc088d41ebac161640894333097659d6780ca7e97230c108e8d3f5dc88c71f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8024fa1dd5309066a811f1ae792fa03b0c5f785dd857c20046078e180b"}}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x19}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffc00}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x20008804}, 0x24004084) 1m11.697378453s ago: executing program 4 (id=48): syz_emit_ethernet(0x7a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7fd56ac624e709"], 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4088800) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x12e739edf728f80a, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc041) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/133, 0x85}], 0x4, &(0x7f0000000540)=""/125, 0x7d}, 0xb3c}], 0x1, 0x133, &(0x7f0000000600)={0x77359400}) 1m11.613683301s ago: executing program 4 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x800}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0xffffff7b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x8100}}, 0x20}}, 0x40804) write$tun(r0, &(0x7f0000002700)=ANY=[@ANYBLOB="080028000700010a88fb06070003aaaaaaaaaaaac4b76830488faffa699c22e04b6dd0184ccf"], 0x2e) 1m10.77195496s ago: executing program 4 (id=51): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x56, &(0x7f00000000c0)="00008fe008a7c0270b2a8f4ed10a2ed87751892437dfa3a8503f9aba786c54216a8613460af62ec3cd78c0c92d1b958de31c6744c84be0cd9ff22b1378641b1e348c479f99ac166886b8979f5966f975bdb8aee622c9", 0x6b, 0x0, &(0x7f0000000140)="e7d263a5e8cfb56ffbba25dfc8b42a77b993000723160815e501c486cddaeb2b6785da46138f2c0276229bb8963a4a146118c43b12ff6c39589a55359565e82430f5f8baa74862b82dc1d8a45b10429a0e0a4a40bee3d2d8a6dff625043f823dfed74b879f82bb64e247c7"}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) (async) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) (async) r3 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') (async, rerun: 32) ioctl$FS_IOC_GETVERSION(r5, 0x40045b0a, &(0x7f0000000040)) (rerun: 32) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) (async, rerun: 64) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) (rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000480)={r7, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x12, 0x3, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) (async) close_range(r7, r1, 0x2) 1m6.542563169s ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14c0748, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r5, 0x80480911, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r11, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESHEX=r0], 0x1c}}, 0x804) 1m6.352944655s ago: executing program 0 (id=80): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x50e, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 1m6.133501304s ago: executing program 0 (id=81): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 1m6.13324175s ago: executing program 0 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xc0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x7c}}, 0xc010) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100edff0000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000a0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1m6.060860346s ago: executing program 0 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0xd13) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x71) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x56) write(r5, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000000)=0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000000f7"], 0x38}, 0x1, 0x0, 0x0, 0x4054}, 0x40080) (async) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) 1m6.060661693s ago: executing program 0 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "261808a4fbf9c54268eed1c15d859fef5d2e6bd4d439fed867007209c38605d46b347f97ecb5589ef142f924a725c07fdb726e10abb4575ed5f86b6ce7ef9092c69e35bf8b783f4446df2f78dcff"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x4070) 1m2.008737139s ago: executing program 34 (id=21): creat(&(0x7f0000000080)='./file1\x00', 0x59) (async) creat(&(0x7f0000000080)='./file1\x00', 0x59) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000051000000040000000300080300000000"], 0x4000) socket(0x2a, 0x2, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) (async) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) write$sndseq(r4, &(0x7f00000002c0)=[{0x9, 0xc, 0xa, 0x3, @tick=0xfffffffb, {0x9, 0x6}, {0x6, 0x6}, @raw32={[0x3, 0x8, 0x8]}}], 0x1c) (async) write$sndseq(r4, &(0x7f00000002c0)=[{0x9, 0xc, 0xa, 0x3, @tick=0xfffffffb, {0x9, 0x6}, {0x6, 0x6}, @raw32={[0x3, 0x8, 0x8]}}], 0x1c) close(r3) syz_usb_disconnect(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYRES8=r5], 0x7c}}, 0x80) 55.779131309s ago: executing program 35 (id=51): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x56, &(0x7f00000000c0)="00008fe008a7c0270b2a8f4ed10a2ed87751892437dfa3a8503f9aba786c54216a8613460af62ec3cd78c0c92d1b958de31c6744c84be0cd9ff22b1378641b1e348c479f99ac166886b8979f5966f975bdb8aee622c9", 0x6b, 0x0, &(0x7f0000000140)="e7d263a5e8cfb56ffbba25dfc8b42a77b993000723160815e501c486cddaeb2b6785da46138f2c0276229bb8963a4a146118c43b12ff6c39589a55359565e82430f5f8baa74862b82dc1d8a45b10429a0e0a4a40bee3d2d8a6dff625043f823dfed74b879f82bb64e247c7"}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) (async) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) (async) r3 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8140) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x1, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x7, 0x2, 0x200, 0x0, 0x2}) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') (async, rerun: 32) ioctl$FS_IOC_GETVERSION(r5, 0x40045b0a, &(0x7f0000000040)) (rerun: 32) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) (async, rerun: 64) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) (rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000480)={r7, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x12, 0x3, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) (async) close_range(r7, r1, 0x2) 50.447425744s ago: executing program 36 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "261808a4fbf9c54268eed1c15d859fef5d2e6bd4d439fed867007209c38605d46b347f97ecb5589ef142f924a725c07fdb726e10abb4575ed5f86b6ce7ef9092c69e35bf8b783f4446df2f78dcff"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x4070) 29.663476799s ago: executing program 7 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (fail_nth: 8) 29.663330493s ago: executing program 7 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x30}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffeff}]}, 0x28}, 0x1, 0x0, 0x0, 0x50407052e526321}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 29.531211621s ago: executing program 7 (id=303): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x5) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000080)) socketpair(0x21, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) 29.461935143s ago: executing program 7 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xf9adcbb622137c3a) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="41090086d2037f6987c6a17d91000000010000000500070000000040"], 0x1c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000480)={0x0, 0x1, 0x2, 0x1, 0x4, 0x1c, 0x2}) r2 = getpid() r3 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001100)={&(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xf5ff, 0x1, &(0x7f0000001140)="b5"}], 0x2}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x52, &(0x7f0000001880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaab7aaaaaa86dd60f4adf7001c2c0020010000000000000000000000000001ff0200000000000000000000000000013a0000000000000087009078009ca1109c3b00"/82], 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_pidfd_open(r4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000300)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x173) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r6, 0x0, 0x80000000) 29.398429843s ago: executing program 7 (id=308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) (async) io_uring_setup(0x5237, &(0x7f0000009a80)={0x0, 0x25d1, 0x400, 0x0, 0x210}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x3) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1e6000000000000edff1200000008000300", @ANYRES32=r2, @ANYBLOB="040013000500190002000000060012000400000006001000fa0000000500c200080000000a0006"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 29.171931435s ago: executing program 7 (id=314): r0 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x208280) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[]) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000006c0)=0xffffffff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 29.08680214s ago: executing program 37 (id=314): r0 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x208280) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[]) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f00000006c0)=0xffffffff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 5.951065729s ago: executing program 9 (id=693): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)='@', 0x1, 0xe61e2840a154b0c4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000240)={r6, r7, 0x0, 0x0, 0x4}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="2e000300010002", 0x7) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x3}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r9, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.783233008s ago: executing program 9 (id=694): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$netlink(r1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x4f) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x200000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.683091827s ago: executing program 9 (id=695): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000980)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x20}}], 0x2, 0x8050) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 5.68271823s ago: executing program 9 (id=696): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111300, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0], 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000001c0)=0x200) (async, rerun: 64) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) 5.613394808s ago: executing program 9 (id=697): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000621000500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f7274"], 0x58}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x138, 0x168, 0x10, 0x0, 0xb, 0x330, 0x250, 0x250, 0x330, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0xffffffff, 0x0, 0xff000000], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a}, 0x6000000, 0xf8, 0x138, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "9c6bf4633b688e5c61ae9a21b0b0bfe88a6faa548a8ce8927b5cec9e94d8"}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) ioperm(0x0, 0x3, 0x4) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000440)={0x0, 0x1100}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback, 0x5}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x29}}, r3, 0x7fff}}, 0x48) 5.543119482s ago: executing program 9 (id=698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000200001030000000000000001800000"], 0x28}}, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x8, 0x9, "cc0e62734571f00934226b74ee1d6fca40149d86866261d201667e0a0a4138ce", 0x0, 0xf, 0x3, 0x40, 0x314}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14dc02, 0x0) r2 = dup(r1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r3, &(0x7f0000000140), 0x12) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000240)) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x40044160, 0x3) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) write$tun(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x5d4) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x2) bind(r10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.161231345s ago: executing program 8 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc49c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 1.103504094s ago: executing program 5 (id=789): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x696260df2df97e76, 0xffff}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="1338077512fc9d374b2c393bd69c9a2630fca91b2bd814dd4cefdda19cba77e20612d7eef8a9f330cb89173ef72b40ba76b803e227270566896abea9f35cf5aa4e9697f751dd7a4bb5b01c2fc8f5ef24d00a198972e919bb2f19bf071d58682b29b43ed493c457ffa27961407b4cd5c223f8f1fb576040cf7e258b235ab3c0eb", 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) 1.10227414s ago: executing program 8 (id=791): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x5555555555550001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x75f9b6f7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) 1.101775538s ago: executing program 5 (id=792): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xdc) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) r2 = mq_open(&(0x7f0000000100)='#.\x1e$@#\x00', 0x40, 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/207, 0xcf}], 0x1) (async) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0x2) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35b", 0x6) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240)=[0x2], 0x0, 0x2}}, 0x40) 1.026951335s ago: executing program 5 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000040)) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000040)) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000140)='barrier\f\x9d\xdeN\xa5\xb8V\xd0\"Ii\xca\xcc>\xa0\xd6i\xd8?\xea\xf3_n\xd6M\xb0#)\x05\x86\xbb2\x01\xa6\xc1\xac\x18\x19\xa3l~\x03h0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x85}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x700, 0x2) 833.03393ms ago: executing program 5 (id=797): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000180000000000000007000000ff00000000000000000000001800000000000000008000000000000001000000000000004700000000000000c4e111de0a440f20c03509000000440f22c065d28800000000470f01cb460f01d90f013866ba4300b000ee450f01c2400f072e0f01cbc301000000000000004900000000000000f78d931c454d2397160f01c52e0fbff10f060f09c42250f568006465420f01c3b93e080000b800000080ba000000000f3066490f6e0fc421e176adf77f0000c30000000000000000180000000000000006"], 0xd8}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000780)={"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"}) move_pages(r1, 0x1, &(0x7f0000000740)=[&(0x7f00007c7000/0x3000)=nil], 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x7, &(0x7f0000000000)={0x22, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x408400, 0x2, 0x20}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000700000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}}, 0x40008) 633.168683ms ago: executing program 6 (id=801): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1700000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) open(&(0x7f0000000100)='./file0\x00', 0x101040, 0x10) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) getresgid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000016c0)) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) userfaultfd(0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) (async) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1700000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) open(&(0x7f0000000100)='./file0\x00', 0x101040, 0x10) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) getresgid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000016c0)) (async) 492.865753ms ago: executing program 6 (id=802): bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @private2}, 0x1c) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000b5e000/0x3000)=nil, 0x2, &(0x7f0000000040)=[{0x53, 0x9, 0x1}, {0x3, 0x6, 0xd74}], 0x2, 0x3940, 0x25, 0x24, 0x22, 0xb}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0xa00, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000001040)={0x90, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4891) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) setgid(r8) utime(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x0, 0x0, 0x1d0, 0xf0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x440, 0xb, 0x0, {[{{@uncond, 0x74000000, 0xa8, 0xf0, 0x3006000, {0x0, 0xe004}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x28}, @ipv6=@empty, 0x3f}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x328}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [], [0x0, 0xffffffff], 'veth0_to_bond\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_to_bond\x00', 'ip6_vti0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ab0000000000851000000200000085000000768f000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r10 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x4c0, 0x1f0, 0x108, 0x108, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x9, {0x9}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@multicast2, @local, 0x0, 0xffffffff, 0x2, 0x4, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x10, 0x7, 0x0, 0x6, 0x3, 0x6, 'erspan0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0xd5}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9e6, 'system_u:object_r:devtty_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x510) 433.232801ms ago: executing program 6 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="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", @ANYRES32, @ANYRESDEC=0x0], 0x50) r1 = signalfd4(r0, &(0x7f0000000380), 0x8, 0x800) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000051b000/0x3000)=nil, 0x3000}, 0x1}) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0x400, r2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000000c0)='}!\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x60008, &(0x7f00000002c0)={[{'raw\x00'}], [{@obj_user={'obj_user', 0x3d, '!'}}, {@subj_user={'subj_user', 0x3d, 'rpfilter\x00'}}]}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) utime(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0xc) 431.382653ms ago: executing program 6 (id=804): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x85}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf0, 0x2) 281.431599ms ago: executing program 6 (id=805): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r1) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0xd, 0x5, 0x8, 0x2, 0xa, 0x4, 0x6, 0x1}}}, 0x120) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (rerun: 32) chdir(&(0x7f0000000280)='./file0\x00') (async, rerun: 64) syz_open_dev$loop(&(0x7f0000000100), 0xe, 0x406080) (async, rerun: 64) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) landlock_restrict_self(r5, 0x0) (async) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x200, 0x70bf6a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0x9, 0xfff1}, {0x3, 0xd}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c191e26f5fb95f03e71da3c681ed9247f1e657db8835edb46129cf44cf633155f0cb32c6335691e7b0059481831eed1ac89fcd11c004f20887a16b9d9a89eeca59ac525a3ef3d8949f65dab7eafd01c2c4fd8abcab9c9b5799d1d7bdc6", @ANYRES32=0x0, @ANYBLOB="08000d00e2000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x2d4}, 0x1, 0x0, 0x0, 0x40400c5}, 0x2048051) 223.239485ms ago: executing program 8 (id=806): syz_emit_ethernet(0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600080000fc020000000000000000000000000000fe800000000000009cd17f66da38fe00003300000000aa"], 0x0) 173.356387ms ago: executing program 8 (id=807): sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 173.045419ms ago: executing program 8 (id=808): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x70}, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 88.332356ms ago: executing program 8 (id=809): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000980)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x20}}], 0x2, 0x8050) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f00000000c0)=[{0xfffd, 0x7f, 0x3, 0x6}, {0x67bf, 0x6b, 0x3, 0x4}, {0x10, 0x80, 0x9}, {0x1, 0x0, 0x9, 0x8}, {0x5835, 0x6, 0x8, 0x8}, {0x81, 0x0, 0xe, 0x1}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 21.997637ms ago: executing program 6 (id=810): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r2 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x3) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000180)={0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000180)={0x1}) syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x1, "3a8e080800b3020000000010000f0000000100", 0x3234564e}) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0xee01, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x4, 0x7ff, 0x18000, 0x3, 0x80000001, 0xb, "c73dd50d"}}, 0x11c) write$UHID_INPUT(r1, &(0x7f0000008280)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 5 (id=811): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='io_uring_complete\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xfce, &(0x7f00000003c0)={0x0, 0x3, 0x1, 0x2, 0x220}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0xce3, 0xfffffffe, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x2c}, 0x8841) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x200, 0xb0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0x0, 'geneve0\x00', 'syz_tun\x00', {}, {0xff}, 0x62, 0x2, 0x49}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x8, "4edef53db37bf84c784ad890537bb2408afac8dfac7fc9d26ae9804d8470"}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0x0, 'rose0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5e, 0x1, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x3, 0x4, 0x3, 0x6, 0x2], 0x1, 0x3}, {0x3, [0x1, 0x4, 0x7, 0x1, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x0, 0xf, [0x1, 0x25, 0x19, 0x31, 0x22, 0x33, 0x30, 0x37, 0x3d, 0x2a, 0x16, 0x1, 0x7, 0x3a, 0x0, 0x21], 0x2, 0xfffffffa, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000199000/0x4000)=nil, 0x4000, 0x200000b, 0x810, r2, 0x8000000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x34, 0x7}) kernel console output (not intermixed with test programs): nterface: batadv_slave_1 [ 93.957238][ T13] veth1_macvtap: left promiscuous mode [ 93.959045][ T13] veth0_macvtap: left promiscuous mode [ 93.960808][ T13] veth1_vlan: left promiscuous mode [ 93.962474][ T13] veth0_vlan: left promiscuous mode [ 94.062646][ T837] usb 11-1: Using ep0 maxpacket: 16 [ 94.069324][ T837] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.082393][ T837] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.085984][ T837] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.092936][ T837] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 94.096732][ T837] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.100109][ T837] usb 11-1: Manufacturer: syz [ 94.104863][ T837] usb 11-1: config 0 descriptor?? [ 94.302466][ T40] audit: type=1400 audit(1752268713.334:357): avc: denied { watch } for pid=7221 comm="syz.7.218" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.316579][ T40] audit: type=1400 audit(1752268713.334:358): avc: denied { watch_sb watch_reads } for pid=7221 comm="syz.7.218" path="/29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.342720][ T5951] Bluetooth: hci6: command tx timeout [ 94.521400][ T837] usbhid 11-1:0.0: can't add hid device: -71 [ 94.523979][ T837] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 94.532920][ T837] usb 11-1: USB disconnect, device number 3 [ 94.540686][ T13] team0 (unregistering): Port device team_slave_1 removed [ 94.594348][ T13] team0 (unregistering): Port device team_slave_0 removed [ 94.872670][ T6129] tipc: Node number set to 2886997162 [ 94.902146][ T40] audit: type=1400 audit(1752268713.934:359): avc: denied { connect } for pid=7228 comm="syz.7.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.069016][ T40] audit: type=1400 audit(1752268714.104:360): avc: denied { append } for pid=7232 comm="syz.6.221" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.072715][ T5963] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.076146][ T5951] Bluetooth: hci0: command 0x1003 tx timeout [ 95.087857][ T7236] syz.8.222: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.097089][ T40] audit: type=1400 audit(1752268714.124:361): avc: denied { setopt } for pid=7235 comm="syz.8.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.103238][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.8.222 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 95.103255][ T7236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.103262][ T7236] Call Trace: [ 95.103267][ T7236] [ 95.103272][ T7236] dump_stack_lvl+0x16c/0x1f0 [ 95.103309][ T7236] warn_alloc+0x248/0x3a0 [ 95.103325][ T7236] ? __pfx_warn_alloc+0x10/0x10 [ 95.103339][ T7236] ? stack_depot_save_flags+0x354/0xa40 [ 95.103363][ T7236] ? kasan_save_stack+0x42/0x60 [ 95.103374][ T7236] ? kasan_save_stack+0x33/0x60 [ 95.103386][ T7236] ? kasan_save_track+0x14/0x30 [ 95.103398][ T7236] ? xskq_create+0x52/0x1d0 [ 95.103410][ T7236] ? xsk_setsockopt+0x640/0x840 [ 95.103420][ T7236] ? do_sock_setsockopt+0x224/0x470 [ 95.103438][ T7236] ? xskq_create+0xfb/0x1d0 [ 95.103450][ T7236] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 95.103466][ T7236] ? xskq_create+0xfb/0x1d0 [ 95.103481][ T7236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.103502][ T7236] ? xskq_create+0xfb/0x1d0 [ 95.103516][ T7236] vmalloc_user_noprof+0x9e/0xe0 [ 95.103527][ T7236] ? xskq_create+0xfb/0x1d0 [ 95.103540][ T7236] xskq_create+0xfb/0x1d0 [ 95.103554][ T7236] xsk_setsockopt+0x640/0x840 [ 95.103566][ T7236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.103577][ T7236] ? __lock_acquire+0x622/0x1c90 [ 95.103591][ T7236] ? selinux_socket_setsockopt+0x6a/0x80 [ 95.103606][ T7236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.103619][ T7236] do_sock_setsockopt+0x224/0x470 [ 95.103635][ T7236] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 95.103659][ T7236] __sys_setsockopt+0x1a0/0x230 [ 95.103674][ T7236] __x64_sys_setsockopt+0xbd/0x160 [ 95.103687][ T7236] ? do_syscall_64+0x91/0x4c0 [ 95.103700][ T7236] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.103713][ T7236] do_syscall_64+0xcd/0x4c0 [ 95.103728][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.103738][ T7236] RIP: 0033:0x7fd3cb38e929 [ 95.103747][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.103757][ T7236] RSP: 002b:00007fd3cc25c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.103767][ T7236] RAX: ffffffffffffffda RBX: 00007fd3cb5b5fa0 RCX: 00007fd3cb38e929 [ 95.103774][ T7236] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 95.103779][ T7236] RBP: 00007fd3cb410b39 R08: 0000000000000004 R09: 0000000000000000 [ 95.103785][ T7236] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.103791][ T7236] R13: 0000000000000000 R14: 00007fd3cb5b5fa0 R15: 00007fff7a4baf78 [ 95.103804][ T7236] [ 95.103808][ T7236] Mem-Info: [ 95.193645][ T7236] active_anon:10856 inactive_anon:0 isolated_anon:0 [ 95.193645][ T7236] active_file:12077 inactive_file:40607 isolated_file:0 [ 95.193645][ T7236] unevictable:1768 dirty:281 writeback:0 [ 95.193645][ T7236] slab_reclaimable:12402 slab_unreclaimable:76414 [ 95.193645][ T7236] mapped:24835 shmem:2443 pagetables:1584 [ 95.193645][ T7236] sec_pagetables:296 bounce:0 [ 95.193645][ T7236] kernel_misc_reclaimable:0 [ 95.193645][ T7236] free:435105 free_pcp:14763 free_cma:0 [ 95.208807][ T7236] Node 0 active_anon:43416kB inactive_anon:0kB active_file:40448kB inactive_file:162224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99300kB dirty:1120kB writeback:0kB shmem:6236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14352kB pagetables:6152kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB [ 95.219066][ T7236] Node 1 active_anon:8kB inactive_anon:0kB active_file:7860kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.228773][ T7236] Node 0 DMA free:14232kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.237752][ T7236] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 95.239589][ T7236] Node 0 DMA32 free:142940kB boost:16384kB min:43900kB low:50776kB high:57652kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43044kB inactive_anon:0kB active_file:44544kB inactive_file:162224kB unevictable:3536kB writepending:3172kB present:2080628kB managed:1264188kB mlocked:0kB bounce:0kB free_pcp:29212kB local_pcp:7584kB free_cma:0kB [ 95.249685][ T7236] lowmem_reserve[]: 0 0 0 0 0 [ 95.251254][ T7236] Node 1 Normal free:1585076kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:7860kB inactive_file:204kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:25880kB local_pcp:16kB free_cma:0kB [ 95.261172][ T7236] lowmem_reserve[]: 0 0 0 0 0 [ 95.263036][ T7236] Node 0 DMA: 10*4kB (UM) 2*8kB (UM) 8*16kB (UME) 7*32kB (UM) 8*64kB (UME) 2*128kB (ME) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (M) 1*4096kB (M) = 14232kB [ 95.268305][ T7236] Node 0 DMA32: 1751*4kB (UME) 814*8kB (UME) 297*16kB (UM) 563*32kB (UME) 196*64kB (UME) 105*128kB (UME) 67*256kB (UM) 44*512kB (UM) 22*1024kB (UM) 7*2048kB (UM) 1*4096kB (M) = 142908kB [ 95.274900][ T7236] Node 1 Normal: 109*4kB (UME) 52*8kB (UME) 8*16kB (UE) 9*32kB (UME) 85*64kB (UME) 13*128kB (UME) 13*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UM) 381*4096kB (M) = 1585076kB [ 95.280478][ T7236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.283616][ T7236] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 95.286470][ T7236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.290210][ T7236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.293256][ T7236] 56148 total pagecache pages [ 95.294767][ T7236] 0 pages in swap cache [ 95.296130][ T7236] Free swap = 124996kB [ 95.297454][ T7236] Total swap = 124996kB [ 95.298765][ T7236] 1048443 pages RAM [ 95.299974][ T7236] 0 pages HighMem/MovableOnly [ 95.301543][ T7236] 283067 pages reserved [ 95.302914][ T7236] 0 pages cma reserved [ 95.409295][ C3] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 95.412497][ C3] sr 2:0:0:0: [sr0] tag#28 CDB: Read capacity(16) 9e b0 7a cd a0 b2 31 [ 95.427566][ T7261] FAULT_INJECTION: forcing a failure. [ 95.427566][ T7261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.436050][ T7261] CPU: 0 UID: 0 PID: 7261 Comm: syz.6.228 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 95.436074][ T7261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.436085][ T7261] Call Trace: [ 95.436090][ T7261] [ 95.436097][ T7261] dump_stack_lvl+0x16c/0x1f0 [ 95.436124][ T7261] should_fail_ex+0x512/0x640 [ 95.436151][ T7261] strncpy_from_user+0x3b/0x2e0 [ 95.436174][ T7261] getname_flags.part.0+0x8f/0x550 [ 95.436197][ T7261] getname_flags+0x93/0xf0 [ 95.436217][ T7261] __x64_sys_mkdirat+0x76/0xb0 [ 95.436241][ T7261] do_syscall_64+0xcd/0x4c0 [ 95.436267][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.436283][ T7261] RIP: 0033:0x7febe4d8e929 [ 95.436297][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.436313][ T7261] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 95.436329][ T7261] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 95.436340][ T7261] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 95.436351][ T7261] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 95.436361][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.436372][ T7261] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 95.436395][ T7261] [ 95.524231][ T7274] syz_tun: entered allmulticast mode [ 95.527052][ T7274] tipc: Enabling of bearer rejected, already enabled [ 95.529762][ T7273] syz_tun: left allmulticast mode [ 95.675611][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.6.235'. [ 95.857863][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.6.238'. [ 95.942832][ T7323] FAULT_INJECTION: forcing a failure. [ 95.942832][ T7323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.944367][ T7325] syz_tun: entered allmulticast mode [ 95.946920][ T7323] CPU: 2 UID: 0 PID: 7323 Comm: syz.6.242 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 95.946936][ T7323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.946942][ T7323] Call Trace: [ 95.946946][ T7323] [ 95.946950][ T7323] dump_stack_lvl+0x16c/0x1f0 [ 95.946982][ T7323] should_fail_ex+0x512/0x640 [ 95.947004][ T7323] strncpy_from_user+0x3b/0x2e0 [ 95.947018][ T7323] getname_flags.part.0+0x8f/0x550 [ 95.947031][ T7323] getname_flags+0x93/0xf0 [ 95.947044][ T7323] __x64_sys_mkdirat+0x76/0xb0 [ 95.947059][ T7323] do_syscall_64+0xcd/0x4c0 [ 95.947074][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.947085][ T7323] RIP: 0033:0x7febe4d8e929 [ 95.947093][ T7323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.947102][ T7323] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 95.947112][ T7323] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 95.947119][ T7323] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 95.947125][ T7323] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 95.947130][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.947136][ T7323] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 95.947149][ T7323] [ 96.004941][ T7322] syz_tun: left allmulticast mode [ 96.083769][ T7341] overlayfs: failed to resolve './file0': -2 [ 96.162715][ T5950] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 96.218809][ T7360] FAULT_INJECTION: forcing a failure. [ 96.218809][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 96.223489][ T7360] CPU: 3 UID: 0 PID: 7360 Comm: syz.6.251 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 96.223504][ T7360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.223510][ T7360] Call Trace: [ 96.223514][ T7360] [ 96.223518][ T7360] dump_stack_lvl+0x16c/0x1f0 [ 96.223536][ T7360] should_fail_ex+0x512/0x640 [ 96.223550][ T7360] ? fs_reclaim_acquire+0xae/0x150 [ 96.223562][ T7360] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 96.223587][ T7360] should_failslab+0xc2/0x120 [ 96.223604][ T7360] __kmalloc_noprof+0xd2/0x510 [ 96.223621][ T7360] tomoyo_realpath_from_path+0xc2/0x6e0 [ 96.223636][ T7360] ? tomoyo_profile+0x47/0x60 [ 96.223654][ T7360] tomoyo_path_number_perm+0x245/0x580 [ 96.223666][ T7360] ? tomoyo_path_number_perm+0x237/0x580 [ 96.223677][ T7360] ? find_held_lock+0x1/0x80 [ 96.223692][ T7360] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.223719][ T7360] ? do_raw_spin_unlock+0x172/0x230 [ 96.223729][ T7360] ? current_check_access_path+0x33c/0x460 [ 96.223742][ T7360] ? __pfx_current_check_access_path+0x10/0x10 [ 96.223753][ T7360] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 96.223764][ T7360] ? lookup_dcache+0x66/0x170 [ 96.223777][ T7360] tomoyo_path_mkdir+0x9b/0xe0 [ 96.223792][ T7360] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 96.223812][ T7360] security_path_mkdir+0x154/0x2f0 [ 96.223827][ T7360] do_mkdirat+0x175/0x3e0 [ 96.223842][ T7360] ? __pfx_do_mkdirat+0x10/0x10 [ 96.223856][ T7360] ? getname_flags.part.0+0x1c5/0x550 [ 96.223870][ T7360] __x64_sys_mkdirat+0x83/0xb0 [ 96.223884][ T7360] do_syscall_64+0xcd/0x4c0 [ 96.223900][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.223910][ T7360] RIP: 0033:0x7febe4d8e929 [ 96.223919][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.223929][ T7360] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.223939][ T7360] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 96.223945][ T7360] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 96.223951][ T7360] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 96.223957][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.223963][ T7360] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 96.223977][ T7360] [ 96.224014][ T7360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.328490][ T7368] syz_tun: entered allmulticast mode [ 96.331491][ T7368] tipc: Enabling of bearer rejected, already enabled [ 96.335490][ T5950] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.338706][ T5950] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 96.340654][ T7367] syz_tun: left allmulticast mode [ 96.342211][ T5950] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.342531][ T7370] xt_time: unknown flags 0xb4 [ 96.348257][ T5950] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 96.359638][ T5950] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.362545][ T5950] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.371695][ T5950] usb 10-1: Manufacturer: syz [ 96.377276][ T5950] usb 10-1: config 0 descriptor?? [ 96.410976][ T7378] xt_cluster: node mask cannot exceed total number of nodes [ 96.422684][ T5963] Bluetooth: hci6: command tx timeout [ 96.613660][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.8.259'. [ 96.631117][ T7397] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.632648][ T5950] rc_core: IR keymap rc-hauppauge not found [ 96.636689][ T5950] Registered IR keymap rc-empty [ 96.638609][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.653587][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.674509][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 96.680113][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input7 [ 96.692079][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.716894][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.720591][ T7408] FAULT_INJECTION: forcing a failure. [ 96.720591][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 96.725968][ T7408] CPU: 0 UID: 0 PID: 7408 Comm: syz.8.262 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 96.725983][ T7408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.725990][ T7408] Call Trace: [ 96.725994][ T7408] [ 96.725998][ T7408] dump_stack_lvl+0x16c/0x1f0 [ 96.726044][ T7408] should_fail_ex+0x512/0x640 [ 96.726058][ T7408] ? fs_reclaim_acquire+0xae/0x150 [ 96.726070][ T7408] ? tomoyo_encode2+0x100/0x3e0 [ 96.726084][ T7408] should_failslab+0xc2/0x120 [ 96.726098][ T7408] __kmalloc_noprof+0xd2/0x510 [ 96.726112][ T7408] ? d_absolute_path+0x136/0x1a0 [ 96.726125][ T7408] tomoyo_encode2+0x100/0x3e0 [ 96.726141][ T7408] tomoyo_encode+0x29/0x50 [ 96.726154][ T7408] tomoyo_realpath_from_path+0x18f/0x6e0 [ 96.726173][ T7408] tomoyo_path_number_perm+0x245/0x580 [ 96.726184][ T7408] ? tomoyo_path_number_perm+0x237/0x580 [ 96.726196][ T7408] ? find_held_lock+0x1/0x80 [ 96.726210][ T7408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.726237][ T7408] ? do_raw_spin_unlock+0x172/0x230 [ 96.726248][ T7408] ? current_check_access_path+0x33c/0x460 [ 96.726261][ T7408] ? __pfx_current_check_access_path+0x10/0x10 [ 96.726272][ T7408] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 96.726283][ T7408] ? lookup_dcache+0x66/0x170 [ 96.726298][ T7408] tomoyo_path_mkdir+0x9b/0xe0 [ 96.726313][ T7408] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 96.726333][ T7408] security_path_mkdir+0x154/0x2f0 [ 96.726348][ T7408] do_mkdirat+0x175/0x3e0 [ 96.726363][ T7408] ? __pfx_do_mkdirat+0x10/0x10 [ 96.726377][ T7408] ? getname_flags.part.0+0x1c5/0x550 [ 96.726391][ T7408] __x64_sys_mkdirat+0x83/0xb0 [ 96.726405][ T7408] do_syscall_64+0xcd/0x4c0 [ 96.726420][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.726431][ T7408] RIP: 0033:0x7fd3cb38e929 [ 96.726440][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.726450][ T7408] RSP: 002b:00007fd3cc25c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 96.726460][ T7408] RAX: ffffffffffffffda RBX: 00007fd3cb5b5fa0 RCX: 00007fd3cb38e929 [ 96.726466][ T7408] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 96.726472][ T7408] RBP: 00007fd3cc25c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.726478][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.726484][ T7408] R13: 0000000000000000 R14: 00007fd3cb5b5fa0 R15: 00007fff7a4baf78 [ 96.726498][ T7408] [ 96.726509][ T7408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.753374][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.815281][ T7404] kvm: kvm [7403]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 96.836036][ T7404] kvm: kvm [7403]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 96.842962][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.864377][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.892703][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.899605][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.265'. [ 96.912765][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.928695][ T7425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.939905][ T7425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.942193][ T7425] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 96.943378][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 96.946178][ T7425] bond1: (slave vcan1): Error -95 calling set_mac_address [ 96.973079][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 97.002867][ T5950] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 97.034096][ T7431] block nbd8: NBD_DISCONNECT [ 97.034506][ T5950] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 97.039437][ T7431] block nbd8: Send disconnect failed -22 [ 97.039477][ T5950] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 97.045609][ T7430] block nbd8: Disconnected due to user request. [ 97.048388][ T7430] block nbd8: shutting down sockets [ 97.058335][ T5950] usb 10-1: USB disconnect, device number 11 [ 97.173555][ T7434] kvm: pic: non byte write [ 97.536636][ T7454] FAULT_INJECTION: forcing a failure. [ 97.536636][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 97.540681][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.7.274 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 97.540696][ T7454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.540703][ T7454] Call Trace: [ 97.540707][ T7454] [ 97.540711][ T7454] dump_stack_lvl+0x16c/0x1f0 [ 97.540742][ T7454] should_fail_ex+0x512/0x640 [ 97.540760][ T7454] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 97.540776][ T7454] should_failslab+0xc2/0x120 [ 97.540792][ T7454] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 97.540806][ T7454] ? ovl_alloc_inode+0x25/0x190 [ 97.540818][ T7454] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 97.540826][ T7454] ovl_alloc_inode+0x25/0x190 [ 97.540835][ T7454] alloc_inode+0x61/0x240 [ 97.540846][ T7454] new_inode+0x22/0x1c0 [ 97.540858][ T7454] ovl_new_inode+0x1d/0x50 [ 97.540869][ T7454] ovl_create_object+0x17c/0x300 [ 97.540883][ T7454] ? __pfx_ovl_create_object+0x10/0x10 [ 97.540898][ T7454] ? __pfx_ovl_permission+0x10/0x10 [ 97.540907][ T7454] ? bpf_lsm_inode_permission+0x9/0x10 [ 97.540921][ T7454] ? security_inode_permission+0xbf/0x260 [ 97.540938][ T7454] ovl_mkdir+0x2a/0x40 [ 97.540950][ T7454] vfs_mkdir+0x593/0x8c0 [ 97.540963][ T7454] do_mkdirat+0x304/0x3e0 [ 97.540979][ T7454] ? __pfx_do_mkdirat+0x10/0x10 [ 97.540993][ T7454] ? getname_flags.part.0+0x1c5/0x550 [ 97.541007][ T7454] __x64_sys_mkdirat+0x83/0xb0 [ 97.541022][ T7454] do_syscall_64+0xcd/0x4c0 [ 97.541038][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.541048][ T7454] RIP: 0033:0x7f7b1c18e929 [ 97.541057][ T7454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.541067][ T7454] RSP: 002b:00007f7b1d08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 97.541077][ T7454] RAX: ffffffffffffffda RBX: 00007f7b1c3b5fa0 RCX: 00007f7b1c18e929 [ 97.541083][ T7454] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 97.541090][ T7454] RBP: 00007f7b1d08c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.541095][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.541101][ T7454] R13: 0000000000000000 R14: 00007f7b1c3b5fa0 R15: 00007fff81a7db78 [ 97.541115][ T7454] [ 97.650471][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.8.277'. [ 97.943709][ T7481] FAULT_INJECTION: forcing a failure. [ 97.943709][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 97.947827][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.6.284 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 97.947842][ T7481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.947849][ T7481] Call Trace: [ 97.947853][ T7481] [ 97.947857][ T7481] dump_stack_lvl+0x16c/0x1f0 [ 97.947874][ T7481] should_fail_ex+0x512/0x640 [ 97.947888][ T7481] ? fs_reclaim_acquire+0xae/0x150 [ 97.947901][ T7481] should_failslab+0xc2/0x120 [ 97.947916][ T7481] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 97.947930][ T7481] ? security_inode_alloc+0x3b/0x2b0 [ 97.947945][ T7481] security_inode_alloc+0x3b/0x2b0 [ 97.947958][ T7481] inode_init_always_gfp+0xce4/0x1030 [ 97.947975][ T7481] alloc_inode+0x86/0x240 [ 97.947986][ T7481] new_inode+0x22/0x1c0 [ 97.947998][ T7481] ovl_new_inode+0x1d/0x50 [ 97.948009][ T7481] ovl_create_object+0x17c/0x300 [ 97.948023][ T7481] ? __pfx_ovl_create_object+0x10/0x10 [ 97.948038][ T7481] ? __pfx_ovl_permission+0x10/0x10 [ 97.948047][ T7481] ? bpf_lsm_inode_permission+0x9/0x10 [ 97.948061][ T7481] ? security_inode_permission+0xbf/0x260 [ 97.948077][ T7481] ovl_mkdir+0x2a/0x40 [ 97.948090][ T7481] vfs_mkdir+0x593/0x8c0 [ 97.948104][ T7481] do_mkdirat+0x304/0x3e0 [ 97.948119][ T7481] ? __pfx_do_mkdirat+0x10/0x10 [ 97.948134][ T7481] ? getname_flags.part.0+0x1c5/0x550 [ 97.948147][ T7481] __x64_sys_mkdirat+0x83/0xb0 [ 97.948162][ T7481] do_syscall_64+0xcd/0x4c0 [ 97.948178][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.948188][ T7481] RIP: 0033:0x7febe4d8e929 [ 97.948197][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.948206][ T7481] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 97.948216][ T7481] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 97.948223][ T7481] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 97.948233][ T7481] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 97.948239][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.948244][ T7481] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 97.948258][ T7481] [ 98.063647][ T7499] xt_policy: too many policy elements [ 98.116824][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 98.116835][ T40] audit: type=1400 audit(1752268717.154:390): avc: denied { create } for pid=7493 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.129750][ T40] audit: type=1400 audit(1752268717.154:391): avc: denied { accept } for pid=7493 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.202039][ T40] audit: type=1400 audit(1752268717.234:392): avc: denied { remount } for pid=7517 comm="syz.8.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.210446][ T40] audit: type=1400 audit(1752268717.244:393): avc: denied { write } for pid=7496 comm="syz.7.289" path="socket:[18942]" dev="sockfs" ino=18942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.246429][ T40] audit: type=1400 audit(1752268717.284:394): avc: denied { setopt } for pid=7523 comm="syz.7.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.258566][ T7524] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 98.261315][ T40] audit: type=1400 audit(1752268717.294:395): avc: denied { mount } for pid=7525 comm="syz.8.296" name="/" dev="ramfs" ino=16125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.282921][ T40] audit: type=1400 audit(1752268717.324:396): avc: denied { remount } for pid=7527 comm="syz.6.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.283785][ T7526] overlayfs: workdir and upperdir must be separate subtrees [ 98.292398][ T40] audit: type=1400 audit(1752268717.324:397): avc: denied { mounton } for pid=7525 comm="syz.8.296" path="/bus" dev="ramfs" ino=18027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 98.298970][ T7529] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.314003][ T7531] FAULT_INJECTION: forcing a failure. [ 98.314003][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 98.314504][ T7528] ipvlan2: entered promiscuous mode [ 98.318740][ T7531] CPU: 3 UID: 0 PID: 7531 Comm: syz.7.299 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 98.318761][ T7531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.318771][ T7531] Call Trace: [ 98.318776][ T7531] [ 98.318783][ T7531] dump_stack_lvl+0x16c/0x1f0 [ 98.318807][ T7531] should_fail_ex+0x512/0x640 [ 98.318827][ T7531] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 98.318863][ T7531] should_failslab+0xc2/0x120 [ 98.318886][ T7531] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 98.318903][ T7531] ? __lock_acquire+0xb8a/0x1c90 [ 98.318917][ T7531] ? prepare_creds+0x2c/0x7d0 [ 98.318937][ T7531] prepare_creds+0x2c/0x7d0 [ 98.318955][ T7531] ovl_setup_cred_for_create+0x25/0x300 [ 98.318977][ T7531] ovl_create_or_link+0x64e/0x820 [ 98.319000][ T7531] ? inode_init_owner+0x2d6/0x3e0 [ 98.319021][ T7531] ovl_create_object+0x266/0x300 [ 98.319058][ T7531] ? __pfx_ovl_create_object+0x10/0x10 [ 98.319082][ T7531] ? __pfx_ovl_permission+0x10/0x10 [ 98.319095][ T7531] ? bpf_lsm_inode_permission+0x9/0x10 [ 98.319116][ T7531] ? security_inode_permission+0xbf/0x260 [ 98.319141][ T7531] ovl_mkdir+0x2a/0x40 [ 98.319160][ T7531] vfs_mkdir+0x593/0x8c0 [ 98.319176][ T7531] do_mkdirat+0x304/0x3e0 [ 98.319204][ T7531] ? __pfx_do_mkdirat+0x10/0x10 [ 98.319225][ T7531] ? getname_flags.part.0+0x1c5/0x550 [ 98.319247][ T7531] __x64_sys_mkdirat+0x83/0xb0 [ 98.319264][ T7531] do_syscall_64+0xcd/0x4c0 [ 98.319287][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.319304][ T7531] RIP: 0033:0x7f7b1c18e929 [ 98.319316][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.319331][ T7531] RSP: 002b:00007f7b1d08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 98.319344][ T7531] RAX: ffffffffffffffda RBX: 00007f7b1c3b5fa0 RCX: 00007f7b1c18e929 [ 98.319351][ T7531] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 98.319361][ T7531] RBP: 00007f7b1d08c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.319370][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.319379][ T7531] R13: 0000000000000000 R14: 00007f7b1c3b5fa0 R15: 00007fff81a7db78 [ 98.319402][ T7531] [ 98.358087][ T7526] SELinux: syz.8.296 (7526) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.379418][ T7528] No source specified [ 98.394567][ T7526] overlay: Unknown parameter 'euid<00000000000000000000' [ 98.448971][ T7545] SELinux: policydb string does not match my string SE Linux [ 98.450845][ T40] audit: type=1400 audit(1752268717.484:398): avc: denied { load_policy } for pid=7544 comm="syz.8.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.453178][ T7545] SELinux: failed to load policy [ 98.468569][ T40] audit: type=1400 audit(1752268717.504:399): avc: denied { create } for pid=7544 comm="syz.8.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 98.472129][ T7547] pimreg: entered allmulticast mode [ 98.607622][ T7566] FAULT_INJECTION: forcing a failure. [ 98.607622][ T7566] name failslab, interval 1, probability 0, space 0, times 0 [ 98.611679][ T7566] CPU: 0 UID: 0 PID: 7566 Comm: syz.6.309 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 98.611693][ T7566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.611700][ T7566] Call Trace: [ 98.611704][ T7566] [ 98.611709][ T7566] dump_stack_lvl+0x16c/0x1f0 [ 98.611727][ T7566] should_fail_ex+0x512/0x640 [ 98.611741][ T7566] ? __kmalloc_noprof+0xbf/0x510 [ 98.611755][ T7566] ? lsm_blob_alloc+0x68/0x90 [ 98.611765][ T7566] should_failslab+0xc2/0x120 [ 98.611780][ T7566] __kmalloc_noprof+0xd2/0x510 [ 98.611797][ T7566] lsm_blob_alloc+0x68/0x90 [ 98.611807][ T7566] security_prepare_creds+0x30/0x270 [ 98.611823][ T7566] prepare_creds+0x56f/0x7d0 [ 98.611836][ T7566] ovl_setup_cred_for_create+0x25/0x300 [ 98.611851][ T7566] ovl_create_or_link+0x64e/0x820 [ 98.611866][ T7566] ? inode_init_owner+0x2d6/0x3e0 [ 98.611883][ T7566] ovl_create_object+0x266/0x300 [ 98.611896][ T7566] ? __pfx_ovl_create_object+0x10/0x10 [ 98.611911][ T7566] ? __pfx_ovl_permission+0x10/0x10 [ 98.611920][ T7566] ? bpf_lsm_inode_permission+0x9/0x10 [ 98.611935][ T7566] ? security_inode_permission+0xbf/0x260 [ 98.611951][ T7566] ovl_mkdir+0x2a/0x40 [ 98.611963][ T7566] vfs_mkdir+0x593/0x8c0 [ 98.611977][ T7566] do_mkdirat+0x304/0x3e0 [ 98.611993][ T7566] ? __pfx_do_mkdirat+0x10/0x10 [ 98.612007][ T7566] ? getname_flags.part.0+0x1c5/0x550 [ 98.612021][ T7566] __x64_sys_mkdirat+0x83/0xb0 [ 98.612036][ T7566] do_syscall_64+0xcd/0x4c0 [ 98.612052][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.612062][ T7566] RIP: 0033:0x7febe4d8e929 [ 98.612071][ T7566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.612081][ T7566] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 98.612091][ T7566] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 98.612097][ T7566] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 98.612103][ T7566] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 98.612109][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.612115][ T7566] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 98.612128][ T7566] [ 98.735763][ T7569] trusted_key: syz.6.310 sent an empty control message without MSG_MORE. [ 98.782398][ T7574] loop6: detected capacity change from 0 to 7 [ 98.787496][ T6812] Dev loop6: unable to read RDB block 7 [ 98.789325][ T6812] loop6: AHDI p1 [ 98.790501][ T6812] loop6: partition table partially beyond EOD, truncated [ 98.794552][ T7574] Dev loop6: unable to read RDB block 7 [ 98.796363][ T7574] loop6: AHDI p1 [ 98.797636][ T7574] loop6: partition table partially beyond EOD, truncated [ 98.836756][ T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.936080][ T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.966231][ T7586] FAULT_INJECTION: forcing a failure. [ 98.966231][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 98.970412][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.5.318 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 98.970426][ T7586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.970433][ T7586] Call Trace: [ 98.970437][ T7586] [ 98.970441][ T7586] dump_stack_lvl+0x16c/0x1f0 [ 98.970459][ T7586] should_fail_ex+0x512/0x640 [ 98.970472][ T7586] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 98.970488][ T7586] should_failslab+0xc2/0x120 [ 98.970504][ T7586] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 98.970518][ T7586] ? __d_alloc+0x31/0xaa0 [ 98.970539][ T7586] __d_alloc+0x31/0xaa0 [ 98.970557][ T7586] d_alloc+0x4a/0x1e0 [ 98.970573][ T7586] d_alloc_parallel+0xe3/0x12e0 [ 98.970584][ T7586] ? find_held_lock+0x2b/0x80 [ 98.970598][ T7586] ? avc_has_perm_noaudit+0x117/0x3b0 [ 98.970611][ T7586] ? map_id_range_up+0x2ce/0x3b0 [ 98.970624][ T7586] ? __pfx_d_alloc_parallel+0x10/0x10 [ 98.970638][ T7586] ? lockdep_init_map_type+0x5c/0x280 [ 98.970649][ T7586] ? lockdep_init_map_type+0x5c/0x280 [ 98.970662][ T7586] __lookup_slow+0x193/0x460 [ 98.970673][ T7586] ? __pfx___lookup_slow+0x10/0x10 [ 98.970686][ T7586] ? vm_events_fold_cpu+0x20/0x180 [ 98.970701][ T7586] ? vm_events_fold_cpu+0x20/0x180 [ 98.970713][ T7586] ? d_lookup+0xe7/0x190 [ 98.970727][ T7586] lookup_one+0x115/0x170 [ 98.970739][ T7586] ovl_lookup_temp+0x1a8/0x2b0 [ 98.970753][ T7586] ? __pfx_ovl_lookup_temp+0x10/0x10 [ 98.970767][ T7586] ? lookup_dcache+0x66/0x170 [ 98.970778][ T7586] ? lookup_one+0x124/0x170 [ 98.970790][ T7586] ovl_create_over_whiteout+0x74d/0xfc0 [ 98.970807][ T7586] ? selinux_determine_inode_label+0x2b8/0x400 [ 98.970822][ T7586] ? __pfx_ovl_create_over_whiteout+0x10/0x10 [ 98.970837][ T7586] ? selinux_dentry_create_files_as+0x1e2/0x290 [ 98.970852][ T7586] ? __pfx_selinux_dentry_create_files_as+0x10/0x10 [ 98.970867][ T7586] ? hook_cred_prepare+0x26b/0x320 [ 98.970883][ T7586] ? selinux_cred_prepare+0x13/0x1e0 [ 98.970895][ T7586] ? bpf_lsm_dentry_create_files_as+0x9/0x10 [ 98.970908][ T7586] ? security_dentry_create_files_as+0x21d/0x260 [ 98.970926][ T7586] ovl_create_or_link+0x55a/0x820 [ 98.970941][ T7586] ? inode_init_owner+0x2d6/0x3e0 [ 98.970957][ T7586] ovl_create_object+0x266/0x300 [ 98.970971][ T7586] ? __pfx_ovl_create_object+0x10/0x10 [ 98.970986][ T7586] ? __pfx_ovl_permission+0x10/0x10 [ 98.970995][ T7586] ? bpf_lsm_inode_permission+0x9/0x10 [ 98.971009][ T7586] ? security_inode_permission+0xbf/0x260 [ 98.971025][ T7586] ovl_mkdir+0x2a/0x40 [ 98.971038][ T7586] vfs_mkdir+0x593/0x8c0 [ 98.971051][ T7586] do_mkdirat+0x304/0x3e0 [ 98.971066][ T7586] ? __pfx_do_mkdirat+0x10/0x10 [ 98.971080][ T7586] ? getname_flags.part.0+0x1c5/0x550 [ 98.971094][ T7586] __x64_sys_mkdirat+0x83/0xb0 [ 98.971109][ T7586] do_syscall_64+0xcd/0x4c0 [ 98.971125][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.971136][ T7586] RIP: 0033:0x7f438cf8e929 [ 98.971144][ T7586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.971154][ T7586] RSP: 002b:00007f438dd33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 98.971163][ T7586] RAX: ffffffffffffffda RBX: 00007f438d1b5fa0 RCX: 00007f438cf8e929 [ 98.971170][ T7586] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 98.971176][ T7586] RBP: 00007f438dd33090 R08: 0000000000000000 R09: 0000000000000000 [ 98.971181][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.971187][ T7586] R13: 0000000000000000 R14: 00007f438d1b5fa0 R15: 00007ffdb63daea8 [ 98.971201][ T7586] [ 99.095798][ T7588] vcan1: entered allmulticast mode [ 99.107550][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.116692][ T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.145868][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.154486][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.157971][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.160684][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.212015][ T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.335455][ T46] bridge_slave_1: left allmulticast mode [ 99.337315][ T46] bridge_slave_1: left promiscuous mode [ 99.339173][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.342534][ T46] bridge_slave_0: left allmulticast mode [ 99.344546][ T46] bridge_slave_0: left promiscuous mode [ 99.346566][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.588552][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.593402][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.596796][ T46] bond0 (unregistering): Released all slaves [ 99.653680][ T46] bond1 (unregistering): Released all slaves [ 99.659472][ T7589] chnl_net:caif_netlink_parms(): no params data found [ 99.732241][ T46] tipc: Disabling bearer [ 99.736037][ T7629] FAULT_INJECTION: forcing a failure. [ 99.736037][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 99.738460][ T46] tipc: Left network mode [ 99.749772][ T7629] CPU: 3 UID: 0 PID: 7629 Comm: syz.5.328 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 99.749789][ T7629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.749795][ T7629] Call Trace: [ 99.749799][ T7629] [ 99.749803][ T7629] dump_stack_lvl+0x16c/0x1f0 [ 99.749822][ T7629] should_fail_ex+0x512/0x640 [ 99.749836][ T7629] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 99.749852][ T7629] should_failslab+0xc2/0x120 [ 99.749867][ T7629] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 99.749893][ T7629] ? shmem_alloc_inode+0x25/0x50 [ 99.749912][ T7629] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 99.749926][ T7629] shmem_alloc_inode+0x25/0x50 [ 99.749941][ T7629] alloc_inode+0x61/0x240 [ 99.749953][ T7629] new_inode+0x22/0x1c0 [ 99.749964][ T7629] shmem_get_inode+0x19a/0xfb0 [ 99.749993][ T7629] shmem_mknod+0x1a8/0x450 [ 99.750007][ T7629] shmem_mkdir+0x31/0x80 [ 99.750017][ T7629] vfs_mkdir+0x593/0x8c0 [ 99.750031][ T7629] ovl_create_real+0x479/0x750 [ 99.750046][ T7629] ovl_create_over_whiteout+0x77e/0xfc0 [ 99.750063][ T7629] ? selinux_determine_inode_label+0x2b8/0x400 [ 99.750079][ T7629] ? __pfx_ovl_create_over_whiteout+0x10/0x10 [ 99.750094][ T7629] ? selinux_dentry_create_files_as+0x1e2/0x290 [ 99.750109][ T7629] ? __pfx_selinux_dentry_create_files_as+0x10/0x10 [ 99.750124][ T7629] ? hook_cred_prepare+0x26b/0x320 [ 99.750140][ T7629] ? selinux_cred_prepare+0x13/0x1e0 [ 99.750152][ T7629] ? bpf_lsm_dentry_create_files_as+0x9/0x10 [ 99.750165][ T7629] ? security_dentry_create_files_as+0x21d/0x260 [ 99.750187][ T7629] ovl_create_or_link+0x55a/0x820 [ 99.750202][ T7629] ? inode_init_owner+0x2d6/0x3e0 [ 99.750219][ T7629] ovl_create_object+0x266/0x300 [ 99.750232][ T7629] ? __pfx_ovl_create_object+0x10/0x10 [ 99.750248][ T7629] ? __pfx_ovl_permission+0x10/0x10 [ 99.750256][ T7629] ? bpf_lsm_inode_permission+0x9/0x10 [ 99.750270][ T7629] ? security_inode_permission+0xbf/0x260 [ 99.750287][ T7629] ovl_mkdir+0x2a/0x40 [ 99.750299][ T7629] vfs_mkdir+0x593/0x8c0 [ 99.750312][ T7629] do_mkdirat+0x304/0x3e0 [ 99.750328][ T7629] ? __pfx_do_mkdirat+0x10/0x10 [ 99.750342][ T7629] ? getname_flags.part.0+0x1c5/0x550 [ 99.750356][ T7629] __x64_sys_mkdirat+0x83/0xb0 [ 99.750371][ T7629] do_syscall_64+0xcd/0x4c0 [ 99.750387][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.750398][ T7629] RIP: 0033:0x7f438cf8e929 [ 99.750407][ T7629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.750417][ T7629] RSP: 002b:00007f438dd33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 99.750427][ T7629] RAX: ffffffffffffffda RBX: 00007f438d1b5fa0 RCX: 00007f438cf8e929 [ 99.750433][ T7629] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 99.750440][ T7629] RBP: 00007f438dd33090 R08: 0000000000000000 R09: 0000000000000000 [ 99.750445][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.750451][ T7629] R13: 0000000000000000 R14: 00007f438d1b5fa0 R15: 00007ffdb63daea8 [ 99.750465][ T7629] [ 99.850928][ C3] vkms_vblank_simulate: vblank timer overrun [ 99.911284][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.919316][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.921600][ T7589] bridge_slave_0: entered allmulticast mode [ 99.925432][ T7589] bridge_slave_0: entered promiscuous mode [ 99.928501][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.930772][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.933508][ T7589] bridge_slave_1: entered allmulticast mode [ 99.936144][ T7589] bridge_slave_1: entered promiscuous mode [ 100.013918][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.019621][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.097440][ T7589] team0: Port device team_slave_0 added [ 100.101194][ T7589] team0: Port device team_slave_1 added [ 100.104991][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.6.337'. [ 100.137822][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.140124][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.148602][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.152903][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.155142][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.163411][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.338'. [ 100.164067][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.205028][ T7659] FAULT_INJECTION: forcing a failure. [ 100.205028][ T7659] name failslab, interval 1, probability 0, space 0, times 0 [ 100.208973][ T7659] CPU: 0 UID: 0 PID: 7659 Comm: syz.5.340 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 100.208987][ T7659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.208994][ T7659] Call Trace: [ 100.208997][ T7659] [ 100.209002][ T7659] dump_stack_lvl+0x16c/0x1f0 [ 100.209021][ T7659] should_fail_ex+0x512/0x640 [ 100.209035][ T7659] ? fs_reclaim_acquire+0xae/0x150 [ 100.209047][ T7659] should_failslab+0xc2/0x120 [ 100.209062][ T7659] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 100.209077][ T7659] ? security_inode_alloc+0x3b/0x2b0 [ 100.209092][ T7659] security_inode_alloc+0x3b/0x2b0 [ 100.209105][ T7659] inode_init_always_gfp+0xce4/0x1030 [ 100.209122][ T7659] alloc_inode+0x86/0x240 [ 100.209133][ T7659] new_inode+0x22/0x1c0 [ 100.209144][ T7659] shmem_get_inode+0x19a/0xfb0 [ 100.209158][ T7659] shmem_mknod+0x1a8/0x450 [ 100.209174][ T7659] shmem_mkdir+0x31/0x80 [ 100.209185][ T7659] vfs_mkdir+0x593/0x8c0 [ 100.209198][ T7659] ovl_create_real+0x479/0x750 [ 100.209213][ T7659] ovl_create_over_whiteout+0x77e/0xfc0 [ 100.209230][ T7659] ? selinux_determine_inode_label+0x2b8/0x400 [ 100.209246][ T7659] ? __pfx_ovl_create_over_whiteout+0x10/0x10 [ 100.209261][ T7659] ? selinux_dentry_create_files_as+0x1e2/0x290 [ 100.209276][ T7659] ? __pfx_selinux_dentry_create_files_as+0x10/0x10 [ 100.209291][ T7659] ? hook_cred_prepare+0x26b/0x320 [ 100.209307][ T7659] ? selinux_cred_prepare+0x13/0x1e0 [ 100.209319][ T7659] ? bpf_lsm_dentry_create_files_as+0x9/0x10 [ 100.209333][ T7659] ? security_dentry_create_files_as+0x21d/0x260 [ 100.209350][ T7659] ovl_create_or_link+0x55a/0x820 [ 100.209365][ T7659] ? inode_init_owner+0x2d6/0x3e0 [ 100.209382][ T7659] ovl_create_object+0x266/0x300 [ 100.209395][ T7659] ? __pfx_ovl_create_object+0x10/0x10 [ 100.209410][ T7659] ? __pfx_ovl_permission+0x10/0x10 [ 100.209419][ T7659] ? bpf_lsm_inode_permission+0x9/0x10 [ 100.209433][ T7659] ? security_inode_permission+0xbf/0x260 [ 100.209449][ T7659] ovl_mkdir+0x2a/0x40 [ 100.209462][ T7659] vfs_mkdir+0x593/0x8c0 [ 100.209475][ T7659] do_mkdirat+0x304/0x3e0 [ 100.209490][ T7659] ? __pfx_do_mkdirat+0x10/0x10 [ 100.209504][ T7659] ? getname_flags.part.0+0x1c5/0x550 [ 100.209518][ T7659] __x64_sys_mkdirat+0x83/0xb0 [ 100.209532][ T7659] do_syscall_64+0xcd/0x4c0 [ 100.209548][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.209559][ T7659] RIP: 0033:0x7f438cf8e929 [ 100.209568][ T7659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.209578][ T7659] RSP: 002b:00007f438dd33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.209588][ T7659] RAX: ffffffffffffffda RBX: 00007f438d1b5fa0 RCX: 00007f438cf8e929 [ 100.209594][ T7659] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 100.209600][ T7659] RBP: 00007f438dd33090 R08: 0000000000000000 R09: 0000000000000000 [ 100.209606][ T7659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.209611][ T7659] R13: 0000000000000000 R14: 00007f438d1b5fa0 R15: 00007ffdb63daea8 [ 100.209625][ T7659] [ 100.316450][ T46] hsr_slave_0: left promiscuous mode [ 100.318628][ T46] hsr_slave_1: left promiscuous mode [ 100.321143][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.323648][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.326756][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.329112][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.347806][ T46] veth1_macvtap: left promiscuous mode [ 100.349623][ T46] veth0_macvtap: left promiscuous mode [ 100.351394][ T46] veth1_vlan: left promiscuous mode [ 100.353225][ T46] veth0_vlan: left promiscuous mode [ 100.918298][ T46] team0 (unregistering): Port device team_slave_1 removed [ 100.981562][ T46] team0 (unregistering): Port device team_slave_0 removed [ 101.047774][ T7663] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 101.078912][ T7688] netlink: 14212 bytes leftover after parsing attributes in process `syz.8.348'. [ 101.225597][ T5963] Bluetooth: hci0: command tx timeout [ 101.418167][ T7682] @: renamed from vlan0 (while UP) [ 101.422204][ T7681] netlink: 32 bytes leftover after parsing attributes in process `syz.6.346'. [ 101.472451][ T7693] FAULT_INJECTION: forcing a failure. [ 101.472451][ T7693] name failslab, interval 1, probability 0, space 0, times 0 [ 101.477394][ T7589] hsr_slave_0: entered promiscuous mode [ 101.479006][ T7693] CPU: 0 UID: 0 PID: 7693 Comm: syz.6.349 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 101.479037][ T7693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.479043][ T7693] Call Trace: [ 101.479047][ T7693] [ 101.479052][ T7693] dump_stack_lvl+0x16c/0x1f0 [ 101.479070][ T7693] should_fail_ex+0x512/0x640 [ 101.479084][ T7693] ? fs_reclaim_acquire+0xae/0x150 [ 101.479096][ T7693] ? security_inode_init_security+0x13f/0x390 [ 101.479108][ T7693] should_failslab+0xc2/0x120 [ 101.479123][ T7693] __kmalloc_noprof+0xd2/0x510 [ 101.479141][ T7693] security_inode_init_security+0x13f/0x390 [ 101.479152][ T7693] ? __pfx_shmem_initxattrs+0x10/0x10 [ 101.479168][ T7693] ? __pfx_security_inode_init_security+0x10/0x10 [ 101.479184][ T7693] shmem_mknod+0x22e/0x450 [ 101.479197][ T7693] shmem_mkdir+0x31/0x80 [ 101.479207][ T7693] vfs_mkdir+0x593/0x8c0 [ 101.479221][ T7693] ovl_create_real+0x479/0x750 [ 101.479237][ T7693] ovl_create_over_whiteout+0x77e/0xfc0 [ 101.479253][ T7693] ? selinux_determine_inode_label+0x2b8/0x400 [ 101.479269][ T7693] ? __pfx_ovl_create_over_whiteout+0x10/0x10 [ 101.479284][ T7693] ? selinux_dentry_create_files_as+0x1e2/0x290 [ 101.479299][ T7693] ? __pfx_selinux_dentry_create_files_as+0x10/0x10 [ 101.479314][ T7693] ? hook_cred_prepare+0x26b/0x320 [ 101.479330][ T7693] ? selinux_cred_prepare+0x13/0x1e0 [ 101.479342][ T7693] ? bpf_lsm_dentry_create_files_as+0x9/0x10 [ 101.479355][ T7693] ? security_dentry_create_files_as+0x21d/0x260 [ 101.479373][ T7693] ovl_create_or_link+0x55a/0x820 [ 101.479388][ T7693] ? inode_init_owner+0x2d6/0x3e0 [ 101.479411][ T7693] ovl_create_object+0x266/0x300 [ 101.479424][ T7693] ? __pfx_ovl_create_object+0x10/0x10 [ 101.479439][ T7693] ? __pfx_ovl_permission+0x10/0x10 [ 101.479448][ T7693] ? bpf_lsm_inode_permission+0x9/0x10 [ 101.479462][ T7693] ? security_inode_permission+0xbf/0x260 [ 101.479479][ T7693] ovl_mkdir+0x2a/0x40 [ 101.479491][ T7693] vfs_mkdir+0x593/0x8c0 [ 101.479504][ T7693] do_mkdirat+0x304/0x3e0 [ 101.479520][ T7693] ? __pfx_do_mkdirat+0x10/0x10 [ 101.479534][ T7693] ? getname_flags.part.0+0x1c5/0x550 [ 101.479548][ T7693] __x64_sys_mkdirat+0x83/0xb0 [ 101.479563][ T7693] do_syscall_64+0xcd/0x4c0 [ 101.479578][ T7693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.479589][ T7693] RIP: 0033:0x7febe4d8e929 [ 101.479598][ T7693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.479608][ T7693] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 101.479618][ T7693] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 101.479624][ T7693] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 101.479630][ T7693] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 101.479636][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.479642][ T7693] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 101.479655][ T7693] [ 101.594974][ T7589] hsr_slave_1: entered promiscuous mode [ 101.597122][ T7589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.599529][ T7589] Cannot create hsr debugfs directory [ 101.820838][ T7728] netlink: 152 bytes leftover after parsing attributes in process `syz.5.357'. [ 101.843761][ T7728] overlay: Unknown parameter 'dont_hash' [ 101.853793][ T7589] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.863646][ T7589] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.873437][ T7589] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.877031][ T7735] FAULT_INJECTION: forcing a failure. [ 101.877031][ T7735] name failslab, interval 1, probability 0, space 0, times 0 [ 101.880918][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.6.359 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 101.880932][ T7735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.880939][ T7735] Call Trace: [ 101.880943][ T7735] [ 101.880947][ T7735] dump_stack_lvl+0x16c/0x1f0 [ 101.880965][ T7735] should_fail_ex+0x512/0x640 [ 101.880979][ T7735] ? fs_reclaim_acquire+0xae/0x150 [ 101.880991][ T7735] should_failslab+0xc2/0x120 [ 101.881007][ T7735] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 101.881021][ T7735] ? security_inode_alloc+0x3b/0x2b0 [ 101.881036][ T7735] security_inode_alloc+0x3b/0x2b0 [ 101.881049][ T7735] inode_init_always_gfp+0xce4/0x1030 [ 101.881066][ T7735] alloc_inode+0x86/0x240 [ 101.881077][ T7735] new_inode+0x22/0x1c0 [ 101.881088][ T7735] shmem_get_inode+0x19a/0xfb0 [ 101.881102][ T7735] shmem_mknod+0x1a8/0x450 [ 101.881114][ T7735] shmem_mkdir+0x31/0x80 [ 101.881124][ T7735] vfs_mkdir+0x593/0x8c0 [ 101.881138][ T7735] ovl_create_real+0x479/0x750 [ 101.881153][ T7735] ovl_create_over_whiteout+0x77e/0xfc0 [ 101.881173][ T7735] ? selinux_determine_inode_label+0x2b8/0x400 [ 101.881188][ T7735] ? __pfx_ovl_create_over_whiteout+0x10/0x10 [ 101.881203][ T7735] ? selinux_dentry_create_files_as+0x1e2/0x290 [ 101.881218][ T7735] ? __pfx_selinux_dentry_create_files_as+0x10/0x10 [ 101.881233][ T7735] ? hook_cred_prepare+0x26b/0x320 [ 101.881249][ T7735] ? selinux_cred_prepare+0x13/0x1e0 [ 101.881261][ T7735] ? bpf_lsm_dentry_create_files_as+0x9/0x10 [ 101.881275][ T7735] ? security_dentry_create_files_as+0x21d/0x260 [ 101.881292][ T7735] ovl_create_or_link+0x55a/0x820 [ 101.881307][ T7735] ? inode_init_owner+0x2d6/0x3e0 [ 101.881324][ T7735] ovl_create_object+0x266/0x300 [ 101.881338][ T7735] ? __pfx_ovl_create_object+0x10/0x10 [ 101.881353][ T7735] ? __pfx_ovl_permission+0x10/0x10 [ 101.881362][ T7735] ? bpf_lsm_inode_permission+0x9/0x10 [ 101.881375][ T7735] ? security_inode_permission+0xbf/0x260 [ 101.881391][ T7735] ovl_mkdir+0x2a/0x40 [ 101.881404][ T7735] vfs_mkdir+0x593/0x8c0 [ 101.881417][ T7735] do_mkdirat+0x304/0x3e0 [ 101.881432][ T7735] ? __pfx_do_mkdirat+0x10/0x10 [ 101.881446][ T7735] ? getname_flags.part.0+0x1c5/0x550 [ 101.881460][ T7735] __x64_sys_mkdirat+0x83/0xb0 [ 101.881474][ T7735] do_syscall_64+0xcd/0x4c0 [ 101.881490][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.881501][ T7735] RIP: 0033:0x7febe4d8e929 [ 101.881509][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.881519][ T7735] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 101.881529][ T7735] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 101.881535][ T7735] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 101.881541][ T7735] RBP: 00007febe5bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 101.881547][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.881552][ T7735] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 101.881566][ T7735] [ 101.986858][ T7589] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 102.030494][ T7758] tipc: Enabling of bearer rejected, media not registered [ 102.065935][ T7755] hub 2-0:1.0: USB hub found [ 102.067817][ T7755] hub 2-0:1.0: 2 ports detected [ 102.083512][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.104579][ T7589] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.110608][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.113096][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.119354][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.121830][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.276870][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.430441][ T7589] veth0_vlan: entered promiscuous mode [ 102.433335][ T5950] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 102.436122][ T7589] veth1_vlan: entered promiscuous mode [ 102.461878][ T7791] netlink: 'syz.8.366': attribute type 2 has an invalid length. [ 102.466272][ T7589] veth0_macvtap: entered promiscuous mode [ 102.469932][ T7791] netlink: 'syz.8.366': attribute type 8 has an invalid length. [ 102.471052][ T7589] veth1_macvtap: entered promiscuous mode [ 102.472631][ T7791] netlink: 1148 bytes leftover after parsing attributes in process `syz.8.366'. [ 102.489369][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.497887][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.502764][ T7589] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.505495][ T7589] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.508201][ T7589] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.510976][ T7589] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.552351][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.554877][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.574371][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.577402][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.581231][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.8.368'. [ 102.582709][ T5950] usb 10-1: Using ep0 maxpacket: 8 [ 102.584173][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.8.368'. [ 102.588373][ T5950] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 102.591262][ T5950] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.594169][ T5950] usb 10-1: Product: syz [ 102.595511][ T5950] usb 10-1: Manufacturer: syz [ 102.601315][ T5950] usb 10-1: SerialNumber: syz [ 102.604394][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.8.368'. [ 102.607430][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.8.368'. [ 102.608182][ T5950] usb 10-1: config 0 descriptor?? [ 102.657016][ T7805] FAULT_INJECTION: forcing a failure. [ 102.657016][ T7805] name failslab, interval 1, probability 0, space 0, times 0 [ 102.660946][ T7805] CPU: 3 UID: 0 PID: 7805 Comm: syz.8.369 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 102.660972][ T7805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.660978][ T7805] Call Trace: [ 102.660983][ T7805] [ 102.660987][ T7805] dump_stack_lvl+0x16c/0x1f0 [ 102.661005][ T7805] should_fail_ex+0x512/0x640 [ 102.661019][ T7805] ? __kvmalloc_node_noprof+0x124/0x620 [ 102.661035][ T7805] should_failslab+0xc2/0x120 [ 102.661062][ T7805] __kvmalloc_node_noprof+0x137/0x620 [ 102.661075][ T7805] ? do_raw_spin_lock+0x12c/0x2b0 [ 102.661087][ T7805] ? find_held_lock+0x2b/0x80 [ 102.661099][ T7805] ? simple_xattr_alloc+0x41/0xa0 [ 102.661112][ T7805] ? simple_xattr_alloc+0x41/0xa0 [ 102.661121][ T7805] simple_xattr_alloc+0x41/0xa0 [ 102.661131][ T7805] shmem_initxattrs+0x127/0x5b0 [ 102.661147][ T7805] ? evm_inode_init_security+0x237/0x320 [ 102.661168][ T7805] security_inode_init_security+0x26e/0x390 [ 102.661181][ T7805] ? __pfx_shmem_initxattrs+0x10/0x10 [ 102.661197][ T7805] ? __pfx_security_inode_init_security+0x10/0x10 [ 102.661213][ T7805] shmem_mknod+0x22e/0x450 [ 102.661225][ T7805] shmem_mkdir+0x31/0x80 [ 102.661235][ T7805] vfs_mkdir+0x593/0x8c0 [ 102.661249][ T7805] ovl_create_real+0x479/0x750 [ 102.661264][ T7805] ovl_create_over_whiteout+0x77e/0xfc0 [ 102.661280][ T7805] ? selinux_determine_inode_label+0x2b8/0x400 [ 102.661296][ T7805] ? __pfx_ovl_create_over_whiteout+0x10/0x10 [ 102.661310][ T7805] ? selinux_dentry_create_files_as+0x1e2/0x290 [ 102.661326][ T7805] ? __pfx_selinux_dentry_create_files_as+0x10/0x10 [ 102.661341][ T7805] ? hook_cred_prepare+0x26b/0x320 [ 102.661357][ T7805] ? selinux_cred_prepare+0x13/0x1e0 [ 102.661369][ T7805] ? bpf_lsm_dentry_create_files_as+0x9/0x10 [ 102.661382][ T7805] ? security_dentry_create_files_as+0x21d/0x260 [ 102.661400][ T7805] ovl_create_or_link+0x55a/0x820 [ 102.661415][ T7805] ? inode_init_owner+0x2d6/0x3e0 [ 102.661432][ T7805] ovl_create_object+0x266/0x300 [ 102.661445][ T7805] ? __pfx_ovl_create_object+0x10/0x10 [ 102.661460][ T7805] ? __pfx_ovl_permission+0x10/0x10 [ 102.661469][ T7805] ? bpf_lsm_inode_permission+0x9/0x10 [ 102.661483][ T7805] ? security_inode_permission+0xbf/0x260 [ 102.661499][ T7805] ovl_mkdir+0x2a/0x40 [ 102.661512][ T7805] vfs_mkdir+0x593/0x8c0 [ 102.661525][ T7805] do_mkdirat+0x304/0x3e0 [ 102.661540][ T7805] ? __pfx_do_mkdirat+0x10/0x10 [ 102.661554][ T7805] ? getname_flags.part.0+0x1c5/0x550 [ 102.661568][ T7805] __x64_sys_mkdirat+0x83/0xb0 [ 102.661582][ T7805] do_syscall_64+0xcd/0x4c0 [ 102.661598][ T7805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.661609][ T7805] RIP: 0033:0x7fd3cb38e929 [ 102.661618][ T7805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.661628][ T7805] RSP: 002b:00007fd3cc25c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.661638][ T7805] RAX: ffffffffffffffda RBX: 00007fd3cb5b5fa0 RCX: 00007fd3cb38e929 [ 102.661644][ T7805] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 102.661650][ T7805] RBP: 00007fd3cc25c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.661656][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.661662][ T7805] R13: 0000000000000000 R14: 00007fd3cb5b5fa0 R15: 00007fff7a4baf78 [ 102.661675][ T7805] [ 102.818844][ T5950] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.828866][ T5950] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 102.833238][ T5950] usb 10-1: USB disconnect, device number 12 [ 102.866527][ T7827] syz_tun: entered allmulticast mode [ 102.869930][ T7827] tipc: Enabling of bearer rejected, already enabled [ 102.873147][ T7826] syz_tun: left allmulticast mode [ 102.903314][ T7833] fuse: Unknown parameter '0x0000000000000004lrootmode' [ 102.998668][ T7851] bridge_slave_0: left allmulticast mode [ 103.000611][ T7851] bridge_slave_0: left promiscuous mode [ 103.002644][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.009895][ T7851] bridge_slave_1: left allmulticast mode [ 103.011857][ T7851] bridge_slave_1: left promiscuous mode [ 103.016518][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.037059][ T7851] bond0: (slave bond_slave_0): Releasing backup interface [ 103.045005][ T7851] bond0: (slave bond_slave_1): Releasing backup interface [ 103.060955][ T7851] team0: Port device team_slave_0 removed [ 103.066967][ T7851] team0: Port device team_slave_1 removed [ 103.069162][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.071681][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.076245][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.079038][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.100721][ T7851] netlink: 'syz.8.378': attribute type 10 has an invalid length. [ 103.109293][ T7855] team0: Mode changed to "loadbalance" [ 103.121725][ T7851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.126857][ T7851] team0: Port device bond0 added [ 103.215535][ T7851] team0 (unregistering): Port device bond0 removed [ 103.223616][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 103.223626][ T40] audit: type=1400 audit(1752268722.264:432): avc: denied { accept } for pid=7861 comm="syz.9.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.223756][ T7866] overlayfs: missing 'lowerdir' [ 103.265274][ T40] audit: type=1400 audit(1752268722.304:433): avc: denied { create } for pid=7867 comm="syz.6.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.272445][ T7869] binder: 7867:7869 ioctl 400454ce ee00 returned -22 [ 103.275436][ T40] audit: type=1400 audit(1752268722.314:434): avc: denied { ioctl } for pid=7867 comm="syz.6.383" path="socket:[20743]" dev="sockfs" ino=20743 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.284391][ T7867] delete_channel: no stack [ 103.303059][ T5963] Bluetooth: hci0: command 0x041b tx timeout [ 103.329113][ T7874] vlan3: entered promiscuous mode [ 103.331318][ T7874] bridge0: entered promiscuous mode [ 103.504042][ T40] audit: type=1400 audit(1752268722.534:435): avc: denied { read } for pid=7888 comm="syz.6.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.510073][ T40] audit: type=1400 audit(1752268722.544:436): avc: denied { write } for pid=7881 comm="syz.8.386" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.521597][ T7882] binder: 7881:7882 ioctl 4008f50a 2000000000c0 returned -22 [ 103.711897][ T40] audit: type=1400 audit(1752268722.744:437): avc: denied { write } for pid=7909 comm="syz.9.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.718232][ T40] audit: type=1400 audit(1752268722.754:438): avc: denied { watch } for pid=7909 comm="syz.9.391" path="/4/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.757662][ T7913] syz_tun: entered allmulticast mode [ 103.760917][ T7913] tipc: Started in network mode [ 103.762463][ T7913] tipc: Node identity ac1414aa, cluster identity 4711 [ 103.767947][ T7913] tipc: Enabled bearer , priority 10 [ 103.770629][ T7912] syz_tun: left allmulticast mode [ 103.800201][ T7917] Cannot find set identified by id 0 to match [ 103.874544][ T7931] netlink: 'syz.9.395': attribute type 10 has an invalid length. [ 103.881763][ T7931] team0: Device hsr_slave_0 failed to register rx_handler [ 103.890830][ T7931] netlink: 'syz.9.395': attribute type 10 has an invalid length. [ 103.895481][ T7931] team0: Device hsr_slave_0 failed to register rx_handler [ 104.415142][ T7955] syz_tun: entered allmulticast mode [ 104.421339][ T7955] tipc: Enabling of bearer rejected, already enabled [ 104.427422][ T7954] syz_tun: left allmulticast mode [ 104.470723][ T40] audit: type=1326 audit(1752268723.504:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.6.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7ffc0000 [ 104.482796][ T40] audit: type=1326 audit(1752268723.504:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.6.402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7ffc0000 [ 104.492999][ T40] audit: type=1326 audit(1752268723.514:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7958 comm="syz.6.402" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7febe4d8e929 code=0x7ffc0000 [ 104.569158][ T7949] macsec0: entered promiscuous mode [ 104.570984][ T7949] macsec0: entered allmulticast mode [ 104.573309][ T7949] veth1_macvtap: entered allmulticast mode [ 104.648618][ T7972] bond0: entered promiscuous mode [ 104.650197][ T7972] bond_slave_0: entered promiscuous mode [ 104.651953][ T7972] bond_slave_1: entered promiscuous mode [ 104.654185][ T7972] bond0: entered allmulticast mode [ 104.655774][ T7972] bond_slave_0: entered allmulticast mode [ 104.657839][ T7972] bond_slave_1: entered allmulticast mode [ 104.894428][ T34] tipc: Node number set to 2886997162 [ 104.912753][ T7979] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 104.915421][ T7979] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.933071][ T7979] vhci_hcd vhci_hcd.0: Device attached [ 104.937593][ T7979] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 104.944872][ T7979] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.172682][ T6129] usb 55-1: new high-speed USB device number 2 using vhci_hcd [ 105.181148][ T8002] syz_tun: entered allmulticast mode [ 105.198778][ T8002] tipc: Enabling of bearer rejected, already enabled [ 105.202113][ T8001] syz_tun: left allmulticast mode [ 105.228892][ T8004] program syz.6.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.382764][ T5963] Bluetooth: hci0: command 0x041b tx timeout [ 105.420174][ T8017] sp0: Synchronizing with TNC [ 105.502751][ T8029] Bluetooth: MGMT ver 1.23 [ 105.558408][ T7994] vhci_hcd: connection reset by peer [ 105.567029][ T1148] vhci_hcd: stop threads [ 105.569220][ T1148] vhci_hcd: release socket [ 105.571570][ T1148] vhci_hcd: disconnect device [ 105.622011][ T8033] __nla_validate_parse: 4 callbacks suppressed [ 105.622022][ T8033] netlink: 68 bytes leftover after parsing attributes in process `syz.5.420'. [ 105.954681][ T8040] netlink: 596 bytes leftover after parsing attributes in process `syz.6.423'. [ 106.195093][ T5963] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 106.198392][ T5963] Bluetooth: hci6: Injecting HCI hardware error event [ 106.203148][ T5963] Bluetooth: hci6: hardware error 0x00 [ 106.279739][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 106.994012][ T8102] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 106.996092][ T8102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.001831][ T8102] vhci_hcd vhci_hcd.0: Device attached [ 107.012841][ T8101] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8) [ 107.015396][ T8101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.018283][ T8101] vhci_hcd vhci_hcd.0: Device attached [ 107.209098][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.451'. [ 107.220158][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.451'. [ 107.254442][ T9] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 107.412662][ T9] usb 14-1: Using ep0 maxpacket: 16 [ 107.416047][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.420097][ T9] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.423417][ T9] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.427332][ T9] usb 14-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 107.430234][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.440735][ T9] usb 14-1: config 0 descriptor?? [ 107.445955][ T8156] netlink: 'syz.5.452': attribute type 10 has an invalid length. [ 107.452405][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.456035][ T8156] bridge_slave_1: left allmulticast mode [ 107.458102][ T8156] bridge_slave_1: left promiscuous mode [ 107.460282][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.462894][ T5951] Bluetooth: hci0: command 0x041b tx timeout [ 107.470857][ T8156] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 107.644105][ T8106] usbip_core: unknown command [ 107.645678][ T8106] vhci_hcd: unknown pdu 0 [ 107.647156][ T8106] usbip_core: unknown command [ 107.651295][ T8101] mkiss: ax0: crc mode is auto. [ 107.658383][ T46] vhci_hcd: stop threads [ 107.660070][ T46] vhci_hcd: release socket [ 107.662098][ T46] vhci_hcd: disconnect device [ 107.712916][ T6129] vhci_hcd: vhci_device speed not set [ 107.717355][ T8110] vhci_hcd: connection closed [ 107.717556][ T60] vhci_hcd: stop threads [ 107.719412][ T9] usbhid 14-1:0.0: can't add hid device: -71 [ 107.720413][ T60] vhci_hcd: release socket [ 107.720466][ T60] vhci_hcd: disconnect device [ 107.722397][ T9] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 107.729566][ T9] usb 14-1: USB disconnect, device number 2 [ 108.152547][ T5951] Bluetooth: hci6: unexpected event for opcode 0x0809 [ 108.158331][ T29] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.176481][ T29] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 108.266572][ T5963] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 108.476769][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.461'. [ 108.479590][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.9.461'. [ 108.480058][ T8231] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.462'. [ 108.482367][ T8229] netlink: 'syz.9.461': attribute type 20 has an invalid length. [ 108.485015][ T8228] fido_id[8228]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.486592][ T8231] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 108.510949][ T8231] overlay: filesystem on ./bus is read-only [ 108.522645][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 108.522656][ T40] audit: type=1400 audit(1752268727.544:466): avc: denied { mounton } for pid=8230 comm="syz.5.462" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 108.563948][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.461'. [ 108.566787][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.9.461'. [ 108.567913][ T40] audit: type=1400 audit(1752268727.604:467): avc: denied { listen } for pid=8232 comm="syz.8.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.577210][ T40] audit: type=1400 audit(1752268727.604:468): avc: denied { setopt } for pid=8236 comm="syz.6.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.595088][ T40] audit: type=1400 audit(1752268727.634:469): avc: denied { accept } for pid=8232 comm="syz.8.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.778766][ T40] audit: type=1400 audit(1752268727.784:470): avc: denied { getopt } for pid=8251 comm="syz.6.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.796234][ T8266] syz_tun: entered allmulticast mode [ 108.799667][ T8266] tipc: Enabling of bearer rejected, already enabled [ 108.802439][ T8262] syz_tun: left allmulticast mode [ 108.820966][ T8267] kvm: emulating exchange as write [ 108.889418][ T8276] Bluetooth: MGMT ver 1.23 [ 108.894168][ T40] audit: type=1400 audit(1752268727.934:471): avc: denied { write } for pid=8275 comm="syz.6.473" path="socket:[22194]" dev="sockfs" ino=22194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.050805][ T40] audit: type=1400 audit(1752268728.084:472): avc: denied { mount } for pid=8281 comm="syz.5.476" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.058115][ T40] audit: type=1400 audit(1752268728.094:473): avc: denied { create } for pid=8281 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.058138][ T40] audit: type=1400 audit(1752268728.094:474): avc: denied { ioctl } for pid=8281 comm="syz.5.476" path="socket:[22208]" dev="sockfs" ino=22208 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.058160][ T40] audit: type=1400 audit(1752268728.094:475): avc: denied { getopt } for pid=8281 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.060539][ T8284] tipc: Invalid UDP bearer configuration [ 109.083744][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 109.152663][ T6129] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 109.169306][ T8293] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.176894][ T8293] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.192024][ T8296] netlink: 'syz.8.477': attribute type 10 has an invalid length. [ 109.207464][ T8296] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 109.318376][ T6129] usb 11-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 109.322054][ T6129] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.325775][ T6129] usb 11-1: Product: ᶱ၈콙誎剓ޒ৵胅獊⩀鯹ꁒᦥ㇉溜牎䒲륦댤鱘۵㞻茻飫練苆ž᧿䇜ࠞ萏镍ዛ՟椺Ｒ蔸䋐ᓹ䆽좺䟘쩲㻞軋笤⑦⮚奪쎝꧘캛蕤䰨褏믄줏䫘퇬蝖ᝥ㸰铌옏뺚ʬ撞빢翍屣쌕鐪ቇ▒舉嫿㳻ꦈ둮澯ڞ砒䄠뾷ୟꛟ櫋샛褢ه뼾뎇≴陛飆﯃ꁀ簰ꖃ㈈尝ລ [ 109.340783][ T6129] usb 11-1: Manufacturer: Е [ 109.341737][ T8303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.343095][ T6129] usb 11-1: SerialNumber: 똦ⱹф訖藯탏㟂롺᮰ૉ㜠㍌둬巢凶쟡픻剙䐜㖐꿫尙䲄㓩㨌룣燽㚈易㺷苛틫౽ą坿묛咺 [ 109.542910][ T5963] Bluetooth: hci0: command 0x041b tx timeout [ 109.562245][ T6129] usbhid 11-1:1.0: can't add hid device: -71 [ 109.564218][ T6129] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 109.572911][ T6129] usb 11-1: USB disconnect, device number 4 [ 109.661097][ T8320] syz_tun: entered allmulticast mode [ 109.665959][ T8320] tipc: Enabling of bearer rejected, already enabled [ 109.669861][ T8319] syz_tun: left allmulticast mode [ 109.887164][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.890927][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.936680][ T8334] netlink: 'syz.5.491': attribute type 27 has an invalid length. [ 109.975539][ T8229] Set syz1 is full, maxelem 65536 reached [ 109.989496][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.062074][ T8345] netlink: 'syz.9.493': attribute type 1 has an invalid length. [ 110.084077][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.096225][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.163397][ T8334] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.166165][ T8334] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.168889][ T8334] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.171600][ T8334] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.208893][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.211649][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.215535][ T8344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.388731][ T8371] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.436045][ T8379] binder: 8375:8379 ioctl c018620b 0 returned -14 [ 110.696697][ T29] hid-generic 0005:16C0:5505.0003: item fetching failed at offset 0/2 [ 110.699925][ T29] hid-generic 0005:16C0:5505.0003: probe with driver hid-generic failed with error -22 [ 110.705566][ T8411] __nla_validate_parse: 3 callbacks suppressed [ 110.705576][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.9.512'. [ 110.747586][ T8415] netlink: 108 bytes leftover after parsing attributes in process `syz.9.513'. [ 110.750404][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.9.513'. [ 110.841897][ T8415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8415 comm=syz.9.513 [ 110.853361][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 110.876012][ T8418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8418 comm=syz.9.514 [ 110.909310][ T8420] netlink: 64 bytes leftover after parsing attributes in process `syz.9.515'. [ 111.222703][ T6016] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 111.376060][ T6016] usb 14-1: not running at top speed; connect to a high speed hub [ 111.380331][ T6016] usb 14-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.384598][ T6016] usb 14-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.388607][ T6016] usb 14-1: config 1 interface 0 has no altsetting 0 [ 111.394176][ T6016] usb 14-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 111.396992][ T6016] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.399422][ T6016] usb 14-1: Product: з [ 111.400756][ T6016] usb 14-1: Manufacturer: Ệ豴ꭗꉠ퓁氕诏傭䥢벽禫ই䨌錕碜돧텄逘খ◧䔀倢㴋븕햺⯒奄肓敘蔬ꄭ뒉멝잟ﲋ복࣋㏱綃鍕䲏ࠄꔛ湈櫓饸삥쇌銍뒎͞ნ忌摲嚣澍묍ഁ⠭끺抏답⧨ﵰ㎧ᨛ냔藠뙦⨾䪷儤뛩ꈚ戴Ợᣜ꺣Ả筈ੇ變몾浘ᙌ莗蕄ಟ邜輪윒綦ꨒ凮쯂桵흴䪬嬿⬴梁둌 [ 111.412558][ T6016] usb 14-1: SerialNumber: 벭൐ࠗ債呚삋᝞ァꑶ혅꜂嬘蓰좟鱇趂鼺쿧㌜놻熧ܐ냰ﵤ鍡敟㲤嗑ꮄ꠷ア⚶딽৔꾗ᚔઐ咥穬ꌤ㪟䡝ꥍⓁ緾ᑝಹ没蜢쇶六佞芗坺櫁탺㽕䞾毀뒫玨筗ૃ袼뒖瓅鬎Ｋ푐㱧쥈屲 [ 111.438217][ T8427] input: syz1 as /devices/virtual/input/input9 [ 111.632122][ T6016] usbhid 14-1:1.0: can't add hid device: -71 [ 111.634304][ T6016] usbhid 14-1:1.0: probe with driver usbhid failed with error -71 [ 111.638784][ T6016] usb 14-1: USB disconnect, device number 3 [ 113.019396][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.9.534'. [ 113.086740][ T8485] syz_tun: entered allmulticast mode [ 113.090191][ T8485] tipc: Enabling of bearer rejected, already enabled [ 113.094023][ T8484] syz_tun: left allmulticast mode [ 113.140726][ T8493] overlayfs: upper fs does not support file handles, falling back to index=off. [ 113.253584][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.544'. [ 113.640474][ T8524] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.647449][ T8524] netlink: 68 bytes leftover after parsing attributes in process `syz.8.549'. [ 113.743756][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 113.743769][ T40] audit: type=1400 audit(1752268732.784:493): avc: denied { ioctl } for pid=8525 comm="syz.8.551" path="socket:[21453]" dev="sockfs" ino=21453 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.850857][ T40] audit: type=1400 audit(1752268732.884:494): avc: denied { write } for pid=8532 comm="syz.5.550" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.860806][ T8533] block device autoloading is deprecated and will be removed. [ 113.865923][ T8533] syz.5.550: attempt to access beyond end of device [ 113.865923][ T8533] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 113.895658][ T40] audit: type=1400 audit(1752268732.934:495): avc: denied { connect } for pid=8535 comm="syz.5.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.917525][ T40] audit: type=1400 audit(1752268732.954:496): avc: denied { read } for pid=8529 comm="syz.8.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.953468][ T8538] openvswitch: netlink: IP tunnel dst address not specified [ 113.970452][ T8530] netlink: 'syz.8.552': attribute type 3 has an invalid length. [ 114.090217][ T8550] syz_tun: entered allmulticast mode [ 114.094725][ T8550] tipc: Enabling of bearer rejected, already enabled [ 114.098731][ T8549] syz_tun: left allmulticast mode [ 114.170971][ T40] audit: type=1400 audit(1752268733.204:497): avc: denied { set_context_mgr } for pid=8555 comm="syz.5.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.178567][ T40] audit: type=1400 audit(1752268733.214:498): avc: denied { shutdown } for pid=8560 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.215596][ T40] audit: type=1400 audit(1752268733.254:499): avc: denied { write } for pid=8566 comm="syz.6.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.224241][ T40] audit: type=1400 audit(1752268733.254:500): avc: denied { watch watch_reads } for pid=8567 comm="syz.5.564" path="/dev/pts/2" dev="devpts" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 114.235954][ T40] audit: type=1400 audit(1752268733.274:501): avc: denied { compute_member } for pid=8572 comm="syz.8.563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.276995][ T8583] syz_tun: entered allmulticast mode [ 114.281095][ T8583] tipc: Enabling of bearer rejected, already enabled [ 114.288119][ T8582] syz_tun: left allmulticast mode [ 114.493573][ T40] audit: type=1400 audit(1752268733.534:502): avc: denied { read } for pid=8613 comm="syz.5.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.502202][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.9.575'. [ 114.550932][ T8623] syz_tun: entered allmulticast mode [ 114.552404][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.6.577'. [ 114.555564][ T8623] tipc: Enabling of bearer rejected, already enabled [ 114.556013][ T8622] syz_tun: left allmulticast mode [ 114.557819][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz.6.577'. [ 114.570589][ T8630] netlink: 'syz.8.579': attribute type 10 has an invalid length. [ 114.656181][ T8646] Cannot find add_set index 0 as target [ 114.825661][ T8670] syz_tun: entered allmulticast mode [ 114.828540][ T8670] tipc: Enabling of bearer rejected, already enabled [ 114.831406][ T8669] syz_tun: left allmulticast mode [ 114.869743][ T8674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.129503][ T8717] sp0: Synchronizing with TNC [ 115.169161][ T8720] syz_tun: entered allmulticast mode [ 115.173589][ T8720] tipc: Enabling of bearer rejected, already enabled [ 115.185474][ T8719] syz_tun: left allmulticast mode [ 115.534352][ T6826] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 115.592318][ T8737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.595563][ T8737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.598254][ T8737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.601120][ T8737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.604053][ T8737] geneve2: entered promiscuous mode [ 115.694780][ T6826] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.698237][ T6826] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.701283][ T6826] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.705582][ T6826] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.708538][ T6826] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.713476][ T6826] usb 14-1: config 0 descriptor?? [ 115.866382][ T8749] input: syz1 as /devices/virtual/input/input10 [ 115.982755][ T7940] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 116.132732][ T7940] usb 13-1: Using ep0 maxpacket: 32 [ 116.137713][ T6826] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 116.139905][ T7940] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 116.145069][ T7940] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.148068][ T7940] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.151612][ T7940] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 116.155201][ T7940] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.160616][ T7940] usb 13-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 116.163850][ T7940] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.166345][ T7940] usb 13-1: Product: syz [ 116.167703][ T7940] usb 13-1: Manufacturer: syz [ 116.169189][ T7940] usb 13-1: SerialNumber: syz [ 116.172000][ T7940] usb 13-1: config 0 descriptor?? [ 116.174506][ T8744] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 116.179205][ T7940] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input11 [ 116.186527][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.196987][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.204200][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.221588][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.234231][ T6813] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.243907][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.248541][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.255903][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.260718][ T5345] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.336643][ T8729] use of bytesused == 0 is deprecated and will be removed in the future, [ 116.339868][ T8729] use the actual size instead. [ 116.377593][ T8744] xpad 13-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 116.382266][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.386476][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.399782][ T7940] usb 13-1: USB disconnect, device number 2 [ 116.423407][ T8757] __nla_validate_parse: 3 callbacks suppressed [ 116.423422][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.8.613'. [ 116.447576][ T8757] vivid-002: disconnect [ 116.449329][ T8756] vivid-002: reconnect [ 116.508142][ T8764] netlink: 68 bytes leftover after parsing attributes in process `syz.5.615'. [ 116.514698][ T10] usb 14-1: USB disconnect, device number 4 [ 116.699578][ T8777] netlink: 'syz.8.619': attribute type 10 has an invalid length. [ 116.705085][ T8777] hsr_slave_0: left promiscuous mode [ 116.707791][ T8777] hsr_slave_1: left promiscuous mode [ 117.076631][ T8805] overlayfs: failed to resolve 'index=off': -2 [ 117.232660][ T2297] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 117.392650][ T2297] usb 10-1: Using ep0 maxpacket: 8 [ 117.395790][ T2297] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 117.399041][ T2297] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.401832][ T2297] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 117.407719][ T2297] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.410572][ T2297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.413156][ T2297] usb 10-1: Product: syz [ 117.414538][ T2297] usb 10-1: Manufacturer: syz [ 117.416037][ T2297] usb 10-1: SerialNumber: syz [ 117.821490][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.824423][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.030025][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.033002][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.036436][ T8820] netlink: 44 bytes leftover after parsing attributes in process `syz.8.633'. [ 118.088225][ T2297] usb 10-1: 0:2 : does not exist [ 118.098264][ T2297] usb 10-1: USB disconnect, device number 13 [ 118.108040][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.591150][ T8791] syz.5.622 (8791) used greatest stack depth: 19720 bytes left [ 118.892648][ T1345] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 119.052739][ T8355] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 119.054577][ T1345] usb 10-1: Using ep0 maxpacket: 16 [ 119.060524][ T1345] usb 10-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 119.065660][ T1345] usb 10-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.069844][ T1345] usb 10-1: config 1 interface 0 has no altsetting 0 [ 119.074016][ T1345] usb 10-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.40 [ 119.077004][ T1345] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.079900][ T1345] usb 10-1: Product: 礀ⶽҼ䖟萸䌘̆⠢좹絖꾙嬎铄緵콧鯗﷎惬ࢃ蚲꼪泀Ὀ脰㲨䘋콮퓞鉸뿌탖␽툶埯ᚠ㭘젮㝚ꟹ碤醓웣婻綨뫻╤쵮ꅀ텵黠㠧Ꜿ芒ࠞꐶ⦙ᛅ솖⠤擺묱痀↘ [ 119.088312][ T1345] usb 10-1: Manufacturer: 塁㻓鄐ᠤ☎厜˔Ṝ쑕磢蒯뚍珖Ӎᵘ遢崟䡔鱡摊饨먔¬翭ㄛ㘸釉ෝ熉໤₩泌ꃭ︞蚬첢ᮏ断葈ཹꨍ꘢육幘饏枸ၷ풜⬤ᢀ춦♲傡垛榈膅銾兔찣䜀滏몀㚡䔷᪦쐬뱅鋣荙ᙀ헳郃ÿെ㱲寿風捍揙蔵吚횮뺇각덞瑼篳ⴰꃝ߈轢儁㯽鮍똑⿝흡뚳칆徫֝뺜띑䓒 [ 119.102064][ T1345] usb 10-1: SerialNumber: 郵⤁钢嶘뮩癉ﶜ갷珃轴＂㓋㷀╖㵳눙ꆆ鿤鰝꤭ࠓڑ⩷뜌㴆␮㛚涠养혻蝱⨀闎砽稥⢒颾惎㘃甮ﺢ恊챀ﺴ콓㟮䲜䑀鹌ᵋ࣒肾說춝ﱑ셞꘥㐽᯷⛟⦪⢿⑫彧꣚㶭ˡ霛㞬ꆣꍃ巖菜寐໳즃ﺳႧ빒ㅨ现땕統㵓춊Ʃʗ㡻嶊嫒諾ｬ튕ㄭ㼩馸襃 [ 119.146912][ T8851] syz_tun: entered allmulticast mode [ 119.150123][ T8851] tipc: Enabling of bearer rejected, already enabled [ 119.153275][ T8850] syz_tun: left allmulticast mode [ 119.214332][ T8355] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.218126][ T8355] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.221563][ T8355] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.224869][ T8355] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.228943][ T8355] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.231793][ T8355] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.235653][ T8355] usb 14-1: config 0 descriptor?? [ 119.327031][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.329946][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.340198][ T1345] usbhid 10-1:1.0: can't add hid device: -71 [ 119.342116][ T1345] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 119.346390][ T1345] usb 10-1: USB disconnect, device number 14 [ 119.445220][ T8355] usbhid 14-1:0.0: can't add hid device: -71 [ 119.447246][ T8355] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 119.453448][ T8355] usb 14-1: USB disconnect, device number 5 [ 119.794257][ T8863] netlink: 'syz.8.647': attribute type 2 has an invalid length. [ 119.795613][ T8864] bond0: option mode: unable to set because the bond device has slaves [ 119.796641][ T8863] netlink: 244 bytes leftover after parsing attributes in process `syz.8.647'. [ 119.877547][ T8867] FAULT_INJECTION: forcing a failure. [ 119.877547][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 119.881462][ T8867] CPU: 3 UID: 0 PID: 8867 Comm: syz.5.648 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 119.881476][ T8867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.881482][ T8867] Call Trace: [ 119.881486][ T8867] [ 119.881491][ T8867] dump_stack_lvl+0x16c/0x1f0 [ 119.881510][ T8867] should_fail_ex+0x512/0x640 [ 119.881524][ T8867] ? fs_reclaim_acquire+0xae/0x150 [ 119.881535][ T8867] ? tomoyo_encode2+0x100/0x3e0 [ 119.881548][ T8867] should_failslab+0xc2/0x120 [ 119.881574][ T8867] __kmalloc_noprof+0xd2/0x510 [ 119.881589][ T8867] ? d_absolute_path+0x136/0x1a0 [ 119.881603][ T8867] tomoyo_encode2+0x100/0x3e0 [ 119.881618][ T8867] tomoyo_encode+0x29/0x50 [ 119.881631][ T8867] tomoyo_realpath_from_path+0x18f/0x6e0 [ 119.881650][ T8867] tomoyo_path_number_perm+0x245/0x580 [ 119.881661][ T8867] ? tomoyo_path_number_perm+0x237/0x580 [ 119.881675][ T8867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.881688][ T8867] ? find_held_lock+0x2b/0x80 [ 119.881713][ T8867] ? find_held_lock+0x2b/0x80 [ 119.881725][ T8867] ? hook_file_ioctl_common+0x145/0x410 [ 119.881738][ T8867] ? __fget_files+0x20e/0x3c0 [ 119.881754][ T8867] security_file_ioctl+0x9b/0x240 [ 119.881769][ T8867] __x64_sys_ioctl+0xb7/0x210 [ 119.881782][ T8867] do_syscall_64+0xcd/0x4c0 [ 119.881813][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.881825][ T8867] RIP: 0033:0x7f438cf8e929 [ 119.881833][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.881843][ T8867] RSP: 002b:00007f438dd33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.881853][ T8867] RAX: ffffffffffffffda RBX: 00007f438d1b5fa0 RCX: 00007f438cf8e929 [ 119.881860][ T8867] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 119.881866][ T8867] RBP: 00007f438dd33090 R08: 0000000000000000 R09: 0000000000000000 [ 119.881872][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.881877][ T8867] R13: 0000000000000000 R14: 00007f438d1b5fa0 R15: 00007ffdb63daea8 [ 119.881891][ T8867] [ 119.881967][ T8867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.026020][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 120.026031][ T40] audit: type=1400 audit(1752268739.064:518): avc: denied { ioctl } for pid=8874 comm="syz.5.652" path="socket:[24019]" dev="sockfs" ino=24019 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.064894][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'. [ 120.067704][ T8879] bridge_slave_0: left allmulticast mode [ 120.069510][ T8879] bridge_slave_0: left promiscuous mode [ 120.071500][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.252550][ T8887] syz_tun: entered allmulticast mode [ 120.255488][ T8887] tipc: Enabling of bearer rejected, already enabled [ 120.259498][ T8886] syz_tun: left allmulticast mode [ 120.411725][ T8904] netlink: 6 bytes leftover after parsing attributes in process `syz.5.662'. [ 120.579977][ T8909] netlink: 'syz.9.664': attribute type 3 has an invalid length. [ 120.582405][ T8909] netlink: 'syz.9.664': attribute type 1 has an invalid length. [ 120.585165][ T8909] netlink: 192 bytes leftover after parsing attributes in process `syz.9.664'. [ 120.587978][ T8909] NCSI netlink: No device for ifindex 0 [ 120.595417][ T8909] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 120.598748][ T8909] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 120.627761][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.9.666'. [ 120.732135][ T8920] syz_tun: entered allmulticast mode [ 120.737674][ T8920] tipc: Enabling of bearer rejected, already enabled [ 120.740834][ T8919] syz_tun: left allmulticast mode [ 120.749917][ T40] audit: type=1400 audit(1752268739.784:519): avc: denied { setopt } for pid=8921 comm="syz.9.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.831922][ T8928] hsr0: entered promiscuous mode [ 120.834740][ T8928] macsec1: entered allmulticast mode [ 120.837231][ T8928] hsr0: entered allmulticast mode [ 120.839201][ T8928] hsr_slave_0: entered allmulticast mode [ 120.841097][ T8928] hsr_slave_1: entered allmulticast mode [ 120.936345][ T40] audit: type=1400 audit(1752268739.974:520): avc: denied { write } for pid=8933 comm="syz.9.674" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 120.963008][ T8938] syz.5.675: attempt to access beyond end of device [ 120.963008][ T8938] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 120.967599][ T8938] syz.5.675: attempt to access beyond end of device [ 120.967599][ T8938] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 120.971566][ T8938] Mount JFS Failure: -5 [ 120.974059][ T8938] jfs_mount failed w/return code = -5 [ 120.978759][ T8939] syz.5.675: attempt to access beyond end of device [ 120.978759][ T8939] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 120.984097][ T8939] syz.5.675: attempt to access beyond end of device [ 120.984097][ T8939] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 120.988152][ T8939] Mount JFS Failure: -5 [ 120.989961][ T8939] jfs_mount failed w/return code = -5 [ 121.042537][ T40] audit: type=1400 audit(1752268740.074:521): avc: denied { map } for pid=8937 comm="syz.5.675" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.073047][ T40] audit: type=1400 audit(1752268740.114:522): avc: denied { ioctl } for pid=8945 comm="syz.5.676" path="socket:[26034]" dev="sockfs" ino=26034 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.140688][ T8948] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 121.146106][ T8948] exFAT-fs (nullb0): invalid boot record signature [ 121.148657][ T8948] exFAT-fs (nullb0): failed to read boot sector [ 121.151143][ T8948] exFAT-fs (nullb0): failed to recognize exfat type [ 121.317471][ T8954] kvm: user requested TSC rate below hardware speed [ 121.527769][ T8969] xt_SECMARK: invalid mode: 0 [ 121.713874][ T8975] syz_tun: entered allmulticast mode [ 121.721994][ T8975] tipc: Enabling of bearer rejected, already enabled [ 121.726523][ T8974] syz_tun: left allmulticast mode [ 121.757837][ T40] audit: type=1400 audit(1752268740.794:523): avc: denied { mount } for pid=8976 comm="syz.8.686" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.767816][ T40] audit: type=1400 audit(1752268740.794:524): avc: denied { search } for pid=8976 comm="syz.8.686" name="/" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.839220][ T40] audit: type=1400 audit(1752268740.874:525): avc: denied { map } for pid=8980 comm="syz.9.688" path="socket:[26884]" dev="sockfs" ino=26884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.840336][ T8981] SELinux: syz.9.688 (8981) set checkreqprot to 1. This is no longer supported. [ 121.846876][ T40] audit: type=1400 audit(1752268740.874:526): avc: denied { read accept } for pid=8980 comm="syz.9.688" path="socket:[26884]" dev="sockfs" ino=26884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.893724][ T8984] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.937305][ T40] audit: type=1400 audit(1752268740.974:527): avc: denied { mounton } for pid=8987 comm="syz.9.690" path="/83/bus" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 121.938376][ T8988] Mount JFS Failure: -22 [ 122.028112][ T8995] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 122.262752][ T59] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 122.282252][ T9000] syz_tun: entered allmulticast mode [ 122.286850][ T9000] tipc: Enabling of bearer rejected, already enabled [ 122.289980][ T8999] syz_tun: left allmulticast mode [ 122.412726][ T59] usb 13-1: Using ep0 maxpacket: 32 [ 122.420396][ T59] usb 13-1: unable to get BOS descriptor or descriptor too short [ 122.423166][ T59] usb 13-1: no configurations [ 122.424719][ T59] usb 13-1: can't read configurations, error -22 [ 123.075024][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.8.700'. [ 124.028895][ T9044] Cannot find set identified by id 0 to match [ 124.154421][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.8.716'. [ 124.348129][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.722'. [ 124.360859][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.722'. [ 124.430048][ T9074] netlink: 'syz.5.723': attribute type 1 has an invalid length. [ 124.433488][ T9074] NCSI netlink: No device for ifindex 0 [ 124.441556][ T9074] netlink: 52 bytes leftover after parsing attributes in process `syz.5.723'. [ 124.580633][ T9031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.583991][ T9031] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.590960][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.772368][ T9106] netlink: 32 bytes leftover after parsing attributes in process `syz.8.733'. [ 124.776677][ T9106] netlink: 32 bytes leftover after parsing attributes in process `syz.8.733'. [ 124.821544][ T9110] Invalid source name [ 124.824077][ T9110] UBIFS error (pid: 9110): cannot open "ubifs", error -22 [ 124.859749][ T9115] trusted_key: encrypted_key: hex blob is missing [ 124.923868][ T9127] veth1_to_hsr: entered promiscuous mode [ 124.926488][ T9127] batadv0: entered promiscuous mode [ 124.928464][ T9127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.930690][ T9127] Cannot create hsr debugfs directory [ 125.037667][ T9134] dummy0: entered promiscuous mode [ 125.080249][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 125.080259][ T40] audit: type=1400 audit(1752268744.114:535): avc: denied { map } for pid=9137 comm="syz.5.745" path="socket:[24357]" dev="sockfs" ino=24357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.122807][ T40] audit: type=1400 audit(1752268744.164:536): avc: denied { setopt } for pid=9143 comm="syz.8.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 125.127239][ T9144] overlayfs: failed to clone upperpath [ 125.193951][ T8355] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 125.342863][ T8355] usb 11-1: Using ep0 maxpacket: 32 [ 125.346790][ T8355] usb 11-1: config 0 has no interfaces? [ 125.350916][ T8355] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 125.354798][ T8355] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 125.358438][ T8355] usb 11-1: Product: syz [ 125.360098][ T8355] usb 11-1: Manufacturer: syz [ 125.361919][ T8355] usb 11-1: SerialNumber: syz [ 125.365148][ T8355] usb 11-1: config 0 descriptor?? [ 125.399204][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.5.754'. [ 125.568597][ T8355] usb 11-1: USB disconnect, device number 5 [ 126.062298][ T40] audit: type=1400 audit(1752268745.094:537): avc: denied { setopt } for pid=9172 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.102554][ T9177] netlink: 'syz.6.758': attribute type 1 has an invalid length. [ 126.103016][ T9176] syz_tun: entered allmulticast mode [ 126.106673][ T9176] tipc: Enabling of bearer rejected, already enabled [ 126.110512][ T9174] syz_tun: left allmulticast mode [ 126.145700][ T9181] overlay: Unknown parameter 'measure' [ 126.310943][ T9203] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 126.354019][ T9206] syz_tun: entered allmulticast mode [ 126.359197][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.766'. [ 126.361979][ T9206] tipc: Enabling of bearer rejected, already enabled [ 126.363046][ T40] audit: type=1326 audit(1752268745.404:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.372147][ T40] audit: type=1326 audit(1752268745.404:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.374040][ T9205] syz_tun: left allmulticast mode [ 126.379185][ T40] audit: type=1326 audit(1752268745.404:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.390682][ T40] audit: type=1326 audit(1752268745.404:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.401117][ T40] audit: type=1326 audit(1752268745.404:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.409891][ T40] audit: type=1326 audit(1752268745.404:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.419589][ T40] audit: type=1326 audit(1752268745.404:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9198 comm="syz.6.766" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4d8e929 code=0x7fc00000 [ 126.429223][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.769'. [ 126.625095][ T9227] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 126.673087][ T9231] syz_tun: entered allmulticast mode [ 126.675905][ T9231] tipc: Enabling of bearer rejected, already enabled [ 126.679005][ T9230] syz_tun: left allmulticast mode [ 126.729026][ T9239] netlink: 'syz.6.782': attribute type 32 has an invalid length. [ 126.732927][ T9239] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 126.891131][ T9258] syz_tun: entered allmulticast mode [ 126.899189][ T9258] tipc: Enabling of bearer rejected, already enabled [ 126.902119][ T9256] syz_tun: left allmulticast mode [ 126.904798][ T9261] mkiss: ax0: crc mode is auto. [ 126.984014][ T9269] random: crng reseeded on system resumption [ 126.993403][ T9267] nilfs2: Unknown parameter 'barrier NV"Ii>i?_nM#)2l~h [ 127.745520][ T9300] dump_stack_lvl+0x16c/0x1f0 [ 127.745566][ T9300] warn_alloc+0x248/0x3a0 [ 127.745590][ T9300] ? __pfx_warn_alloc+0x10/0x10 [ 127.745622][ T9300] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 127.745643][ T9300] ? __vmalloc_node_noprof+0xad/0xf0 [ 127.745665][ T9300] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 127.745692][ T9300] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 127.745713][ T9300] ? rcu_is_watching+0x12/0xc0 [ 127.745763][ T9300] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.745783][ T9300] ? __alloc_pages_noprof+0xb/0x1b0 [ 127.745803][ T9300] ? ___kmalloc_large_node+0x84/0x1e0 [ 127.745826][ T9300] __kvmalloc_node_noprof+0x30a/0x620 [ 127.745848][ T9300] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 127.745869][ T9300] ? net_generic+0xea/0x2a0 [ 127.745885][ T9300] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 127.745910][ T9300] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 127.745930][ T9300] hashlimit_mt_check_common+0x8bb/0x1460 [ 127.745958][ T9300] hashlimit_mt_check+0x71/0x90 [ 127.745982][ T9300] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 127.746001][ T9300] xt_check_match+0x283/0xa50 [ 127.746020][ T9300] ? io_schedule_timeout+0x52/0x150 [ 127.746043][ T9300] ? __pfx_xt_check_match+0x10/0x10 [ 127.746061][ T9300] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 127.746093][ T9300] ? xt_find_match+0x1f6/0x290 [ 127.746117][ T9300] find_check_entry.constprop.0+0x34e/0xa20 [ 127.746145][ T9300] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 127.746173][ T9300] ? kasan_quarantine_put+0x10a/0x240 [ 127.746195][ T9300] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.746221][ T9300] ? kfree+0x2b4/0x4d0 [ 127.746238][ T9300] ? translate_table+0xc0e/0x17b0 [ 127.746261][ T9300] translate_table+0xd0b/0x17b0 [ 127.746289][ T9300] ? __pfx_translate_table+0x10/0x10 [ 127.746306][ T9300] ? xt_alloc_table_info+0x3e/0xa0 [ 127.746331][ T9300] do_ip6t_set_ctl+0x570/0xb00 [ 127.746351][ T9300] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 127.746374][ T9300] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 127.746396][ T9300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.746434][ T9300] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 127.746455][ T9300] nf_setsockopt+0x8d/0xf0 [ 127.746474][ T9300] ipv6_setsockopt+0x135/0x170 [ 127.746496][ T9300] rawv6_setsockopt+0xc2/0x510 [ 127.746522][ T9300] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 127.746549][ T9300] ? selinux_socket_setsockopt+0x6a/0x80 [ 127.746575][ T9300] ? sock_common_setsockopt+0x2e/0xf0 [ 127.746603][ T9300] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 127.746629][ T9300] do_sock_setsockopt+0x224/0x470 [ 127.746655][ T9300] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 127.746697][ T9300] __sys_setsockopt+0x1a0/0x230 [ 127.746723][ T9300] __x64_sys_setsockopt+0xbd/0x160 [ 127.746743][ T9300] ? do_syscall_64+0x91/0x4c0 [ 127.746764][ T9300] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.746786][ T9300] do_syscall_64+0xcd/0x4c0 [ 127.746811][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.746828][ T9300] RIP: 0033:0x7febe4d8e929 [ 127.746841][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.746857][ T9300] RSP: 002b:00007febe5bc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.746873][ T9300] RAX: ffffffffffffffda RBX: 00007febe4fb5fa0 RCX: 00007febe4d8e929 [ 127.746884][ T9300] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 127.746894][ T9300] RBP: 00007febe4e10b39 R08: 00000000000005c0 R09: 0000000000000000 [ 127.746905][ T9300] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 127.746914][ T9300] R13: 0000000000000000 R14: 00007febe4fb5fa0 R15: 00007ffe61cdf518 [ 127.746938][ T9300] [ 127.746959][ T9300] Mem-Info: [ 127.884826][ T9300] active_anon:10526 inactive_anon:0 isolated_anon:0 [ 127.884826][ T9300] active_file:6001 inactive_file:49684 isolated_file:0 [ 127.884826][ T9300] unevictable:1768 dirty:268 writeback:0 [ 127.884826][ T9300] slab_reclaimable:12392 slab_unreclaimable:78198 [ 127.884826][ T9300] mapped:25100 shmem:2491 pagetables:1441 [ 127.884826][ T9300] sec_pagetables:300 bounce:0 [ 127.884826][ T9300] kernel_misc_reclaimable:0 [ 127.884826][ T9300] free:441916 free_pcp:4950 free_cma:0 [ 127.898676][ T9300] Node 0 active_anon:42064kB inactive_anon:0kB active_file:16164kB inactive_file:198372kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100232kB dirty:1056kB writeback:0kB shmem:6428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13360kB pagetables:5580kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 127.899165][ T9311] syz_tun: entered allmulticast mode [ 127.909077][ T9300] Node 1 active_anon:40kB inactive_anon:0kB active_file:7840kB inactive_file:364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.909126][ T9300] Node 0 DMA free:11948kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2052kB inactive_anon:0kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:32kB free_cma:0kB [ 127.909156][ T9300] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 127.909178][ T9300] Node 0 DMA32 free:144252kB boost:51200kB min:78716kB low:85592kB high:92468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40012kB inactive_anon:0kB active_file:16072kB inactive_file:198372kB unevictable:3536kB writepending:1056kB present:2080628kB managed:1264188kB mlocked:0kB bounce:0kB free_pcp:19740kB local_pcp:748kB free_cma:0kB [ 127.909207][ T9300] lowmem_reserve[]: 0 0 0 0 0 [ 127.909228][ T9300] Node 1 Normal free:1611464kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:7840kB inactive_file:364kB unevictable:3536kB writepending:16kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 127.909256][ T9300] lowmem_reserve[]: 0 0 0 0 0 [ 127.909276][ T9300] Node 0 DMA: 15*4kB (UM) 4*8kB (UM) 11*16kB (UME) 13*32kB (UM) 6*64kB (UME) 5*128kB (ME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 3*2048kB (U) 0*4096kB = 11948kB [ 127.909383][ T9300] Node 0 DMA32: 1997*4kB (UME) 1101*8kB (UME) 416*16kB (UME) 568*32kB (UME) 147*64kB (UME) 78*128kB (UME) 55*256kB (UME) 61*512kB (UM) 19*1024kB (UM) 9*2048kB (UM) 0*4096kB = 144220kB [ 127.909470][ T9300] Node 1 Normal: 82*4kB (UME) 64*8kB (UME) 80*16kB (UME) 232*32kB (UME) 170*64kB (UME) 22*128kB (UME) 18*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 5*2048kB (UM) 382*4096kB (UM) = 1611464kB [ 127.909560][ T9300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.909568][ T9300] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 127.909577][ T9300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.909585][ T9300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.909593][ T9300] 58173 total pagecache pages [ 127.909597][ T9300] 0 pages in swap cache [ 127.909601][ T9300] Free swap = 124996kB [ 127.909605][ T9300] Total swap = 124996kB [ 127.909609][ T9300] 1048443 pages RAM [ 127.909613][ T9300] 0 pages HighMem/MovableOnly [ 127.909617][ T9300] 283067 pages reserved [ 127.909620][ T9300] 0 pages cma reserved [ 128.009226][ T9315] ================================================================== [ 128.009245][ T9315] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 128.009262][ T9315] Write of size 8 at addr ffffc90005179000 by task syz.6.810/9315 [ 128.009270][ T9315] [ 128.009276][ T9315] CPU: 3 UID: 0 PID: 9315 Comm: syz.6.810 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 128.009289][ T9315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.009296][ T9315] Call Trace: [ 128.009300][ T9315] [ 128.009304][ T9315] dump_stack_lvl+0x116/0x1f0 [ 128.009319][ T9315] print_report+0xcd/0x680 [ 128.009333][ T9315] ? __virt_addr_valid+0x81/0x610 [ 128.009347][ T9315] ? sys_fillrect+0x15d4/0x17b0 [ 128.009357][ T9315] kasan_report+0xe0/0x110 [ 128.009371][ T9315] ? sys_fillrect+0x15d4/0x17b0 [ 128.009383][ T9315] sys_fillrect+0x15d4/0x17b0 [ 128.009394][ T9315] ? __pfx_sys_fillrect+0x10/0x10 [ 128.009407][ T9315] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 128.009420][ T9315] bit_clear_margins+0x2f7/0x4c0 [ 128.009436][ T9315] ? __pfx_bit_clear_margins+0x10/0x10 [ 128.009451][ T9315] ? fb_get_color_depth+0x120/0x250 [ 128.009466][ T9315] fbcon_clear_margins.constprop.0+0x1d3/0x290 [ 128.009480][ T9315] fbcon_switch+0xa01/0x14c0 [ 128.009495][ T9315] ? __pfx_fbcon_switch+0x10/0x10 [ 128.009511][ T9315] ? __pfx_bit_cursor+0x10/0x10 [ 128.009525][ T9315] ? fbcon_cursor+0x409/0x5f0 [ 128.009538][ T9315] ? is_console_locked+0x9/0x20 [ 128.009553][ T9315] ? con_is_visible+0x65/0x150 [ 128.009565][ T9315] redraw_screen+0x2be/0x760 [ 128.009577][ T9315] ? __pfx_vc_do_resize+0x10/0x10 [ 128.009590][ T9315] ? __pfx_redraw_screen+0x10/0x10 [ 128.009604][ T9315] fbcon_set_disp+0x7d4/0xe40 [ 128.009617][ T9315] set_con2fb_map+0x703/0x1060 [ 128.009632][ T9315] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 128.009647][ T9315] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 128.009662][ T9315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.009675][ T9315] do_fb_ioctl+0x328/0x7e0 [ 128.009684][ T9315] ? __pfx_do_fb_ioctl+0x10/0x10 [ 128.009695][ T9315] ? do_vfs_ioctl+0x523/0x1a60 [ 128.009713][ T9315] ? selinux_file_ioctl+0x180/0x270 [ 128.009755][ T9315] fb_ioctl+0xe5/0x150 [ 128.009764][ T9315] ? __pfx_fb_ioctl+0x10/0x10 [ 128.009773][ T9315] __x64_sys_ioctl+0x18b/0x210 [ 128.009784][ T9315] do_syscall_64+0xcd/0x4c0 [ 128.009799][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.009810][ T9315] RIP: 0033:0x7febe4d8e929 [ 128.009823][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.009837][ T9315] RSP: 002b:00007febe5ba8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.009853][ T9315] RAX: ffffffffffffffda RBX: 00007febe4fb6080 RCX: 00007febe4d8e929 [ 128.009865][ T9315] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000008 [ 128.009875][ T9315] RBP: 00007febe4e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.009885][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.009894][ T9315] R13: 0000000000000000 R14: 00007febe4fb6080 R15: 00007ffe61cdf518 [ 128.009916][ T9315] [ 128.009923][ T9315] [ 128.009931][ T9315] The buggy address belongs to the virtual mapping at [ 128.009931][ T9315] [ffffc90004e79000, ffffc9000517a000) created by: [ 128.009931][ T9315] drm_gem_shmem_vmap_locked+0x4bc/0x720 [ 128.009956][ T9315] [ 128.009961][ T9315] Memory state around the buggy address: [ 128.009969][ T9315] ffffc90005178f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.009980][ T9315] ffffc90005178f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 128.009991][ T9315] >ffffc90005179000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.010000][ T9315] ^ [ 128.010008][ T9315] ffffc90005179080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.010021][ T9315] ffffc90005179100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 128.010030][ T9315] ================================================================== [ 128.010084][ T9315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.010097][ T9315] CPU: 3 UID: 0 PID: 9315 Comm: syz.6.810 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 128.010118][ T9315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.010127][ T9315] Call Trace: [ 128.010133][ T9315] [ 128.010139][ T9315] dump_stack_lvl+0x3d/0x1f0 [ 128.010154][ T9315] panic+0x71c/0x800 [ 128.010170][ T9315] ? __pfx_panic+0x10/0x10 [ 128.010185][ T9315] ? irqentry_exit+0x3b/0x90 [ 128.010211][ T9315] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.010225][ T9315] ? sys_fillrect+0x15d4/0x17b0 [ 128.010237][ T9315] ? check_panic_on_warn+0x1f/0xb0 [ 128.010253][ T9315] ? sys_fillrect+0x15d4/0x17b0 [ 128.010263][ T9315] check_panic_on_warn+0xab/0xb0 [ 128.010278][ T9315] end_report+0x107/0x170 [ 128.010292][ T9315] kasan_report+0xee/0x110 [ 128.010306][ T9315] ? sys_fillrect+0x15d4/0x17b0 [ 128.010318][ T9315] sys_fillrect+0x15d4/0x17b0 [ 128.010330][ T9315] ? __pfx_sys_fillrect+0x10/0x10 [ 128.010342][ T9315] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 128.010355][ T9315] bit_clear_margins+0x2f7/0x4c0 [ 128.010370][ T9315] ? __pfx_bit_clear_margins+0x10/0x10 [ 128.010385][ T9315] ? fb_get_color_depth+0x120/0x250 [ 128.010399][ T9315] fbcon_clear_margins.constprop.0+0x1d3/0x290 [ 128.010413][ T9315] fbcon_switch+0xa01/0x14c0 [ 128.010428][ T9315] ? __pfx_fbcon_switch+0x10/0x10 [ 128.010444][ T9315] ? __pfx_bit_cursor+0x10/0x10 [ 128.010458][ T9315] ? fbcon_cursor+0x409/0x5f0 [ 128.010471][ T9315] ? is_console_locked+0x9/0x20 [ 128.010486][ T9315] ? con_is_visible+0x65/0x150 [ 128.010498][ T9315] redraw_screen+0x2be/0x760 [ 128.010510][ T9315] ? __pfx_vc_do_resize+0x10/0x10 [ 128.010523][ T9315] ? __pfx_redraw_screen+0x10/0x10 [ 128.010537][ T9315] fbcon_set_disp+0x7d4/0xe40 [ 128.010550][ T9315] set_con2fb_map+0x703/0x1060 [ 128.010565][ T9315] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 128.010580][ T9315] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 128.010596][ T9315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.010608][ T9315] do_fb_ioctl+0x328/0x7e0 [ 128.010617][ T9315] ? __pfx_do_fb_ioctl+0x10/0x10 [ 128.010628][ T9315] ? do_vfs_ioctl+0x523/0x1a60 [ 128.010645][ T9315] ? selinux_file_ioctl+0x180/0x270 [ 128.010659][ T9315] fb_ioctl+0xe5/0x150 [ 128.010667][ T9315] ? __pfx_fb_ioctl+0x10/0x10 [ 128.010677][ T9315] __x64_sys_ioctl+0x18b/0x210 [ 128.010688][ T9315] do_syscall_64+0xcd/0x4c0 [ 128.010702][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.010713][ T9315] RIP: 0033:0x7febe4d8e929 [ 128.010720][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.010730][ T9315] RSP: 002b:00007febe5ba8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.010739][ T9315] RAX: ffffffffffffffda RBX: 00007febe4fb6080 RCX: 00007febe4d8e929 [ 128.010746][ T9315] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000008 [ 128.010752][ T9315] RBP: 00007febe4e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.010758][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.010764][ T9315] R13: 0000000000000000 R14: 00007febe4fb6080 R15: 00007ffe61cdf518 [ 128.010774][ T9315] [ 128.011470][ T9315] Kernel Offset: disabled VM DIAGNOSIS: 21:19:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81607e50 RDX=ffff88802a61a440 RSI=ffffffff81607e98 RDI=ffffffff93d5d080 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27aba10 R10=ffffffff93d5d087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607e99 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd3cb5b7bac CR3=000000002b006000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb585488 00007fd3cb585480 00007fd3cb585478 00007fd3cb585450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cc0ed100 00007fd3cb585440 00007fd3cb585458 00007fd3cb5854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3cb585498 00007fd3cb585490 00007fd3cb585488 00007fd3cb585480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81607e50 RDX=ffff88804f3dc880 RSI=ffffffff81607e98 RDI=ffffffff93d5d080 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27aba10 R10=ffffffff93d5d087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607e99 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555592b4f500 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31920000 CR3=000000005972f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb63db010 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81607e50 RDX=ffff88801e29c880 RSI=ffffffff81607e98 RDI=ffffffff93d5d080 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27aba10 R10=ffffffff93d5d087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81607e99 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555592b4f808 CR3=00000000491db000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb63db230 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f438d011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc1e5 RDI=ffffffff9b0c52a0 RBP=ffffffff9b0c5260 RSP=ffffc90021447178 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031333954 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b0c5260 R15=ffffffff855bc180 RIP=ffffffff855bc20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007febe5ba86c0 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007febe5b86f98 CR3=00000000611eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4f85488 00007febe4f85480 00007febe4f85478 00007febe4f85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe5aed100 00007febe4f85440 00007febe4f85458 00007febe4f854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febe4f85498 00007febe4f85490 00007febe4f85488 00007febe4f85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000