last executing test programs: 38.383096047s ago: executing program 0 (id=311): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0xec03, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000fe00000000000000000000000a58000000060a0b040000000000000000020000032c000480280040410b0001006c6f6f6b757000001800028008000240000000030900010073797a31000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000000005ebff0a"], 0x80}}, 0x0) keyctl$setperm(0x5, r1, 0x21062437) keyctl$get_security(0x11, r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="5d1c4db792b2f84bbcfe6e22c941fd2bf223be33678dbe465d15b72da4e8cc26ecf8010d07960797eae09ebaa722c69ef192ee258a7478bb759fecb7d97fc03164326b2bcab7936fcab7951a425f08f68fb1", 0x52}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="10100000000000000201000000000000a2897cfd2aefe6a219e6bd3df2f8bdc1e0b9236ff5756baa1af586ff10df895e37de710a97d3767dca1b9e48efd80d34a5645d5e4b6039cab607809104caaa5300a4ca7bf9e9e2148ccc636360583b1437eab6c934a59943c43a8c0d6244baf10561527e93b78610a17f3e92c9a828b563b38e026a7639fc0a9e821274e12b9aa73a4a58f215e61485d041184720e47f49ee2b755bf7238eed403a38c6900b64c1d147b0ecee7cec59719b93189e8b5f79ee38f6e0e63786fdc5298fe055085a00bc44c4eadb64d729086c8c66fc12921ab925cf03232923f4c6d445dbf553b3b2c6ddc15a509b317ce278ff5a4065f780a0b2638c5e025aa54f0d71a5c3da9a2bb4717b004a67cfc6727387deb8896f69fa0b86d14011beccc598aaac8b32866a7cdae38c7e7ec25d0f61a762a9a59d051bfddc467fac4c515014a7ca451f540cfa42eee4ac77ac0efa0493401f0df68e8a940106bd8b0ebfc026420be021375212a120dfb4771bd7ce795782b6533e1e4e257a69005cf09ccb1c6dd66f60c14f106eb04750ad3b81308a0960de2da1e59e2fda3147240c025f173ef2dcecc1302bc56078aaf712dc376e937b840c44333bc429efafeb57b1ccb7a1fd010c61d17f372961f4c8097fb1e43f010dbe988fa2393c35cb14ffcae36221db883a401d3d371f2cf4d6857b0906cd1cbe88925a669843f390ff87488ff4de2aac9d82453732645cd81b00c9c7194f6ed0b5fd595e1cfe3a47a87d86f4165b5305a582717701a18d692af15d866dbb714a7dc57590064f5c47f41eae14e9e067930ed80930e6b570b54964e26c9274b0c1d4d1d718750ff8370d43c71197059deec0b0800a87bff1ed60a4f57dfe193ac8a101f0758296964a5f92105ecd89360b148b1d9058bd4edf7d270b3b140c46e4a30625ac6eb911811a634302c28ed30b312d46af1929c3135bb0d965c377972ef124abe7f5f90612eebb4d6845d0d7357512a685b958e175c08cd7f05e804a25b770145f82a1a09af1d2a702c458212da765d3dafb2c521cdf9acf0cfba942c008842f48b293165083c3c5b541cc5e27224a63a21784316f7c59f8e3230d7cb60b17707e2d134b935f18c5f257faa4772ab5ba9e2306da9f1fd185f2807c586697c03b964705c5b68c1fb832cc48b0c4fe308b535161a0f779710127144321cd8b8e78bc9473137210efb4f0dd38378a5b00854894765a5f06d4b53b9975bd275e29ab8b9159ff02ab2c698d27aaa56d4f0b7ecb590e15150cbda271053033dca919a61b6c9e3cfa2ccf7720e3de526539af01689b5266892e295e479602aee101bfb7dbb120e64f221b7100a7ce57b86543364d08d4ae7e2dc68ac6c0c7862a749460cc0023583d665c58f35e35f0abe606808210caf24dd57203310b24374ece8d0403b42c737629e2f9e64bee852e8138aff5a92b3e0e625ffb3348bd516a6c568528cc06341cc62e25af85200d8817dc97a7a78e07139ddecaaa325907630fba58f4da59d2ef9eeab4e8145c0592a7b4fd73b573fa9b3c0828beffe90738575997249644f19f7fc101f5053ff0be4fd1c6ab20f04b2e72d9b7cd3f4c08ed88b45fa147cfbe02dc8dc8cb96ed7a62aacfa1ad2d1ec229f308b3d64899f52232c59b851bb5560a33bbd28b526dc441b5b24a8dd0dc54865f0f3b0a95939f273610c87677938a74ccf63af54c34f16e9282ca3f9aa20d47f317996f19e297f9b956b8b8e39e1f0e103e24574ff7d39ab69124b98a4e03d56472986c00a41a93b10cb3ee3c224b0db01875c6c0df30687c143c1d2c7840cf270247bc5ee21c76522d20a5efaf3d2ccaafc8400420f3c77d13dc3f80ad7cf4a89d1e8430cf46c4f92c3c19494729f8e644e18e035387aec8e39453202c75b2896ef7b091561c0d16d6fdaf06ccc47e5f02be6a8b5d102983bbfbaea8c7b46ef877a5240181f6fcd6c04ff3be6c84aa4738cb0ec7e4c333a2425282a8216eddd3627f4848ee531222e665e8b2f3d54f48ac3a801ff85df353be18ede6bbadcf7b34e2e7ce733b50cf2d6ede00e34e647513ff1942cc1dfb27bc585dedd2f290488231d46a0a5c4f983d0e5b9899a4b9745ca4c01abe50e605382211c6f8b42bccb2af298883d47cb45dac9158c6492fa4dc937c4b52095343b2744e41a3ab7a360f600bc96ec1312833f0ee3e12c762eb9802ee8bb69a82b9897a28799d2e6bf2547689088a4b675cdedfdc62d8ebe35101917cb9207b2dcb79ae4de33b95fe6bea75edb33aa1553ccde6487f93a39e948355429f16859e46c6cba7db44db26dd5a360727dcc87d8008e3c8b5dde37a9c1e272a450f0a0ed96d68f782c57f218911e3fe68ce48d3edfa362ddc7b110cc8884a93a54d81fbc61f591b5cad8f1157716a3a692631b44ceae2ae32d85a2c907d2ae726be328a2195d98fce4c12c13d2ce03f654bbaa6b0865ea02cabd5cf1d104ec8c1e56d061f3aeb3b7a5ac398c22733ed5a0fe183aca0bd3dc71d02e7e79e3d02974dc4892ffeea7c6eac4da83fe0e6280feb7a40630b29ece1cb1778707104ad40bbdd53b3f2738a904c5aba7984071cd122af54d872415ec798ac3ea916acc680db2501f981976a2b65ad4f56ea6d9220d3b42c3a7e68eb702f484617e1b035cde3a31e6a79eb12c1c063caa1dc40b325bb8dd7cb666bbb571871a5d6a69b3a271aa445905d47637532d18c18baa258fa8bd4033a1586b13fabbe66656ba0e651ef7d10b6814e565a522e9a7abf39dceac15a98d1c4cf60e8202bef1416dbf6977950b46f48998b76e64753a435a12b691cba084b718997fb53f759fa093ba823297e5de8030907c29a89a8329d5996b714f790ec85229e2f4fa90c44fda753e6b7023541c48ea4f874ec7e1cca850c76d29d94b79dddeb60bd10c2bc3ef929f52de7a2fcbc6816bfd45c5ffba2456eb79c0a7691c14e0b243405ce171e4522db2109b58cfb8408567bc478f1594035495558da5ea512f0317495522be966b9e52a26f7dfaecda98f1ba97e5577ed79a48e15cb525a67292588224e63a4cbcb6ac03d4761468fe558858364fa4d30a3c572820024703aaa3c6015238daa365c7975b99f7ce96369ecd4aa2a50db585320f345b9de9ccaceeafdf0c21ecf01d8f36f60a05f9d6baaa5c347094a4a1d02d25ff7d1bd53114e685961e372cc60e63b732a9375b3680c5d7b74806bdd08a3766bfc6c581e30e682d3a751317d31fee33810beb046a17f4bbf61007daf37107a186c4f1f2473c17c53a17dfb46b2accba85cbf29902dac37727f4eee9c7d5f74afd397295b5d95c194a47a70496a065425a22ab07cfdc865e7cdc8f64b0c9f31bda4b5564a384c255963ac172f5bd7820dde87d94922819c7e1dd432121176a45f6b8a03089baf75a6941aef59242d3481e2c8bec5e5f7757f439bd26bc09cee1a1516b9a2a4567e05c32d7ba613b07feb747b81bcda6510e9b06b0dfb3d572f2da2f31ee5d4d398341ac10b01112536c311b033c9af8b8e4dc7929e5e83279380472b07cb58c2c317691eb0e585451d77a5872e05b686813ae67a9e15255a720f7765a9fc64a7b81be1daec0bc35993f47cb3eda6758a38b06e21106a591bc03ed1e28280a789a076ae751659a5cf8acbcddc98b8b0e9a8c3a745b29d721bc886b1a730b32728ff2ecc79582944a189f30cbc9a32621f2f4a3dd718c9df211b4bb68fafd31b2d170ef412c69d9ff25634f2e67ae4ee31c011d77f779c3bd2a920a19625b634823ead40d9132c3b07a38b0168466b1e5a84d2068fbc35c8dcc93ff7738a0dd0092c7b4d5aba178d9bbef7cfa1113eabfad2437eb586bbdb5c06d7c5d22094ac0bdaa63cdc5573b42282562581a2eb8f64ef42b36f39f87bb5b44b8f630a9af2d413b09b2a366929ede7d1c7a87297b0b148477b636be0884ab89f77c9f868aff2e7965d7425d4719ed02baef44e0d65517b624532b6455fe44dd8ae5b4fb8745f8829738cf112424c8b20df307fee2a4c4de880f8c0345c782f819c8a2fa907194309a71a121384ad8ff31a275b98c084a474af375760cdbb0d855f64dbcb19e5f3d69c6e544ac7c35a2b0966d6505266ec790f71c2feae190ac284110beda66a85628fd3c62949067a06dfcb2652626bf5bdfc2f76918cb0b777232ac3a301e0ee284c76d9273b1c026c6aa7f088d535f1fa4444a6c6b6be5962ad25ec4a8ad15435ef95e4e2925d6ae45e9e1b42154889f87a6fee67ea5982ede028893d9a040a845da3c95e25af3796144e28f0926854574c6d96f6061808fce8814a16ed2fb70b74f6097e9007352c1af886d2cebfdc98026b70622ca0cc721ecdd923e1fe8596245033c76b96a85e89e124ff4302ac4fbb12eb7439d6cdd24be7fbd8b0ee64b60630dd457979f0d409ca8fe53089532a84452f376df6bc0759c423bf3f78a0864e9b431bba61af8a384d0b5056519661f8add9ae6687022b0d8ce67ddaf3dd9bef25cb68cd39e4d89e1dcabbd74e2e2da741703845128d2cae107f4d7a6299c1375459bb3315a4c334be5d26c3302b2bff653fb9485668b8fc197b0bb5ed43e50c0ae145b90cf34b49280ada7b4be32bb4673220b43c7e0c7a83554fc554f6cad18e9b2a6e8ee583552794a8981ed710141ad8913befef2f0a9f5bf8f9bee3a2b10784ac0f0000d79ef9c0f611c07235c1fab1e5db96dffbff3b8d32dea865197457df2584aef7f2f4c0b96887d14139055e49ae7d1fe237c2947b16d357b3487af27c156221a8957abd7eac8af835df1a711066903118679e01333fd81820b19ea91aa0d53e226bfba8d18810bbdbe6b804e1a3ff073a5de588067fb0de7a0aeee9bf1bfaf1a7e15b8d7a11ca27db5d93af5a27e1fcba8162cec6d2d41a57d647b955f4e6d506a75309a93fd21ed649f98eb52676409b03280f8a760bb607c79a54af077da381721fd36acd72a2665257ce08905ec3cf775d5415b04500ad72ff7a907b262f425ed7a1d6b7bbba12f2f9481f28da250609ae19cb958886472387ed4113ae3d5c5ad7fa28302eeab828e657cd3ae2eb27bdfc8a434bc765f562cba5dc4443457b3e991b7ea37b68a1e08862bfc97e069bd71a7efe546d92559fddcfbd6f5eb5b5f786ea840d7f27ae00b510e8832d6a1d9017c5d46cdb4204a9d624f0a16ec65d336024d401feb5b0221c0e0c4641a2b04139d4cbb38796510037eccc4c39a766c33e09884a825d2e361cd95ef9f2c8c3f3c856662b002edee18e71f5d3a0d1d1c44bf2b3f75c2844dc1b76f1c2eba3dc5f6b76c9e9b873a425e53daa708726cbd4513360e0c8a118ff747302158e7fce8ffe065044c14f3d56782236d6c9439b6e952810ecfe742d55b46fb3d68db35bf16e57ee501a557c49475203523d7ee93ac70b3f8ec6b4b24789c6a78a6a17f659735206de1e71d0c532c79d8647d53771e50764bf96aa91a9cafdc59081c151f6c2ef6b43f77132726f248c2d57648af1feaf26967344a369b9b560f85f4ee4c097e1e37dcc63c960073a347b473d42bc8ad7bbe52c4e77c5a48809cb384dc15d6eed57b2aa64ce247afc3391f53894a501f23d5384c9d0575f809a4a6b1cdf2857ba205ba135a5a92899eec11a9a5d3db14703f124350ef9539ed88605b93870c57f318c0f7cd9e2853617c6000d0fd7073dffd9a494595d2ac6e0a977c184b05d57b311be42ac06e9348ffd063661291c79181b6c9cadd105d24917d384c4fe3c5bfbe507554a750f096499ab935baefa1797c1f000000000000000110100000900000082124a51824a44cd7b4c9b38cd242dec89162cdd20788085c427943b57fb4a174d94c6fbb7aac0441c90245a79ecc0c41f299798a626fe09632cba8e4c67535d6d390ac944af1dba682a57fbc90f36bca8bcbabf121168858bafb8d47516676ffb3f46ce22834a21b1436b81cc4c11b38c5b78ec90d21b4b44568739c5b2989110af230046abe5d968ad261cf0f9ff21136513dbc89f8350355bba111c1c2c382b750385b3df3329dfe41d443f464c63ec99959a813041c09ef6f1917d5869b14e48acd3f08770f6959149f6121a51de84c3bae5a2356fed7900000000000000980000000000000013010000ffffffffa5184a4b7e3b43fba6eae8a44810f1f053570d4b3166eb00cc4f3c87f3c625c3004f35141583b3826d01a15fadd445aa314aec5ccdf0c09d4e5ca3fc7b881c7d22e1c8bedb3d4acb11213ee686e2bcd6e8b51eee99d000d83007a01bb58e8086e9c07b7b53aa7fbee18ae53d98344549580a63d001f1f1fe8633262d151c0ec19d30000000000000b0000000000000000100000003000000e0e146ab8db92ddccb7b4130114e0e63aa4e4ae33088434dbeb47a14671d1622820f5e4996b9f08943216287144f47e4e1aa47f75894034db13c95ee8c64596ef4b54dbe6bdf2dabef836c261078940ec05b86ec4d2c940fe519f2b9fb000000000000ea267450404df411e4417e363006dc7edb41446a1496a162cf09481c2308db718373c94d5844d2d91b81aba321150e8f227c62d3e72eb79c02c7cd00007a5081950c4db8ed741001dd40a04a961ab7467bc494a07050b27feb368048980b612463a7f22d3d62161962ce0e90baaaa81153be2272dd20491a5b317eab940bcdf3ab0d9b791fbb375cae7dc348e9caf0ce2e2bde0661430052d15f1fbd2ea61aa64de3dafdb1d3ddb67dcb89ed13d6b3910fc93a3dcf4eaaa5b3ae638ec2ef74a6b81281f9a6cfdd"], 0x1248}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x67be, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x2, 0xfffff5ee, 0x8, 0x155f, 0x0, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0x0, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x40, 0x4, 0x2e3a, 0xffffffff, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x575, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x8, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x9, 0xfffffff8, 0x401, 0x46, 0xee, 0x0, 0x2, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0xb, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x80000000, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x4, 0x101, 0xdd84, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0xc, 0x77, 0x9, 0xfffffffc, 0x10004, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0xb05b, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x634dfaee, 0xc, 0x7f, 0x1000, 0x201, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x126d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0xa, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300090a0000000400000000005e078a8df9644b74be6dc7f0930000030006000000000002000000e000000100000000000002000200010000000000000000005b2f8b000000000300050000000000020000007f0000010000000000"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 38.042024069s ago: executing program 0 (id=319): r0 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) (async) msgsnd(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) (async, rerun: 64) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7}, 0x10) syz_emit_ethernet(0xe73, &(0x7f0000001180)=ANY=[], 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async, rerun: 32) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000000)={0xe, {0xbc8, 0x8, 0xd, 0x9}, {0x8, 0x8838, 0x4, 0x8}, {0x0, 0x101}}) (async, rerun: 64) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) (rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 37.699782648s ago: executing program 0 (id=325): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x12, r5, 0x0) r6 = gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000000000)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000180)={0x19980330, r7}, &(0x7f0000000240)={0x4a3, 0x0, 0xb, 0x8, 0x7, 0x80}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 37.579903818s ago: executing program 0 (id=328): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x5, 0x4, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000440)={0x0, 0x1, 0x1, 0xfff8, 0xf3, 0xb5, &(0x7f0000000340)="14afcec10caa837bcf6946ace06e6c356933dd818f4f96c453a38b84e9f22046fee59409d70a47e8e15f9f99211e4510a108ee8e3c0506cc0e86300cc9b8388c41065c4f02426fc35ba14bd7392d99049e5acd32802d9e52396714981bad5bd9a77923e53bf7e4a6c37631da0030ad71fd74f97efaa7829a6908fd66e03832a350c5e90a2ad566bab58e4a797927cca3b5ed909e7697ad09119d422201a5b076f1009445f64270df9fe2738178f23d44447917e1f3983e51e34fe7aeedaa4670b98a5625493c71f35d8595cdf741ae387d9e90729efe0c48110562000711c57a90022c062f472987e695fe7584d15cce22293d"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x25dfdbff, {0xa, 0x78, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) read$snddsp(r6, &(0x7f0000000040)=""/10, 0xa) write$rfkill(r2, &(0x7f0000000480)={0x1, 0x6, 0x3, 0x7, 0x1}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)={0x28, r7, 0x62c21a4ade68aba1, 0x0, 0x25dfdbf9, {{0x32}, {@val={0x8, 0x1, 0x60}, @void, @val={0xc, 0x99, {0x7, 0xa}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'\x00', 0x2000}) read$dsp(r9, &(0x7f00000000c0)=""/69, 0x45) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'geneve0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 36.570582946s ago: executing program 0 (id=348): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 36.150830277s ago: executing program 0 (id=357): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d760900746973edfe992c6ed375b806576d92fc94deca6946e0e99543e6b64716f096d9e1e9a104d1c619ac73d49e8e9b155382beff785b2cd4f2d66715d65ff77a5939e3358ae5bf943530eac9dbea0300000034abc6d9adbe58d3ad25dfe5ce369f2e481f105780a0b136fcf9897acadd4a2e7c5a7c7f699f9ef29c030c879bb9b8bf3c1c2cfcb50905141d61a21f0514aaf45440c59b17c0f49a8bf63daa06bb84ce2d1348c7fb8e12b63ce2bc6f5fd2fb867fab1b551bc55ae83e0220010015f1"]) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="8fc3fae7a09dd0a81a5a4d8dc6aa430a396431c896907a6849ed855877cba4243d18fa47ad007b107dff23fdaa80abd541486201cf199056ee8e405280b46175665cc0e7d30079eb482af1fb37ad60fdcbc1da6b90351f94f2ec6c17d3b162ca4feaba13065eeddff86853ffae1702d0d405685e1230e654decf4aa0", 0x7c}, {&(0x7f0000000580)="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", 0xfe}], 0x2, &(0x7f00000006c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x90, 0x800}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="b315db43af08fdcb993b4e3f958a96acd06918ec3aafdcabe3318260f94b4233e7947229f05b8bf00839487dd0c056713ed1152e198f66db242beb8ce9f52ac6518b0137c0ee6e9ccb4a22abc2c824c30a2686d3acb9515ffbc7d713237d1f32aaa0e865317c87cc", 0x68}, {&(0x7f0000000800)="b46ff8f8713b70262597e1d1371b81ece5728f9307ad79274c8bc009ebcffebcccaf1f0bda04a83f9beca2327da4b72d7ad06d9274e62480f656fcf069019b57d9b1dcd182f50e61179d925876c75e603fadf3ceb1118ff2d1c7aaf6651c5169c79af7182d757bce198f6da6821c42522e7dc6b83708fbc4a0f4f4d266a069d216cd3388bc741ae442e81cfa710adff64eb1041f672b2493d42a8cb949ead227c889343818d5cbe98da67a57e886ac42ad2d7482fe", 0xb5}, {&(0x7f00000008c0)="2fee0b84e1134144b2474e29117d8884c0274abdd55d57b0", 0x18}, {&(0x7f0000000900)="d0062433c1741b13a27ab08f53d58b7db76a3a7f65aa3d122d7008d655c781da625ef02c854b80645e26adb0fb4aa7990ce1f7aeb15f23eae692cb0d071f894186938a", 0x43}, {&(0x7f0000000980)="c194bacea54eed62a698422c6ce12e8f1f6fd394d15e95883c69241e4476b2d9e736f3060077140e82422398d155185277662769f2a2c289d69405", 0x3b}], 0x5, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffc}, @iv={0xf0, 0x117, 0x2, 0xdb, "9d8939798e9bedda58813d789c3673896927d913c85a6762387b085fa4da7623e47529def9649e714eb77596733bfb0b9ae97130acbd410208c8209252a833912a77421d21f2b597c9245b6f23b632f6109b528cb3aff8e864588118201837c10d49ebe3107e224d7583f1750b0e2b553c95b5f7ac8ec9f0247dfa614bfe4f61a323091142f9f31ab7e56b8016c314b33bdec6ac5715ea52178633c80819c0fa5c0f41582f11f596e9ccf4766ad8a1baafdbeecc148ad7dfe0b3c564a09f19ca2770dffa90dbd758d15f93b86d18ee7d8e0c9fdef4095850602c2e"}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xee, "cdd78b388ca274ce39babb49cfff33d6b1a8563282ce0641fc925d80b45b39cfd3cfe628294af7f4d9c2a78771e4895837365b4b0ce63386e5b7382216bce6cc9141422bd5f5ac622de09a3072134e77c536d3157b42d0ac84f88ad88e6311b0cf90ec6a35d0bad9b0852470de8890939487e88cacb0f699d73e3d45a09d92b894dee12dbfa09c617cdcc10c2b9373ea55b5274b56d631f80b5a4ef7484fad9f95eefa40cd0f8ca81ff52028dc1aed0edc380b822852cfba3669a3698e0a236473ef04425ed4168602e03807cc7e3e23839de25943bffa4a7cfb2a00ec778439457d2e721bb0e6d7f92514ba2c6d"}], 0x258, 0x4000000}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0xff}, {&(0x7f0000000dc0)="6742801d3a7abbb0d532cb91df72ab6c8b1e0ea3b9e68726748b1126d432b872b0beb81b9e8cfad6558dd48f10a45e136d90a7c026cdc63150159847854e246ff8998a5e20ff2fd1edf6cf5502e3574fc0250ef8e260494246f82359f0f890becfdedc", 0x63}], 0x2, 0x0, 0x0, 0x40c0}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="c2cbcf42ed806e141089c398ad55ed51700917db32a6e397bff93f7d7b81a818b4d2266d31c883969308e7c21a1c39119dd7dc9f87c6f83f188289b7cfcfdb6ab9cfc0f51fe4bca3e2916f38bd66cd036fe1a31f380739e3e6f192185b9b5342e5857d1b323c370ce2f28ff950a78e4319d20b6826448d8800bfd75a4d160500bfbdcba4826fcfea21c26be015142e2341c93d431f51904c5f53eb6eea6ad2edf5b025533fc1d6b543e69a71cd7de3ba", 0xb0}, {&(0x7f0000000f40)="5f7c579064f7b555540a027716e909f50155794c1449e9db41e0ab57a6fec6eb460b4206eaa5bc72d55fed999ab9124de943f77a5417588b0b4c57c2b7ffbc135910bc14b8339759e001af74ea4d45b25253c3b8a3c953e7af502e4ada4174c89d6202ef98f32e", 0x67}], 0x2, &(0x7f0000001000)=[@iv={0x78, 0x117, 0x2, 0x64, "b5451069a229eb5df276c6fd1430b2ad90b16bb78d8ad2467dd8ae37878815c790551c0fb11f5f757f320b48607951a9a79e3c8c09fa26719794169adc17e2fd58a38cd91e476efbec082007da40c940b11b942fe2e204aeb263e1d63db5e2373f1e2a5e"}, @iv={0x100, 0x117, 0x2, 0xe5, "4bdbe4792cf2e62450c82a0421fd14a091c86e159cdd5eaa5f423d9166f572a5ed578e21d91236b7812cd39dc2edb9ec33665b09825e753539e8e7038059916cfb862ab61583d9c929873f941c8192fb79902fbe2260774401ef22be60bd69937e9d0824b5567d28145569e87fb4d5d6ed0084e4a919f011a93e26309e6b37904670a54817981d4d01e4249a3f26e3d35c01dcc17756105517a073c5dd36a9873ebc6326e37f848ec09486330638f82cceb44137ec0c0d1213f6d3f763dbe67acbd63ba78c13ee69dd8ec8c9ac11c2e9d0a468a2c58ad929137576e12a0c780f37fb5b2dc3"}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x1c0, 0x2}], 0x4, 0x40000) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x5b, 0x5c}}, 0x40) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x6, 0xc9, 0xf, 0x7}}}}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x80000000}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x100000001, 0x1000000000, 0x0, 0x3f, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x100000005, 0x9, 0x4, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xfd, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0xa, 0xe, 0x5a, 0x81, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x2}, {0x6, 0x1005, 0x9, 0xa, 0x6, 0x1, 0xf8, 0x53, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x2442}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 36.119648838s ago: executing program 32 (id=357): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d760900746973edfe992c6ed375b806576d92fc94deca6946e0e99543e6b64716f096d9e1e9a104d1c619ac73d49e8e9b155382beff785b2cd4f2d66715d65ff77a5939e3358ae5bf943530eac9dbea0300000034abc6d9adbe58d3ad25dfe5ce369f2e481f105780a0b136fcf9897acadd4a2e7c5a7c7f699f9ef29c030c879bb9b8bf3c1c2cfcb50905141d61a21f0514aaf45440c59b17c0f49a8bf63daa06bb84ce2d1348c7fb8e12b63ce2bc6f5fd2fb867fab1b551bc55ae83e0220010015f1"]) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="8fc3fae7a09dd0a81a5a4d8dc6aa430a396431c896907a6849ed855877cba4243d18fa47ad007b107dff23fdaa80abd541486201cf199056ee8e405280b46175665cc0e7d30079eb482af1fb37ad60fdcbc1da6b90351f94f2ec6c17d3b162ca4feaba13065eeddff86853ffae1702d0d405685e1230e654decf4aa0", 0x7c}, {&(0x7f0000000580)="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", 0xfe}], 0x2, &(0x7f00000006c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x90, 0x800}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="b315db43af08fdcb993b4e3f958a96acd06918ec3aafdcabe3318260f94b4233e7947229f05b8bf00839487dd0c056713ed1152e198f66db242beb8ce9f52ac6518b0137c0ee6e9ccb4a22abc2c824c30a2686d3acb9515ffbc7d713237d1f32aaa0e865317c87cc", 0x68}, {&(0x7f0000000800)="b46ff8f8713b70262597e1d1371b81ece5728f9307ad79274c8bc009ebcffebcccaf1f0bda04a83f9beca2327da4b72d7ad06d9274e62480f656fcf069019b57d9b1dcd182f50e61179d925876c75e603fadf3ceb1118ff2d1c7aaf6651c5169c79af7182d757bce198f6da6821c42522e7dc6b83708fbc4a0f4f4d266a069d216cd3388bc741ae442e81cfa710adff64eb1041f672b2493d42a8cb949ead227c889343818d5cbe98da67a57e886ac42ad2d7482fe", 0xb5}, {&(0x7f00000008c0)="2fee0b84e1134144b2474e29117d8884c0274abdd55d57b0", 0x18}, {&(0x7f0000000900)="d0062433c1741b13a27ab08f53d58b7db76a3a7f65aa3d122d7008d655c781da625ef02c854b80645e26adb0fb4aa7990ce1f7aeb15f23eae692cb0d071f894186938a", 0x43}, {&(0x7f0000000980)="c194bacea54eed62a698422c6ce12e8f1f6fd394d15e95883c69241e4476b2d9e736f3060077140e82422398d155185277662769f2a2c289d69405", 0x3b}], 0x5, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffc}, @iv={0xf0, 0x117, 0x2, 0xdb, "9d8939798e9bedda58813d789c3673896927d913c85a6762387b085fa4da7623e47529def9649e714eb77596733bfb0b9ae97130acbd410208c8209252a833912a77421d21f2b597c9245b6f23b632f6109b528cb3aff8e864588118201837c10d49ebe3107e224d7583f1750b0e2b553c95b5f7ac8ec9f0247dfa614bfe4f61a323091142f9f31ab7e56b8016c314b33bdec6ac5715ea52178633c80819c0fa5c0f41582f11f596e9ccf4766ad8a1baafdbeecc148ad7dfe0b3c564a09f19ca2770dffa90dbd758d15f93b86d18ee7d8e0c9fdef4095850602c2e"}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xee, "cdd78b388ca274ce39babb49cfff33d6b1a8563282ce0641fc925d80b45b39cfd3cfe628294af7f4d9c2a78771e4895837365b4b0ce63386e5b7382216bce6cc9141422bd5f5ac622de09a3072134e77c536d3157b42d0ac84f88ad88e6311b0cf90ec6a35d0bad9b0852470de8890939487e88cacb0f699d73e3d45a09d92b894dee12dbfa09c617cdcc10c2b9373ea55b5274b56d631f80b5a4ef7484fad9f95eefa40cd0f8ca81ff52028dc1aed0edc380b822852cfba3669a3698e0a236473ef04425ed4168602e03807cc7e3e23839de25943bffa4a7cfb2a00ec778439457d2e721bb0e6d7f92514ba2c6d"}], 0x258, 0x4000000}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0xff}, {&(0x7f0000000dc0)="6742801d3a7abbb0d532cb91df72ab6c8b1e0ea3b9e68726748b1126d432b872b0beb81b9e8cfad6558dd48f10a45e136d90a7c026cdc63150159847854e246ff8998a5e20ff2fd1edf6cf5502e3574fc0250ef8e260494246f82359f0f890becfdedc", 0x63}], 0x2, 0x0, 0x0, 0x40c0}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="c2cbcf42ed806e141089c398ad55ed51700917db32a6e397bff93f7d7b81a818b4d2266d31c883969308e7c21a1c39119dd7dc9f87c6f83f188289b7cfcfdb6ab9cfc0f51fe4bca3e2916f38bd66cd036fe1a31f380739e3e6f192185b9b5342e5857d1b323c370ce2f28ff950a78e4319d20b6826448d8800bfd75a4d160500bfbdcba4826fcfea21c26be015142e2341c93d431f51904c5f53eb6eea6ad2edf5b025533fc1d6b543e69a71cd7de3ba", 0xb0}, {&(0x7f0000000f40)="5f7c579064f7b555540a027716e909f50155794c1449e9db41e0ab57a6fec6eb460b4206eaa5bc72d55fed999ab9124de943f77a5417588b0b4c57c2b7ffbc135910bc14b8339759e001af74ea4d45b25253c3b8a3c953e7af502e4ada4174c89d6202ef98f32e", 0x67}], 0x2, &(0x7f0000001000)=[@iv={0x78, 0x117, 0x2, 0x64, "b5451069a229eb5df276c6fd1430b2ad90b16bb78d8ad2467dd8ae37878815c790551c0fb11f5f757f320b48607951a9a79e3c8c09fa26719794169adc17e2fd58a38cd91e476efbec082007da40c940b11b942fe2e204aeb263e1d63db5e2373f1e2a5e"}, @iv={0x100, 0x117, 0x2, 0xe5, "4bdbe4792cf2e62450c82a0421fd14a091c86e159cdd5eaa5f423d9166f572a5ed578e21d91236b7812cd39dc2edb9ec33665b09825e753539e8e7038059916cfb862ab61583d9c929873f941c8192fb79902fbe2260774401ef22be60bd69937e9d0824b5567d28145569e87fb4d5d6ed0084e4a919f011a93e26309e6b37904670a54817981d4d01e4249a3f26e3d35c01dcc17756105517a073c5dd36a9873ebc6326e37f848ec09486330638f82cceb44137ec0c0d1213f6d3f763dbe67acbd63ba78c13ee69dd8ec8c9ac11c2e9d0a468a2c58ad929137576e12a0c780f37fb5b2dc3"}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x1c0, 0x2}], 0x4, 0x40000) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=@reiserfs_2={0x8, 0x2, {0x5b, 0x5c}}, 0x40) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x6, 0xc9, 0xf, 0x7}}}}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000340)={0xdb, 0x0, 0x80000000}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x7, 0xd, 0xb9, 0x0, 0xe, 0xfc, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x5, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x8, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x100000001, 0x1000000000, 0x0, 0x3f, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x100000005, 0x9, 0x4, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xfd, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0xa, 0xe, 0x5a, 0x81, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x2}, {0x6, 0x1005, 0x9, 0xa, 0x6, 0x1, 0xf8, 0x53, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x2442}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1.758782235s ago: executing program 1 (id=933): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.75833978s ago: executing program 1 (id=935): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x6a040000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x8, r0, 'id0\x00'}) openat$cgroup_pressure(r2, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) 1.627480076s ago: executing program 1 (id=940): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r0, 0x4e40, 0xe967, 0x23, &(0x7f0000000040)={[0x5]}, 0x8) (async) lseek(r0, 0x0, 0x1) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) (async) preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/83, 0x53}], 0x7, 0x401, 0xfffffffa) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0xa, 0xd, 0x1, 0x9, 0x4, 0x8, 0x24, 0x9c12}, &(0x7f0000000580)={0x5, 0x9, 0x8000000000000001, 0x7fffffff, 0x0, 0x60, 0x6, 0xe}, &(0x7f00000005c0)={0x7ff, 0x3, 0x5, 0x4, 0x10000, 0x5, 0xffffffffffffffff, 0x9}, &(0x7f0000000640)={r1, r2+60000000}, &(0x7f00000006c0)={&(0x7f0000000680)={[0xffffffff]}, 0x8}) keyctl$join(0x1, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700), 0x111, 0x1}}, 0x20) (async) r3 = accept4$unix(r0, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e, 0x800) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000840)=0x6) (async) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x521400, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000008c0)) (async) getdents64(r4, &(0x7f0000000900)=""/231, 0xe7) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) write$selinux_load(r4, &(0x7f0000000a00)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x20, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x20}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff8000, 0x17}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xe8, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf8c}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbc4f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r7 = syz_io_uring_setup(0x2950, &(0x7f0000001e40)={0x0, 0x6dd, 0x10000, 0x8, 0xcc, 0x0, r4}, &(0x7f0000001ec0)=0x0, &(0x7f0000001f00)) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r5, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000001f80)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001f40)={0x0, 0x3938700}, 0x1, 0x8}) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000002080)={&(0x7f0000002040)={&(0x7f0000001fc0)="45b452ccff596b2033b3038e54b09ee2ddc1044f11eaec95c3c1baa266ef90793baef25f2ecf55f89169cee0d9f480efa3256d84f15f68086f3a47dab6ed66c657c6a2459eac71b636f309d5", 0x4c, 0x1, 0x80, 0x9}}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000020c0)={"9ef807851e2cb8fd13762b1fede0c425", 0x0, 0x0, {0x5}, {0x200, 0x8}, 0x9, [0xb5b2, 0x3, 0xd3, 0x33, 0x4, 0x4, 0x401, 0x0, 0xd, 0x80000001, 0x0, 0x9, 0x40, 0x0, 0x8, 0x8]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000002240)={{r3}, r10, 0x14, @inherit={0x50, &(0x7f00000021c0)={0x1, 0x1, 0x3, 0x8000000000000001, {0x25, 0x0, 0x8, 0x401, 0xfffffffffffff801}, [0x3]}}, @subvolid=0xdc1}) (async) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) read$FUSE(r11, &(0x7f0000003280)={0x2020}, 0x2020) (async) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000052c0), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r12, &(0x7f0000005300)={0x29, 0x6, 0x0, {0x2, 0x1}}, 0x29) 1.626577363s ago: executing program 1 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) fdatasync(r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8084}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 1.466417213s ago: executing program 1 (id=948): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@setneightbl={0x1c, 0x43, 0x7f343dd74644d465, 0x4, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0x8, 0x1, 'GPL\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x20) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getpeername$tipc(r0, &(0x7f0000000140), &(0x7f0000000200)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x11, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}], [], 0x6b}}) 1.465173982s ago: executing program 1 (id=950): mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cifs\x00', 0x221000d, 0x0) (async) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80015b1a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32) setresgid(0xee00, 0xee01, 0x0) (rerun: 32) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x1c243811) keyctl$chown(0x4, r4, 0xee00, 0x0) (async) keyctl$get_security(0x11, r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x3, r8, 0x1, 0x0, 0x6, @dev}, 0x14) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r9, &(0x7f0000001d00)={0x2020}, 0x2020) (async) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @local}, 0x10) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r10, 0x0) read(r10, &(0x7f0000000000)=""/114, 0x72) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_vlan={0x6c, 0x1b, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x588}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x0, 0x6, 0x4, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) (async, rerun: 32) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) 1.31998258s ago: executing program 4 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{0x5}, {0x5a, 0x50a, 0xab, 0x9, 0x7}}}}, 0xd) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) syz_clone3(&(0x7f00000003c0)={0x800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x31}, &(0x7f0000000240)=""/21, 0x15, &(0x7f0000000280)=""/75, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) ptrace(0x4208, r3) (async) ptrace(0x4208, r3) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.260227453s ago: executing program 4 (id=954): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') unlinkat(r4, &(0x7f0000000180)='./file0\x00', 0x0) 1.258491611s ago: executing program 4 (id=955): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) mlockall(0x3) shmat(0x0, &(0x7f0000fed000/0x4000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x5000) (async) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x5000) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000400)={&(0x7f0000fed000/0x4000)=nil}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f00000003c0)={0x1, 0x0, 0xe7, 0x8, 0x8000000000000001, 0x7, 0x5, 0xdb, 0x10001, 0x1, 0x8, 0x1}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0xfffffffffffffff2, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20001055) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2903fcffffff00000000160000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2903fcffffff00000000160000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c9, &(0x7f0000000100)) 679.029537ms ago: executing program 3 (id=966): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x0, 0x85, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x1cee, 0x1, 0x5}, 0x1, 0x0, 0x6, 0x6, 0x2a, 0xa, 0x9, 0x1f, 0x2, 0x10000, {0x9, 0x80000000, 0x0, 0x1, 0x94, 0x3}}}}]}, 0x78}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 675.945202ms ago: executing program 3 (id=968): r0 = socket$inet6(0xa, 0x6, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000340)=0x4) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c0000280002800500cf00040000001400030000000000000000000000ffffac1e00010800080039"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x7}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 558.75614ms ago: executing program 3 (id=969): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000004540)=@polexpire={0xc0, 0x1b, 0x2, 0x70bd2c, 0x25dfdbff, {{{@in=@remote, @in6=@empty, 0x4e22, 0x7, 0x4e24, 0x5, 0x2, 0x180, 0x0, 0x3a}, {0x7, 0x100000001, 0x4, 0x0, 0x1, 0xffffffffffffff8b, 0x7, 0x5}, {0x9, 0x2, 0x1, 0x8}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x2}, 0xa}}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x8, 0x0, &(0x7f0000000080)={r1, r2+60000000}, &(0x7f00000000c0), 0x0) 558.545132ms ago: executing program 3 (id=970): r0 = memfd_create(&(0x7f0000000200)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\x804\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U\xe8ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) fallocate(r0, 0x0, 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000400), &(0x7f0000000440)=""/180}, 0x20) lseek(r1, 0x200, 0x2) 557.746874ms ago: executing program 4 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x5, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 498.123864ms ago: executing program 3 (id=972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x2, r0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040804) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002640), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000002740)={0x0, 0x61, &(0x7f0000002700)={&(0x7f0000002680)={0x14, r6, 0xf806850cacafa3b1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4040010) (async) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') 497.552604ms ago: executing program 4 (id=973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xeb01}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000400)={r5, 0xbf, 0x7382, 0x5, 0x2, 0x6}, &(0x7f0000000440)=0x14) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000080)={0x20, 0x0, 0xf7}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="beb85e00000000fa0000000f01d9660f78c4020a1b7c363605000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f32263e81e0c73a000066b857000f00d0", 0x51}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 497.324548ms ago: executing program 3 (id=974): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000340)=0x3d, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000340)=0x3d, 0x4) recvfrom$l2tp(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) (async) fchdir(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0xfffd, 0x0, 0x4, 0x0, 0x0, 0x20, 0x10001}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0xfffd, 0x0, 0x4, 0x0, 0x0, 0x20, 0x10001}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x100, 0x1, 0xb1a, 0xe4da, 0x4, 0x0, 0x0, 0x8, 0xb667}}, 0x50) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001e00010000030000000000000a0000000100000000000000080001"], 0x24}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x17}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x26}, @IFLA_AF_SPEC={0x94, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x2}, {0x8, 0xc, 0x0, 0x0, 0xc}, {0x8, 0x20, 0x0, 0x0, 0x27d2}, {0x8, 0xd, 0x0, 0x0, 0x5}, {0x8, 0x20, 0x0, 0x0, 0x7}, {0x8, 0x2}, {0x8, 0x9, 0x0, 0x0, 0x5}, {0x8, 0x2, 0x0, 0x0, 0x80000000}, {0x8, 0x6, 0x0, 0x0, 0x6}]}}]}]}, 0xd8}}, 0x4000) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r5, 0x8001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r5, 0x7}, &(0x7f0000000040)=0x8) 289.096782ms ago: executing program 2 (id=978): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000080)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1412, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) r3 = accept4$rose(r2, &(0x7f00000001c0)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f0000000200)=0x1c, 0x1400) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x19, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3c, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbf70}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x9, 0x4, 0x9, 0x2, 0x3}, @ldst={0x0, 0x3, 0x1, 0x3, 0x8, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xa, &(0x7f0000000400)=""/10, 0x41000, 0x50, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[r2, r2, r2, r2], &(0x7f00000004c0)=[{0x3, 0x1, 0x9, 0x3}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x2, 0xf, 0x6}, {0x3, 0x4, 0x6, 0xb}, {0x0, 0x2, 0xf, 0xf}, {0x2, 0x3, 0x6, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000640)='macvlan1\x00', 0x10) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000800)) r10 = open(&(0x7f0000000840)='./file0\x00', 0x1, 0xa0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000880), &(0x7f00000008c0)={'L+', 0x6f}, 0x16, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r12, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f41d7d6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc5431a428dabdd2}, 0x24040800) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) bind$packet(r10, &(0x7f0000000b00)={0x11, 0x6, r13, 0x1, 0xe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r14 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, r14, 0x0) vmsplice(r4, &(0x7f0000000d80)=[{&(0x7f0000000b40)="c8affa2baf70cdde1696bc8e45b79576b0", 0x11}, {&(0x7f0000000b80)="24c4db52f6614d9b36b775e5942e62b0dd4b0a57093013e5cef4774a3d9c3b5bbbb76bd9e5c6fa38133fb41aece079515c83b458b9061a8e12f678d8916859", 0x3f}, {&(0x7f0000000bc0)="7a434d29b6f4cc1e9c1c9fc599265f0ca31237939cb5f330350b134144d26434a282b3f30737021b5587ba0e08b364ded506797ff915cc51d656edfc0ebae9179f6d790fe522f4a572ec932e703077b6e5f049170c911fd5708b900a2e00cbbd52c68c54ac25bf19f38c1f997f0f66e0dc6f477ac6dbcc93c0b4b484fd1942764ec723d55189b9015bbc4cdf578311aa66bfab60586daf54084801ff3b402cba", 0xa0}, {&(0x7f0000000c80)="2d5dee504656", 0x6}, {&(0x7f0000000cc0)="bd38ec34c5ffaaa67fe3550d0d8fccb0732018e08e228457f8ccfdca215535df2319004a2e7e0986202fee99ac6c2dd7770d2a66bbabf7dc5d7c5b962fdb8961a8648eb20630e23a41f39b4169e36cf6142f0745f2f76d874d46d578b637a2693be79b21e5f5b77ae12bb5e280a269c072b9db071cd44831f7ed97af617075ddb8b2c5df18a1a00e", 0x88}], 0x5, 0x3) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e40), r10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xac, r15, 0x20, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x8) sendmsg$nl_route(r10, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@getaddr={0x14, 0x16, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x2400c081) syz_open_dev$swradio(&(0x7f00000010c0), 0x1, 0x2) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000001180)=@req={0x28, &(0x7f0000001140)={'veth1_macvtap\x00', @ifru_data=&(0x7f0000001100)="2281af7354164bada44158f6e546ffc6c60d63c27a0ecd2751b5b021228b47ca"}}) 239.568837ms ago: executing program 4 (id=979): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r1, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000100)=""/146, 0x92}], 0x2, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000040)={@private=0xa010101, @local, 0xffffffffffffffff, "9ccb8993f34e5dd861ca5929e5f6efe0feb4baf543fdd74dd47d9327e1ce5354", 0x80000, 0x8, 0x8, 0x7}, 0x3c) 238.188596ms ago: executing program 2 (id=980): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) process_mrelease(r0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000280)={'binder1\x00'}) 237.318403ms ago: executing program 2 (id=981): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r1 = getuid() (rerun: 64) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$system_posix_acl(r3, &(0x7f0000000a80)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [{0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x4}}, 0x2c, 0x3) (async) fchown(r0, r1, r2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000002400)) 160.560002ms ago: executing program 2 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fanotify_init(0x200, 0x0) r4 = dup(r2) fanotify_mark(r3, 0x1, 0x48001059, r4, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r6, 0x0, 0xc19) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x73, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28a671fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69b7c57fa78d312c5abb5eea30720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56accb1eb266787"}}, 0xfce) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@random="0afc6b9ec544", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) 321.386µs ago: executing program 2 (id=983): r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000008c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x10, 0x80000) r1 = accept4$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000940)=0x10, 0x82490a94b922cde8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0x80184132, &(0x7f0000000340)={0x0, [[0x0, 0x0, 0x0, 0x9]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8001}]}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c004aa0"], 0x44}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000a40)={0x0, 0x3, 0x391, 0x1, 0x0, [], [0x2, 0x9, 0x28f, 0x41], [0xf, 0x5, 0x3, 0x3], [0x3, 0xd, 0x8, 0xffffffffffffffff]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x8ec0}], 0x12}, 0x40000002) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) r13 = syz_open_dev$usbfs(&(0x7f0000000300), 0x1000, 0x200000) ioctl$USBDEVFS_FORBID_SUSPEND(r13, 0x5521) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r14, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) accept$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0xffffffffffffffb0) 0s ago: executing program 2 (id=984): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0x80000001) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x7000, &(0x7f0000000380)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176589f39b9f43f2207d3ec"]) kernel console output (not intermixed with test programs): th_setxattrat+0x1de/0x2a0 [ 68.038486][ T6916] ? __pfx_path_setxattrat+0x10/0x10 [ 68.038500][ T6916] ? ksys_write+0x190/0x250 [ 68.038521][ T6916] ? fput+0x9b/0xd0 [ 68.038535][ T6916] ? ksys_write+0x1ac/0x250 [ 68.038546][ T6916] ? __pfx_ksys_write+0x10/0x10 [ 68.038558][ T6916] __x64_sys_setxattr+0xc6/0x140 [ 68.038570][ T6916] ? do_syscall_64+0x91/0x4c0 [ 68.038583][ T6916] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.038596][ T6916] do_syscall_64+0xcd/0x4c0 [ 68.038610][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.038621][ T6916] RIP: 0033:0x7fa511f8ebe9 [ 68.038630][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.038640][ T6916] RSP: 002b:00007fa512d32038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 68.038650][ T6916] RAX: ffffffffffffffda RBX: 00007fa5121c5fa0 RCX: 00007fa511f8ebe9 [ 68.038657][ T6916] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000280 [ 68.038663][ T6916] RBP: 00007fa512d32090 R08: 0000000000000001 R09: 0000000000000000 [ 68.038669][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.038675][ T6916] R13: 00007fa5121c6038 R14: 00007fa5121c5fa0 R15: 00007ffe5e30bab8 [ 68.038688][ T6916] [ 68.038815][ T6916] overlayfs: failed to get inode (-12) [ 68.067309][ T40] audit: type=1400 audit(1757116209.033:379): avc: denied { write } for pid=6913 comm="syz.1.277" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.112834][ T6919] capability: warning: `syz.2.279' uses deprecated v2 capabilities in a way that may be insecure [ 68.114063][ T40] audit: type=1400 audit(1757116209.073:380): avc: denied { read } for pid=6918 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.196860][ T6924] overlayfs: workdir and upperdir must reside under the same mount [ 68.276834][ T40] audit: type=1400 audit(1757116209.243:381): avc: denied { create } for pid=6929 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.282821][ T40] audit: type=1400 audit(1757116209.243:382): avc: denied { setopt } for pid=6929 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.347466][ T6934] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 68.366838][ T6934] Invalid logical block size (-5) [ 68.406148][ T40] audit: type=1400 audit(1757116209.373:383): avc: denied { create } for pid=6937 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 68.513860][ T840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.613408][ T6952] FAULT_INJECTION: forcing a failure. [ 68.613408][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 68.619007][ T6952] CPU: 2 UID: 0 PID: 6952 Comm: syz.3.289 Not tainted syzkaller #0 PREEMPT(full) [ 68.619030][ T6952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.619041][ T6952] Call Trace: [ 68.619046][ T6952] [ 68.619053][ T6952] dump_stack_lvl+0x16c/0x1f0 [ 68.619102][ T6952] should_fail_ex+0x512/0x640 [ 68.619131][ T6952] ? fs_reclaim_acquire+0xae/0x150 [ 68.619151][ T6952] should_failslab+0xc2/0x120 [ 68.619163][ T6952] __kmalloc_cache_noprof+0x6a/0x3e0 [ 68.619181][ T6952] ? do_raw_spin_lock+0x12c/0x2b0 [ 68.619194][ T6952] ? inode_doinit_use_xattr+0x54/0x410 [ 68.619210][ T6952] inode_doinit_use_xattr+0x54/0x410 [ 68.619224][ T6952] inode_doinit_with_dentry+0x51e/0x12e0 [ 68.619243][ T6952] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 68.619262][ T6952] selinux_d_instantiate+0x26/0x30 [ 68.619277][ T6952] security_d_instantiate+0x142/0x1a0 [ 68.619299][ T6952] d_splice_alias_ops+0x92/0x840 [ 68.619318][ T6952] ovl_lookup+0xeee/0x21a0 [ 68.619347][ T6952] ? __pfx_ovl_lookup+0x10/0x10 [ 68.619368][ T6952] ? d_alloc_parallel+0x828/0x1480 [ 68.619396][ T6952] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 68.619432][ T6952] ? __lock_acquire+0xb97/0x1ce0 [ 68.619467][ T6952] ? lockdep_init_map_type+0x5c/0x280 [ 68.619489][ T6952] __lookup_slow+0x251/0x460 [ 68.619516][ T6952] ? __pfx___lookup_slow+0x10/0x10 [ 68.619557][ T6952] ? lookup_fast+0x156/0x610 [ 68.619572][ T6952] ? __pfx_ovl_permission+0x10/0x10 [ 68.619593][ T6952] walk_component+0x353/0x5b0 [ 68.619612][ T6952] link_path_walk+0x627/0xe20 [ 68.619633][ T6952] path_lookupat+0x15a/0x6d0 [ 68.619653][ T6952] filename_lookup+0x224/0x5f0 [ 68.619671][ T6952] ? __pfx_filename_lookup+0x10/0x10 [ 68.619708][ T6952] ? __might_fault+0xe3/0x190 [ 68.619723][ T6952] ? __might_fault+0xe3/0x190 [ 68.619736][ T6952] ? __might_fault+0x13b/0x190 [ 68.619757][ T6952] filename_setxattr+0x9d/0x1d0 [ 68.619778][ T6952] ? __pfx_filename_setxattr+0x10/0x10 [ 68.619798][ T6952] ? getname_flags.part.0+0x1c5/0x550 [ 68.619828][ T6952] path_setxattrat+0x1de/0x2a0 [ 68.619848][ T6952] ? __pfx_path_setxattrat+0x10/0x10 [ 68.619873][ T6952] ? ksys_write+0x190/0x250 [ 68.619912][ T6952] ? fput+0x9b/0xd0 [ 68.619935][ T6952] ? ksys_write+0x1ac/0x250 [ 68.619952][ T6952] ? __pfx_ksys_write+0x10/0x10 [ 68.619974][ T6952] __x64_sys_setxattr+0xc6/0x140 [ 68.619993][ T6952] ? do_syscall_64+0x91/0x4c0 [ 68.620022][ T6952] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.620043][ T6952] do_syscall_64+0xcd/0x4c0 [ 68.620066][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.620083][ T6952] RIP: 0033:0x7fa511f8ebe9 [ 68.620098][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.620114][ T6952] RSP: 002b:00007fa512d32038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 68.620130][ T6952] RAX: ffffffffffffffda RBX: 00007fa5121c5fa0 RCX: 00007fa511f8ebe9 [ 68.620141][ T6952] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000280 [ 68.620151][ T6952] RBP: 00007fa512d32090 R08: 0000000000000001 R09: 0000000000000000 [ 68.620160][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.620170][ T6952] R13: 00007fa5121c6038 R14: 00007fa5121c5fa0 R15: 00007ffe5e30bab8 [ 68.620194][ T6952] [ 68.783912][ T6957] syz.3.291 (6957): /proc/6955/oom_adj is deprecated, please use /proc/6955/oom_score_adj instead. [ 68.799651][ T6963] trusted_key: syz.0.292 sent an empty control message without MSG_MORE. [ 68.807728][ T40] audit: type=1400 audit(1757116209.773:384): avc: denied { ioctl } for pid=6956 comm="syz.2.293" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 68.850471][ T6965] gfs2: Unknown parameter 'aclv/kvm' [ 68.938189][ T6977] tipc: Started in network mode [ 68.939897][ T6977] tipc: Node identity , cluster identity 4711 [ 68.942434][ T6977] tipc: Failed to obtain node identity [ 68.945419][ T6977] tipc: Enabling of bearer rejected, failed to enable media [ 69.088209][ T6987] 8021q: VLANs not supported on ip_vti0 [ 69.096996][ T6990] fuse: Bad value for 'group_id' [ 69.098662][ T6990] fuse: Bad value for 'group_id' [ 69.212150][ T7005] veth1_to_bridge: entered promiscuous mode [ 69.217133][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.227644][ T7016] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 69.257423][ T7018] netlink: set zone limit has 4 unknown bytes [ 69.349468][ T7029] openvswitch: netlink: Key type 30 is not supported [ 69.631242][ T7053] FAULT_INJECTION: forcing a failure. [ 69.631242][ T7053] name failslab, interval 1, probability 0, space 0, times 0 [ 69.637159][ T7053] CPU: 2 UID: 0 PID: 7053 Comm: syz.2.321 Not tainted syzkaller #0 PREEMPT(full) [ 69.637192][ T7053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.637204][ T7053] Call Trace: [ 69.637210][ T7053] [ 69.637217][ T7053] dump_stack_lvl+0x16c/0x1f0 [ 69.637245][ T7053] should_fail_ex+0x512/0x640 [ 69.637268][ T7053] ? fs_reclaim_acquire+0xae/0x150 [ 69.637295][ T7053] should_failslab+0xc2/0x120 [ 69.637316][ T7053] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 69.637337][ T7053] ? security_inode_alloc+0x3b/0x2b0 [ 69.637363][ T7053] security_inode_alloc+0x3b/0x2b0 [ 69.637385][ T7053] inode_init_always_gfp+0xce4/0x1030 [ 69.637409][ T7053] ? __pfx_ovl_inode_set+0x10/0x10 [ 69.637426][ T7053] alloc_inode+0x86/0x240 [ 69.637450][ T7053] iget5_locked+0x338/0x3d0 [ 69.637474][ T7053] ? __pfx_ovl_inode_test+0x10/0x10 [ 69.637493][ T7053] ? __pfx_ovl_inode_set+0x10/0x10 [ 69.637512][ T7053] ? __pfx_iget5_locked+0x10/0x10 [ 69.637539][ T7053] ? __lock_acquire+0xb97/0x1ce0 [ 69.637573][ T7053] ovl_get_inode+0xce9/0x13d0 [ 69.637601][ T7053] ? __pfx_ovl_get_inode+0x10/0x10 [ 69.637624][ T7053] ? do_raw_spin_unlock+0x172/0x230 [ 69.637644][ T7053] ? _raw_spin_unlock+0x28/0x50 [ 69.637666][ T7053] ovl_lookup+0xda8/0x21a0 [ 69.637696][ T7053] ? __pfx_ovl_lookup+0x10/0x10 [ 69.637718][ T7053] ? d_alloc_parallel+0x828/0x1480 [ 69.637747][ T7053] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 69.637778][ T7053] ? __lock_acquire+0xb97/0x1ce0 [ 69.637812][ T7053] ? lockdep_init_map_type+0x5c/0x280 [ 69.637834][ T7053] __lookup_slow+0x251/0x460 [ 69.637860][ T7053] ? __pfx___lookup_slow+0x10/0x10 [ 69.637902][ T7053] ? lookup_fast+0x156/0x610 [ 69.637917][ T7053] ? __pfx_ovl_permission+0x10/0x10 [ 69.637939][ T7053] walk_component+0x353/0x5b0 [ 69.637958][ T7053] link_path_walk+0x627/0xe20 [ 69.637985][ T7053] path_lookupat+0x15a/0x6d0 [ 69.638007][ T7053] filename_lookup+0x224/0x5f0 [ 69.638029][ T7053] ? __pfx_filename_lookup+0x10/0x10 [ 69.638064][ T7053] ? __might_fault+0xe3/0x190 [ 69.638082][ T7053] ? __might_fault+0xe3/0x190 [ 69.638098][ T7053] ? __might_fault+0x13b/0x190 [ 69.638122][ T7053] filename_setxattr+0x9d/0x1d0 [ 69.638145][ T7053] ? __pfx_filename_setxattr+0x10/0x10 [ 69.638165][ T7053] ? getname_flags.part.0+0x1c5/0x550 [ 69.638201][ T7053] path_setxattrat+0x1de/0x2a0 [ 69.638221][ T7053] ? __pfx_path_setxattrat+0x10/0x10 [ 69.638247][ T7053] ? ksys_write+0x190/0x250 [ 69.638287][ T7053] ? fput+0x9b/0xd0 [ 69.638312][ T7053] ? ksys_write+0x1ac/0x250 [ 69.638331][ T7053] ? __pfx_ksys_write+0x10/0x10 [ 69.638352][ T7053] __x64_sys_setxattr+0xc6/0x140 [ 69.638374][ T7053] ? do_syscall_64+0x91/0x4c0 [ 69.638396][ T7053] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.638417][ T7053] do_syscall_64+0xcd/0x4c0 [ 69.638443][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.638461][ T7053] RIP: 0033:0x7f8fb558ebe9 [ 69.638475][ T7053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.638493][ T7053] RSP: 002b:00007f8fb6422038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.638512][ T7053] RAX: ffffffffffffffda RBX: 00007f8fb57c5fa0 RCX: 00007f8fb558ebe9 [ 69.638522][ T7053] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000280 [ 69.638533][ T7053] RBP: 00007f8fb6422090 R08: 0000000000000001 R09: 0000000000000000 [ 69.638544][ T7053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.638555][ T7053] R13: 00007f8fb57c6038 R14: 00007f8fb57c5fa0 R15: 00007ffcc98356c8 [ 69.638580][ T7053] [ 69.638608][ T7053] overlayfs: failed to get inode (-12) [ 69.860521][ T7062] netlink: 'syz.1.324': attribute type 6 has an invalid length. [ 69.920917][ T7070] netlink: 'syz.1.326': attribute type 11 has an invalid length. [ 69.951143][ T7074] mkiss: ax0: crc mode is auto. [ 70.132565][ T7083] 9pnet_virtio: no channels available for device syz [ 70.138926][ T7083] FAULT_INJECTION: forcing a failure. [ 70.138926][ T7083] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.143483][ T7083] CPU: 3 UID: 0 PID: 7083 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT(full) [ 70.143499][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.143505][ T7083] Call Trace: [ 70.143509][ T7083] [ 70.143514][ T7083] dump_stack_lvl+0x16c/0x1f0 [ 70.143531][ T7083] should_fail_ex+0x512/0x640 [ 70.143547][ T7083] strncpy_from_user+0x3b/0x2e0 [ 70.143561][ T7083] getname_flags.part.0+0x8f/0x550 [ 70.143579][ T7083] __x64_sys_mkdir+0xd8/0x140 [ 70.143596][ T7083] do_syscall_64+0xcd/0x4c0 [ 70.143612][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.143623][ T7083] RIP: 0033:0x7f8fb558ebe9 [ 70.143632][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.143643][ T7083] RSP: 002b:00007f8fb6422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 70.143654][ T7083] RAX: ffffffffffffffda RBX: 00007f8fb57c5fa0 RCX: 00007f8fb558ebe9 [ 70.143661][ T7083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 70.143667][ T7083] RBP: 00007f8fb6422090 R08: 0000000000000000 R09: 0000000000000000 [ 70.143674][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.143680][ T7083] R13: 00007f8fb57c6038 R14: 00007f8fb57c5fa0 R15: 00007ffcc98356c8 [ 70.143694][ T7083] [ 70.231142][ T7084] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.278927][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.288499][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.513951][ T839] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 70.775889][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 70.783992][ T839] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.786890][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.789499][ T839] usb 6-1: Product: syz [ 70.790886][ T839] usb 6-1: Manufacturer: syz [ 70.792384][ T839] usb 6-1: SerialNumber: syz [ 70.796121][ T839] usb 6-1: config 0 descriptor?? [ 70.818210][ T7129] FAULT_INJECTION: forcing a failure. [ 70.818210][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 70.822421][ T7129] CPU: 2 UID: 0 PID: 7129 Comm: syz.3.344 Not tainted syzkaller #0 PREEMPT(full) [ 70.822435][ T7129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.822441][ T7129] Call Trace: [ 70.822445][ T7129] [ 70.822450][ T7129] dump_stack_lvl+0x16c/0x1f0 [ 70.822466][ T7129] should_fail_ex+0x512/0x640 [ 70.822480][ T7129] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 70.822493][ T7129] should_failslab+0xc2/0x120 [ 70.822506][ T7129] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 70.822517][ T7129] ? __d_alloc+0x32/0xae0 [ 70.822533][ T7129] __d_alloc+0x32/0xae0 [ 70.822548][ T7129] d_alloc+0x4a/0x1e0 [ 70.822561][ T7129] lookup_one_qstr_excl+0x175/0x250 [ 70.822577][ T7129] ? mnt_want_write+0x161/0x450 [ 70.822588][ T7129] filename_create+0x1e7/0x4a0 [ 70.822599][ T7129] ? __pfx_filename_create+0x10/0x10 [ 70.822611][ T7129] ? __might_fault+0xe3/0x190 [ 70.822622][ T7129] ? __might_fault+0xe3/0x190 [ 70.822631][ T7129] ? __might_fault+0x13b/0x190 [ 70.822643][ T7129] do_mkdirat+0xaa/0x3e0 [ 70.822656][ T7129] ? __pfx_do_mkdirat+0x10/0x10 [ 70.822669][ T7129] ? getname_flags.part.0+0x1c5/0x550 [ 70.822687][ T7129] __x64_sys_mkdir+0xef/0x140 [ 70.822699][ T7129] do_syscall_64+0xcd/0x4c0 [ 70.822714][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.822726][ T7129] RIP: 0033:0x7fa511f8ebe9 [ 70.822734][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.822744][ T7129] RSP: 002b:00007fa512d32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 70.822754][ T7129] RAX: ffffffffffffffda RBX: 00007fa5121c5fa0 RCX: 00007fa511f8ebe9 [ 70.822761][ T7129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 70.822767][ T7129] RBP: 00007fa512d32090 R08: 0000000000000000 R09: 0000000000000000 [ 70.822773][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.822779][ T7129] R13: 00007fa5121c6038 R14: 00007fa5121c5fa0 R15: 00007ffe5e30bab8 [ 70.822793][ T7129] [ 71.019432][ T839] usb 6-1: USB disconnect, device number 5 [ 71.045033][ T5376] udevd[5376]: worker [5971] terminated by signal 33 (Unknown signal 33) [ 71.049073][ T5376] udevd[5376]: worker [5971] failed while handling '/devices/platform/dummy_hcd.1/usb6/6-1' [ 71.073231][ T5376] udevd[5376]: worker [6758] terminated by signal 33 (Unknown signal 33) [ 71.076396][ T5376] udevd[5376]: worker [6758] failed while handling '/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0' [ 71.120886][ T6304] udevd[6304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.195647][ T7143] __nla_validate_parse: 46 callbacks suppressed [ 71.195658][ T7143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.351'. [ 71.247980][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.250202][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294425][ T1154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.410539][ T1154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.487891][ T1154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.537576][ T7165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 71.540697][ T7165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.545418][ T7165] vhci_hcd vhci_hcd.0: Device attached [ 71.548740][ T7165] vhci_hcd vhci_hcd.0: port 0 already used [ 71.552518][ T1154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.553611][ T7170] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 71.558289][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.562491][ T7170] vhci_hcd vhci_hcd.0: Device attached [ 71.564886][ T839] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.573972][ T7172] vhci_hcd: connection closed [ 71.574169][ T7166] vhci_hcd: connection closed [ 71.575970][ T60] vhci_hcd: stop threads [ 71.579280][ T60] vhci_hcd: release socket [ 71.580737][ T60] vhci_hcd: disconnect device [ 71.582371][ T60] vhci_hcd: stop threads [ 71.583709][ T60] vhci_hcd: release socket [ 71.588479][ T60] vhci_hcd: disconnect device [ 71.591120][ T7176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.612237][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.617925][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.620674][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.623413][ T5977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.627084][ T5977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.724091][ T839] usb 7-1: Using ep0 maxpacket: 32 [ 71.727481][ T839] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.730202][ T839] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.733703][ T839] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.739139][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.743121][ T839] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.748372][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.749033][ T1154] bridge_slave_1: left allmulticast mode [ 71.752038][ T839] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.752060][ T839] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.752103][ T839] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.755902][ T1154] bridge_slave_1: left promiscuous mode [ 71.758877][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.764473][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.766471][ T7185] tls_set_device_offload_rx: netdev not found [ 71.774261][ T839] usb 7-1: config 0 descriptor?? [ 71.784333][ T1154] bridge_slave_0: left allmulticast mode [ 71.786252][ T1154] bridge_slave_0: left promiscuous mode [ 71.788188][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.986239][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.989746][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.003069][ T839] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.008813][ T839] usb 7-1: USB disconnect, device number 3 [ 72.016244][ T839] usblp0: removed [ 72.034253][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.038321][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.042005][ T1154] bond0 (unregistering): Released all slaves [ 72.052642][ T7185] dvmrp1: entered allmulticast mode [ 72.061274][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 72.096934][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 72.096945][ T40] audit: type=1400 audit(1757116213.063:414): avc: denied { read open } for pid=7195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.108160][ T40] audit: type=1400 audit(1757116213.063:415): avc: denied { getattr } for pid=7195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.116369][ T40] audit: type=1400 audit(1757116213.073:416): avc: denied { add_name } for pid=7191 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.126889][ T40] audit: type=1400 audit(1757116213.073:417): avc: denied { create } for pid=7191 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.134138][ T40] audit: type=1400 audit(1757116213.073:418): avc: denied { write } for pid=7191 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.142293][ T40] audit: type=1400 audit(1757116213.073:419): avc: denied { append } for pid=7191 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.157610][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.157636][ T40] audit: type=1400 audit(1757116213.123:420): avc: denied { remove_name } for pid=7199 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.159956][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.168888][ T40] audit: type=1400 audit(1757116213.123:421): avc: denied { unlink } for pid=7199 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=3346 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.169799][ T7177] bridge_slave_0: entered allmulticast mode [ 72.180183][ T7177] bridge_slave_0: entered promiscuous mode [ 72.184685][ T40] audit: type=1400 audit(1757116213.143:422): avc: denied { write } for pid=7197 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 72.206949][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.209263][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.211582][ T7177] bridge_slave_1: entered allmulticast mode [ 72.214234][ T7177] bridge_slave_1: entered promiscuous mode [ 72.264469][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.270505][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.307521][ T7177] team0: Port device team_slave_0 added [ 72.310824][ T7177] team0: Port device team_slave_1 added [ 72.378233][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.380750][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.390649][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.395500][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.397747][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.406671][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.440007][ T7205] 9pnet_virtio: no channels available for device syz [ 72.454660][ T7177] hsr_slave_0: entered promiscuous mode [ 72.457708][ T7177] hsr_slave_1: entered promiscuous mode [ 72.459797][ T7177] debugfs: 'hsr0' already exists in 'hsr' [ 72.461673][ T7177] Cannot create hsr debugfs directory [ 72.465591][ T1154] macvlan0: left promiscuous mode [ 72.469361][ T1154] batadv_slave_1: left promiscuous mode [ 72.469621][ T40] audit: type=1400 audit(1757116213.433:423): avc: denied { read write } for pid=7207 comm="syz.3.366" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 72.482144][ T1154] hsr_slave_0: left promiscuous mode [ 72.485745][ T1154] hsr_slave_1: left promiscuous mode [ 72.487714][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.490109][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.493139][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.495677][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.512734][ T1154] veth1_macvtap: left promiscuous mode [ 72.516277][ T1154] veth0_macvtap: left promiscuous mode [ 72.518177][ T1154] veth1_vlan: left promiscuous mode [ 72.533901][ T839] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.673998][ T839] usb 7-1: device descriptor read/64, error -71 [ 72.916312][ T839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.027383][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 73.044278][ T839] usb 7-1: device descriptor read/64, error -71 [ 73.089050][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 73.139053][ T7217] kvm: MONITOR instruction emulated as NOP! [ 73.154410][ T839] usb usb7-port1: attempt power cycle [ 73.496398][ T839] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 73.514274][ T839] usb 7-1: device descriptor read/8, error -71 [ 73.644312][ T5977] Bluetooth: hci2: command tx timeout [ 73.659042][ T7177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.664079][ T7177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.668280][ T7177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.673024][ T7177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.728486][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.730883][ T7241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.370'. [ 73.745126][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.750935][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.753206][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.758973][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.761292][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.763888][ T839] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 73.785610][ T839] usb 7-1: device descriptor read/8, error -71 [ 73.859444][ T7254] FAULT_INJECTION: forcing a failure. [ 73.859444][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 73.863444][ T7254] CPU: 2 UID: 0 PID: 7254 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT(full) [ 73.863459][ T7254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.863466][ T7254] Call Trace: [ 73.863470][ T7254] [ 73.863474][ T7254] dump_stack_lvl+0x16c/0x1f0 [ 73.863491][ T7254] should_fail_ex+0x512/0x640 [ 73.863505][ T7254] ? fs_reclaim_acquire+0xae/0x150 [ 73.863520][ T7254] ? p9_fcall_init+0x97/0x260 [ 73.863532][ T7254] should_failslab+0xc2/0x120 [ 73.863545][ T7254] __kmalloc_noprof+0xd2/0x510 [ 73.863555][ T7254] ? rcu_is_watching+0x12/0xc0 [ 73.863572][ T7254] p9_fcall_init+0x97/0x260 [ 73.863585][ T7254] p9_tag_alloc+0x161/0x640 [ 73.863599][ T7254] ? __pfx_p9_tag_alloc+0x10/0x10 [ 73.863617][ T7254] p9_client_prepare_req+0x19b/0x4d0 [ 73.863631][ T7254] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 73.863644][ T7254] ? __x64_sys_mkdir+0xef/0x140 [ 73.863659][ T7254] ? __lock_acquire+0xb97/0x1ce0 [ 73.863677][ T7254] p9_client_rpc+0x1c4/0xc50 [ 73.863692][ T7254] ? __pfx_p9_client_rpc+0x10/0x10 [ 73.863707][ T7254] ? idr_alloc_u32+0x20f/0x2f0 [ 73.863720][ T7254] ? find_held_lock+0x2b/0x80 [ 73.863733][ T7254] ? idr_preload_end+0xc2/0x230 [ 73.863750][ T7254] p9_client_attach+0x156/0x2b0 [ 73.863779][ T7254] ? __pfx_p9_client_attach+0x10/0x10 [ 73.863794][ T7254] ? v9fs_fid_lookup+0x4bd/0xeb0 [ 73.863813][ T7254] v9fs_fid_lookup+0x97a/0xeb0 [ 73.863831][ T7254] v9fs_vfs_lookup+0x1a1/0x5b0 [ 73.863844][ T7254] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 73.863855][ T7254] ? d_alloc+0x176/0x1e0 [ 73.863869][ T7254] ? do_raw_spin_unlock+0x172/0x230 [ 73.863881][ T7254] ? _raw_spin_unlock+0x28/0x50 [ 73.863894][ T7254] lookup_one_qstr_excl+0x1ce/0x250 [ 73.863909][ T7254] ? mnt_want_write+0x161/0x450 [ 73.863920][ T7254] filename_create+0x1e7/0x4a0 [ 73.863931][ T7254] ? __pfx_filename_create+0x10/0x10 [ 73.863944][ T7254] ? __might_fault+0xe3/0x190 [ 73.863954][ T7254] ? __might_fault+0xe3/0x190 [ 73.863963][ T7254] ? __might_fault+0x13b/0x190 [ 73.863975][ T7254] do_mkdirat+0xaa/0x3e0 [ 73.863987][ T7254] ? __pfx_do_mkdirat+0x10/0x10 [ 73.864001][ T7254] ? getname_flags.part.0+0x1c5/0x550 [ 73.864018][ T7254] __x64_sys_mkdir+0xef/0x140 [ 73.864030][ T7254] do_syscall_64+0xcd/0x4c0 [ 73.864045][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.864056][ T7254] RIP: 0033:0x7f8fa6b8ebe9 [ 73.864072][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.864082][ T7254] RSP: 002b:00007f8fa7965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 73.864093][ T7254] RAX: ffffffffffffffda RBX: 00007f8fa6dc5fa0 RCX: 00007f8fa6b8ebe9 [ 73.864099][ T7254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 73.864105][ T7254] RBP: 00007f8fa7965090 R08: 0000000000000000 R09: 0000000000000000 [ 73.864111][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.864117][ T7254] R13: 00007f8fa6dc6038 R14: 00007f8fa6dc5fa0 R15: 00007ffc157122f8 [ 73.864131][ T7254] [ 73.959959][ T839] usb usb7-port1: unable to enumerate USB device [ 73.974328][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.022277][ T1154] IPVS: stop unused estimator thread 0... [ 74.110697][ T7177] veth0_vlan: entered promiscuous mode [ 74.118237][ T7177] veth1_vlan: entered promiscuous mode [ 74.132073][ T7177] veth0_macvtap: entered promiscuous mode [ 74.136639][ T7177] veth1_macvtap: entered promiscuous mode [ 74.147245][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.148966][ T7280] BIDI support in bsg has been removed. [ 74.153010][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.158533][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.3.376'. [ 74.159274][ T96] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.164719][ T96] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.168420][ T96] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.171220][ T96] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204354][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.206812][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.222453][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.225083][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.286862][ T7287] netlink: 188 bytes leftover after parsing attributes in process `syz.4.378'. [ 74.368145][ T7294] 9pnet_virtio: no channels available for device syz [ 74.371382][ T7294] FAULT_INJECTION: forcing a failure. [ 74.371382][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 74.376217][ T7294] CPU: 0 UID: 0 PID: 7294 Comm: syz.2.381 Not tainted syzkaller #0 PREEMPT(full) [ 74.376231][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.376238][ T7294] Call Trace: [ 74.376242][ T7294] [ 74.376246][ T7294] dump_stack_lvl+0x16c/0x1f0 [ 74.376263][ T7294] should_fail_ex+0x512/0x640 [ 74.376277][ T7294] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 74.376290][ T7294] should_failslab+0xc2/0x120 [ 74.376303][ T7294] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 74.376314][ T7294] ? shmem_alloc_inode+0x25/0x50 [ 74.376331][ T7294] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 74.376344][ T7294] shmem_alloc_inode+0x25/0x50 [ 74.376356][ T7294] alloc_inode+0x61/0x240 [ 74.376379][ T7294] new_inode+0x22/0x1c0 [ 74.376396][ T7294] shmem_get_inode+0x19a/0xfb0 [ 74.376413][ T7294] shmem_mknod+0x1a8/0x450 [ 74.376430][ T7294] shmem_mkdir+0x31/0x80 [ 74.376445][ T7294] vfs_mkdir+0x593/0x8c0 [ 74.376456][ T7294] do_mkdirat+0x304/0x3e0 [ 74.376470][ T7294] ? __pfx_do_mkdirat+0x10/0x10 [ 74.376484][ T7294] ? getname_flags.part.0+0x1c5/0x550 [ 74.376501][ T7294] __x64_sys_mkdir+0xef/0x140 [ 74.376514][ T7294] do_syscall_64+0xcd/0x4c0 [ 74.376529][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.376541][ T7294] RIP: 0033:0x7f8fb558ebe9 [ 74.376550][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.376560][ T7294] RSP: 002b:00007f8fb6422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 74.376570][ T7294] RAX: ffffffffffffffda RBX: 00007f8fb57c5fa0 RCX: 00007f8fb558ebe9 [ 74.376577][ T7294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 74.376583][ T7294] RBP: 00007f8fb6422090 R08: 0000000000000000 R09: 0000000000000000 [ 74.376590][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.376596][ T7294] R13: 00007f8fb57c6038 R14: 00007f8fb57c5fa0 R15: 00007ffcc98356c8 [ 74.376610][ T7294] [ 74.501727][ T7303] 9pnet_virtio: no channels available for device syz [ 74.628083][ T7310] fuse: Unknown parameter '' [ 74.965016][ T7319] binder: 7318:7319 ioctl c4009420 200000001ac0 returned -22 [ 74.967676][ T7319] openvswitch: netlink: Duplicate or invalid key (type 0). [ 74.970024][ T7319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.993902][ T7322] 9pnet_virtio: no channels available for device syz [ 74.997091][ T7322] FAULT_INJECTION: forcing a failure. [ 74.997091][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 75.001775][ T7322] CPU: 2 UID: 0 PID: 7322 Comm: syz.1.391 Not tainted syzkaller #0 PREEMPT(full) [ 75.001797][ T7322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.001808][ T7322] Call Trace: [ 75.001815][ T7322] [ 75.001822][ T7322] dump_stack_lvl+0x16c/0x1f0 [ 75.001848][ T7322] should_fail_ex+0x512/0x640 [ 75.001869][ T7322] ? fs_reclaim_acquire+0xae/0x150 [ 75.001895][ T7322] ? security_inode_init_security+0x13f/0x390 [ 75.001913][ T7322] should_failslab+0xc2/0x120 [ 75.001934][ T7322] __kmalloc_noprof+0xd2/0x510 [ 75.001956][ T7322] security_inode_init_security+0x13f/0x390 [ 75.001975][ T7322] ? __pfx_shmem_initxattrs+0x10/0x10 [ 75.001996][ T7322] ? __pfx_security_inode_init_security+0x10/0x10 [ 75.002023][ T7322] shmem_mknod+0x22e/0x450 [ 75.002051][ T7322] shmem_mkdir+0x31/0x80 [ 75.002074][ T7322] vfs_mkdir+0x593/0x8c0 [ 75.002094][ T7322] do_mkdirat+0x304/0x3e0 [ 75.002115][ T7322] ? __pfx_do_mkdirat+0x10/0x10 [ 75.002138][ T7322] ? getname_flags.part.0+0x1c5/0x550 [ 75.002167][ T7322] __x64_sys_mkdir+0xef/0x140 [ 75.002188][ T7322] do_syscall_64+0xcd/0x4c0 [ 75.002212][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.002229][ T7322] RIP: 0033:0x7f8fa6b8ebe9 [ 75.002243][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.002260][ T7322] RSP: 002b:00007f8fa7965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 75.002277][ T7322] RAX: ffffffffffffffda RBX: 00007f8fa6dc5fa0 RCX: 00007f8fa6b8ebe9 [ 75.002288][ T7322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 75.002298][ T7322] RBP: 00007f8fa7965090 R08: 0000000000000000 R09: 0000000000000000 [ 75.002308][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.002325][ T7322] R13: 00007f8fa6dc6038 R14: 00007f8fa6dc5fa0 R15: 00007ffc157122f8 [ 75.002349][ T7322] [ 75.095259][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'. [ 75.212410][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.393'. [ 75.394795][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 75.394822][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 75.397673][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 75.400399][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 75.454109][ T7337] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 75.455740][ T7338] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 75.648860][ T7354] FAULT_INJECTION: forcing a failure. [ 75.648860][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 75.653101][ T7354] CPU: 3 UID: 0 PID: 7354 Comm: syz.2.400 Not tainted syzkaller #0 PREEMPT(full) [ 75.653116][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.653123][ T7354] Call Trace: [ 75.653127][ T7354] [ 75.653132][ T7354] dump_stack_lvl+0x116/0x1f0 [ 75.653150][ T7354] should_fail_ex+0x512/0x640 [ 75.653166][ T7354] ? virtqueue_add_sgs+0x76c/0x1c70 [ 75.653178][ T7354] should_failslab+0xc2/0x120 [ 75.653190][ T7354] __kmalloc_noprof+0xd2/0x510 [ 75.653205][ T7354] virtqueue_add_sgs+0x76c/0x1c70 [ 75.653222][ T7354] ? __pfx_virtqueue_add_sgs+0x10/0x10 [ 75.653233][ T7354] ? __virt_addr_valid+0x81/0x610 [ 75.653247][ T7354] ? __phys_addr+0xe8/0x180 [ 75.653261][ T7354] ? pack_sg_list.constprop.0+0x2a8/0x320 [ 75.653276][ T7354] p9_virtio_request+0x26d/0x6c0 [ 75.653291][ T7354] ? __pfx_p9_virtio_request+0x10/0x10 [ 75.653302][ T7354] ? p9_client_prepare_req+0x112/0x4d0 [ 75.653317][ T7354] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 75.653329][ T7354] ? __x64_sys_mkdir+0xef/0x140 [ 75.653345][ T7354] ? __lock_acquire+0xb97/0x1ce0 [ 75.653363][ T7354] p9_client_rpc+0x33e/0xc50 [ 75.653378][ T7354] ? __pfx_p9_client_rpc+0x10/0x10 [ 75.653393][ T7354] ? idr_alloc_u32+0x20f/0x2f0 [ 75.653406][ T7354] ? find_held_lock+0x2b/0x80 [ 75.653420][ T7354] ? idr_preload_end+0xc2/0x230 [ 75.653436][ T7354] p9_client_attach+0x156/0x2b0 [ 75.653452][ T7354] ? __pfx_p9_client_attach+0x10/0x10 [ 75.653467][ T7354] ? v9fs_fid_lookup+0x4bd/0xeb0 [ 75.653486][ T7354] v9fs_fid_lookup+0x97a/0xeb0 [ 75.653504][ T7354] v9fs_vfs_lookup+0x1a1/0x5b0 [ 75.653517][ T7354] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 75.653528][ T7354] ? d_alloc+0x176/0x1e0 [ 75.653542][ T7354] ? do_raw_spin_unlock+0x172/0x230 [ 75.653554][ T7354] ? _raw_spin_unlock+0x28/0x50 [ 75.653567][ T7354] lookup_one_qstr_excl+0x1ce/0x250 [ 75.653583][ T7354] ? mnt_want_write+0x161/0x450 [ 75.653609][ T7354] filename_create+0x1e7/0x4a0 [ 75.653621][ T7354] ? __pfx_filename_create+0x10/0x10 [ 75.653633][ T7354] ? __might_fault+0xe3/0x190 [ 75.653643][ T7354] ? __might_fault+0xe3/0x190 [ 75.653652][ T7354] ? __might_fault+0x13b/0x190 [ 75.653664][ T7354] do_mkdirat+0xaa/0x3e0 [ 75.653677][ T7354] ? __pfx_do_mkdirat+0x10/0x10 [ 75.653690][ T7354] ? getname_flags.part.0+0x1c5/0x550 [ 75.653708][ T7354] __x64_sys_mkdir+0xef/0x140 [ 75.653720][ T7354] do_syscall_64+0xcd/0x4c0 [ 75.653735][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.653746][ T7354] RIP: 0033:0x7f8fb558ebe9 [ 75.653755][ T7354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.653766][ T7354] RSP: 002b:00007f8fb6422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 75.653776][ T7354] RAX: ffffffffffffffda RBX: 00007f8fb57c5fa0 RCX: 00007f8fb558ebe9 [ 75.653783][ T7354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 75.653789][ T7354] RBP: 00007f8fb6422090 R08: 0000000000000000 R09: 0000000000000000 [ 75.653795][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.653801][ T7354] R13: 00007f8fb57c6038 R14: 00007f8fb57c5fa0 R15: 00007ffcc98356c8 [ 75.653815][ T7354] [ 75.735745][ T63] Bluetooth: hci2: command tx timeout [ 75.875433][ T7358] dummy0: entered promiscuous mode [ 75.996555][ T7366] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 76.418123][ T7396] netlink: 'syz.1.410': attribute type 12 has an invalid length. [ 76.445682][ T7406] __nla_validate_parse: 1 callbacks suppressed [ 76.445693][ T7406] netlink: 277 bytes leftover after parsing attributes in process `syz.2.417'. [ 76.451887][ T7406] netlink: 277 bytes leftover after parsing attributes in process `syz.2.417'. [ 76.455701][ T7406] netlink: 277 bytes leftover after parsing attributes in process `syz.2.417'. [ 76.460403][ T7406] netlink: 277 bytes leftover after parsing attributes in process `syz.2.417'. [ 76.461915][ T7408] FAULT_INJECTION: forcing a failure. [ 76.461915][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 76.463377][ T7406] netlink: 277 bytes leftover after parsing attributes in process `syz.2.417'. [ 76.467849][ T7408] CPU: 2 UID: 0 PID: 7408 Comm: syz.1.418 Not tainted syzkaller #0 PREEMPT(full) [ 76.467863][ T7408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.467870][ T7408] Call Trace: [ 76.467874][ T7408] [ 76.467878][ T7408] dump_stack_lvl+0x16c/0x1f0 [ 76.467895][ T7408] should_fail_ex+0x512/0x640 [ 76.467909][ T7408] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 76.467933][ T7408] should_failslab+0xc2/0x120 [ 76.467951][ T7408] __kmalloc_cache_noprof+0x6a/0x3e0 [ 76.467975][ T7408] ? p9_fid_create+0x41/0x260 [ 76.468000][ T7408] p9_fid_create+0x41/0x260 [ 76.468020][ T7408] p9_client_walk+0xc5/0x530 [ 76.468064][ T7408] ? v9fs_fid_lookup+0xb1e/0xeb0 [ 76.468091][ T7408] ? __pfx_p9_client_walk+0x10/0x10 [ 76.468116][ T7408] ? do_raw_spin_unlock+0x172/0x230 [ 76.468136][ T7408] ? v9fs_fid_lookup+0xe9/0xeb0 [ 76.468154][ T7408] v9fs_vfs_lookup+0x206/0x5b0 [ 76.468167][ T7408] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 76.468179][ T7408] ? d_alloc+0x176/0x1e0 [ 76.468193][ T7408] ? do_raw_spin_unlock+0x172/0x230 [ 76.468205][ T7408] ? _raw_spin_unlock+0x28/0x50 [ 76.468218][ T7408] lookup_one_qstr_excl+0x1ce/0x250 [ 76.468234][ T7408] ? mnt_want_write+0x161/0x450 [ 76.468246][ T7408] filename_create+0x1e7/0x4a0 [ 76.468257][ T7408] ? __pfx_filename_create+0x10/0x10 [ 76.468269][ T7408] ? __might_fault+0xe3/0x190 [ 76.468280][ T7408] ? __might_fault+0xe3/0x190 [ 76.468289][ T7408] ? __might_fault+0x13b/0x190 [ 76.468303][ T7408] do_mkdirat+0xaa/0x3e0 [ 76.468316][ T7408] ? __pfx_do_mkdirat+0x10/0x10 [ 76.468330][ T7408] ? getname_flags.part.0+0x1c5/0x550 [ 76.468348][ T7408] __x64_sys_mkdir+0xef/0x140 [ 76.468360][ T7408] do_syscall_64+0xcd/0x4c0 [ 76.468375][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.468386][ T7408] RIP: 0033:0x7f8fa6b8ebe9 [ 76.468396][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.468407][ T7408] RSP: 002b:00007f8fa7965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 76.468417][ T7408] RAX: ffffffffffffffda RBX: 00007f8fa6dc5fa0 RCX: 00007f8fa6b8ebe9 [ 76.468424][ T7408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 76.468430][ T7408] RBP: 00007f8fa7965090 R08: 0000000000000000 R09: 0000000000000000 [ 76.468436][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.468442][ T7408] R13: 00007f8fa6dc6038 R14: 00007f8fa6dc5fa0 R15: 00007ffc157122f8 [ 76.468456][ T7408] [ 76.631352][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.634705][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.645982][ T7411] dummy0: left promiscuous mode [ 76.682515][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.690243][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.767587][ T7414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.802115][ T96] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.805017][ T96] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.809390][ T7417] syzkaller1: entered promiscuous mode [ 76.809403][ T7417] syzkaller1: entered allmulticast mode [ 76.810742][ T96] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.184439][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 77.184450][ T40] audit: type=1400 audit(1757116218.153:449): avc: denied { read write } for pid=7439 comm="syz.4.421" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.195005][ T40] audit: type=1400 audit(1757116218.153:450): avc: denied { open } for pid=7439 comm="syz.4.421" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.352363][ T7458] tmpfs: Unknown parameter 'nr_bhocks' [ 77.533464][ T7465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.537498][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 77.565315][ T7416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.567656][ T7416] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 77.579548][ T7416] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.581482][ T7416] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 77.803991][ T63] Bluetooth: hci2: command 0x040f tx timeout [ 77.808051][ T7416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.809995][ T7416] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 77.861170][ T7485] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1128562688) [ 77.864524][ T7485] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 77.904206][ T7492] team0: Device gtp0 is of different type [ 77.962431][ T40] audit: type=1400 audit(1757116218.923:451): avc: denied { write } for pid=7497 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.009191][ T7499] bridge: RTM_NEWNEIGH with invalid ether address [ 78.012156][ T7499] bridge: RTM_NEWNEIGH with invalid ether address [ 78.026833][ T7501] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.034435][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.037576][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.074023][ T6051] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.225519][ T6051] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.228993][ T6051] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.233184][ T6051] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.237015][ T6051] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.240341][ T6051] usb 8-1: SerialNumber: syz [ 78.318854][ T40] audit: type=1400 audit(1757116219.283:452): avc: denied { read } for pid=7510 comm="syz.4.440" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.326438][ T40] audit: type=1400 audit(1757116219.283:453): avc: denied { open } for pid=7510 comm="syz.4.440" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.334419][ T40] audit: type=1400 audit(1757116219.283:454): avc: denied { ioctl } for pid=7510 comm="syz.4.440" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 78.407918][ T7515] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 78.408493][ T7514] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 78.471507][ T6051] usb 8-1: 0:2 : does not exist [ 78.473196][ T6051] usb 8-1: unit 10 not found! [ 78.483429][ T6051] usb 8-1: USB disconnect, device number 5 [ 78.501290][ T6759] udevd[6759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.577280][ T40] audit: type=1400 audit(1757116219.543:455): avc: denied { write } for pid=7527 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.584313][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 78.671703][ T7535] 9p: Unknown Cache mode or invalid value fscac_e [ 78.724755][ T40] audit: type=1400 audit(1757116219.693:456): avc: denied { write } for pid=7532 comm="syz.3.446" name="file0" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.731581][ T40] audit: type=1400 audit(1757116219.693:457): avc: denied { open } for pid=7532 comm="syz.3.446" path="/146/file0" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.427694][ T40] audit: type=1326 audit(1757116220.393:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.3.446" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa511f8ebe9 code=0x7fc00000 [ 79.861493][ T7554] sch_fq: defrate 0 ignored. [ 79.867148][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.450'. [ 80.034489][ T7570] overlayfs: overlapping lowerdir path [ 80.044079][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.184535][ T7591] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 80.250162][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 80.253037][ T7595] netlink: 'syz.4.464': attribute type 30 has an invalid length. [ 80.261224][ T75] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.264212][ T75] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.270677][ T75] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.273502][ T75] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.306676][ T7597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.432436][ T7614] FAULT_INJECTION: forcing a failure. [ 80.432436][ T7614] name failslab, interval 1, probability 0, space 0, times 0 [ 80.439437][ T7614] CPU: 0 UID: 0 PID: 7614 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT(full) [ 80.439454][ T7614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.439461][ T7614] Call Trace: [ 80.439465][ T7614] [ 80.439469][ T7614] dump_stack_lvl+0x16c/0x1f0 [ 80.439487][ T7614] should_fail_ex+0x512/0x640 [ 80.439501][ T7614] ? fs_reclaim_acquire+0xae/0x150 [ 80.439520][ T7614] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 80.439537][ T7614] should_failslab+0xc2/0x120 [ 80.439550][ T7614] __kmalloc_noprof+0xd2/0x510 [ 80.439564][ T7614] tomoyo_realpath_from_path+0xc2/0x6e0 [ 80.439582][ T7614] ? tomoyo_profile+0x47/0x60 [ 80.439593][ T7614] tomoyo_path_perm+0x274/0x460 [ 80.439606][ T7614] ? tomoyo_path_perm+0x260/0x460 [ 80.439620][ T7614] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 80.439654][ T7614] security_inode_getattr+0x116/0x290 [ 80.439670][ T7614] vfs_getattr+0x25/0x60 [ 80.439685][ T7614] ovl_copy_up_one+0x5e8/0x38e0 [ 80.439698][ T7614] ? __lock_acquire+0xb97/0x1ce0 [ 80.439719][ T7614] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 80.439733][ T7614] ? __lock_acquire+0x62e/0x1ce0 [ 80.439778][ T24] libceph: connect (1)[c::]:6789 error -101 [ 80.439776][ T7614] ? dget_parent+0xf8/0x5e0 [ 80.439798][ T7614] ovl_copy_up_flags+0x18d/0x200 [ 80.439812][ T7614] ovl_xattr_set+0x3cc/0x550 [ 80.439826][ T7614] ? __pfx_ovl_xattr_set+0x10/0x10 [ 80.439840][ T7614] ? evm_protected_xattr_common+0x188/0x1f0 [ 80.439856][ T7614] ? xattr_resolve_name+0x27b/0x3f0 [ 80.439868][ T7614] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 80.439881][ T7614] __vfs_setxattr+0x175/0x1e0 [ 80.439894][ T7614] ? __pfx___vfs_setxattr+0x10/0x10 [ 80.439909][ T7614] __vfs_setxattr_noperm+0x127/0x660 [ 80.439924][ T7614] __vfs_setxattr_locked+0x182/0x260 [ 80.439939][ T7614] vfs_setxattr+0x145/0x360 [ 80.439951][ T7614] ? lock_acquire+0x179/0x350 [ 80.439968][ T7614] ? __pfx_vfs_setxattr+0x10/0x10 [ 80.439980][ T7614] ? mnt_get_write_access+0x54/0x300 [ 80.439996][ T7614] ? mnt_get_write_access+0x54/0x300 [ 80.440013][ T7614] do_setxattr+0x145/0x180 [ 80.440026][ T7614] filename_setxattr+0x16b/0x1d0 [ 80.440044][ T7614] ? __pfx_filename_setxattr+0x10/0x10 [ 80.440062][ T7614] ? getname_flags.part.0+0x1c5/0x550 [ 80.440081][ T7614] path_setxattrat+0x1de/0x2a0 [ 80.440096][ T7614] ? __pfx_path_setxattrat+0x10/0x10 [ 80.440113][ T7614] ? ksys_write+0x190/0x250 [ 80.440138][ T7614] ? fput+0x9b/0xd0 [ 80.440152][ T7614] ? ksys_write+0x1ac/0x250 [ 80.440162][ T7614] ? __pfx_ksys_write+0x10/0x10 [ 80.440175][ T7614] __x64_sys_setxattr+0xc6/0x140 [ 80.440187][ T7614] ? do_syscall_64+0x91/0x4c0 [ 80.440201][ T7614] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.440213][ T7614] do_syscall_64+0xcd/0x4c0 [ 80.440228][ T7614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.440239][ T7614] RIP: 0033:0x7f8fa6b8ebe9 [ 80.440248][ T7614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.440259][ T7614] RSP: 002b:00007f8fa7965038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 80.440270][ T7614] RAX: ffffffffffffffda RBX: 00007f8fa6dc5fa0 RCX: 00007f8fa6b8ebe9 [ 80.440276][ T7614] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000280 [ 80.440283][ T7614] RBP: 00007f8fa7965090 R08: 0000000000000001 R09: 0000000000000000 [ 80.440289][ T7614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.440295][ T7614] R13: 00007f8fa6dc6038 R14: 00007f8fa6dc5fa0 R15: 00007ffc157122f8 [ 80.440309][ T7614] [ 80.440313][ T7614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.444671][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 80.650105][ T7634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7634 comm=syz.1.478 [ 80.798491][ T7650] FAULT_INJECTION: forcing a failure. [ 80.798491][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 80.804683][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.2.484 Not tainted syzkaller #0 PREEMPT(full) [ 80.804699][ T7650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.804706][ T7650] Call Trace: [ 80.804711][ T7650] [ 80.804717][ T7650] dump_stack_lvl+0x16c/0x1f0 [ 80.804749][ T7650] should_fail_ex+0x512/0x640 [ 80.804768][ T7650] ? fs_reclaim_acquire+0xae/0x150 [ 80.804785][ T7650] ? tomoyo_encode2+0x100/0x3e0 [ 80.804800][ T7650] should_failslab+0xc2/0x120 [ 80.804813][ T7650] __kmalloc_noprof+0xd2/0x510 [ 80.804823][ T7650] ? d_absolute_path+0x136/0x1a0 [ 80.804842][ T7650] tomoyo_encode2+0x100/0x3e0 [ 80.804859][ T7650] tomoyo_encode+0x29/0x50 [ 80.804874][ T7650] tomoyo_realpath_from_path+0x18f/0x6e0 [ 80.804892][ T7650] ? tomoyo_profile+0x47/0x60 [ 80.804903][ T7650] tomoyo_path_perm+0x274/0x460 [ 80.804916][ T7650] ? tomoyo_path_perm+0x260/0x460 [ 80.804930][ T7650] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 80.804964][ T7650] security_inode_getattr+0x116/0x290 [ 80.804980][ T7650] vfs_getattr+0x25/0x60 [ 80.804996][ T7650] ovl_copy_up_one+0x5e8/0x38e0 [ 80.805009][ T7650] ? __lock_acquire+0xb97/0x1ce0 [ 80.805031][ T7650] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 80.805045][ T7650] ? __lock_acquire+0x62e/0x1ce0 [ 80.805088][ T7650] ? dget_parent+0xf8/0x5e0 [ 80.805109][ T7650] ovl_copy_up_flags+0x18d/0x200 [ 80.805122][ T7650] ovl_xattr_set+0x3cc/0x550 [ 80.805136][ T7650] ? __pfx_ovl_xattr_set+0x10/0x10 [ 80.805149][ T7650] ? evm_protected_xattr_common+0x188/0x1f0 [ 80.805165][ T7650] ? xattr_resolve_name+0x27b/0x3f0 [ 80.805179][ T7650] ? __pfx_ovl_other_xattr_set+0x10/0x10 [ 80.805191][ T7650] __vfs_setxattr+0x175/0x1e0 [ 80.805203][ T7650] ? __pfx___vfs_setxattr+0x10/0x10 [ 80.805219][ T7650] __vfs_setxattr_noperm+0x127/0x660 [ 80.805234][ T7650] __vfs_setxattr_locked+0x182/0x260 [ 80.805248][ T7650] vfs_setxattr+0x145/0x360 [ 80.805261][ T7650] ? lock_acquire+0x179/0x350 [ 80.805282][ T7650] ? __pfx_vfs_setxattr+0x10/0x10 [ 80.805294][ T7650] ? mnt_get_write_access+0x54/0x300 [ 80.805310][ T7650] ? mnt_get_write_access+0x54/0x300 [ 80.805328][ T7650] do_setxattr+0x145/0x180 [ 80.805341][ T7650] filename_setxattr+0x16b/0x1d0 [ 80.805353][ T7650] ? __pfx_filename_setxattr+0x10/0x10 [ 80.805366][ T7650] ? getname_flags.part.0+0x1c5/0x550 [ 80.805384][ T7650] path_setxattrat+0x1de/0x2a0 [ 80.805397][ T7650] ? __pfx_path_setxattrat+0x10/0x10 [ 80.805411][ T7650] ? ksys_write+0x190/0x250 [ 80.805434][ T7650] ? fput+0x9b/0xd0 [ 80.805448][ T7650] ? ksys_write+0x1ac/0x250 [ 80.805458][ T7650] ? __pfx_ksys_write+0x10/0x10 [ 80.805471][ T7650] __x64_sys_setxattr+0xc6/0x140 [ 80.805483][ T7650] ? do_syscall_64+0x91/0x4c0 [ 80.805500][ T7650] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.805512][ T7650] do_syscall_64+0xcd/0x4c0 [ 80.805527][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.805538][ T7650] RIP: 0033:0x7f8fb558ebe9 [ 80.805547][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.805562][ T7650] RSP: 002b:00007f8fb6422038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 80.805578][ T7650] RAX: ffffffffffffffda RBX: 00007f8fb57c5fa0 RCX: 00007f8fb558ebe9 [ 80.805588][ T7650] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000280 [ 80.805597][ T7650] RBP: 00007f8fb6422090 R08: 0000000000000001 R09: 0000000000000000 [ 80.805609][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.805618][ T7650] R13: 00007f8fb57c6038 R14: 00007f8fb57c5fa0 R15: 00007ffcc98356c8 [ 80.805641][ T7650] [ 80.805664][ T7650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.826151][ T24] libceph: connect (1)[c::]:6789 error -101 [ 80.930941][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 81.055919][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 81.201542][ T7615] ceph: No mds server is up or the cluster is laggy [ 81.205963][ T7678] overlayfs: failed to resolve './file1': -2 [ 81.254329][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 81.277317][ T7680] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 81.289461][ T7680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.293659][ T7680] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 81.423445][ T7691] ptrace attach of "/syz-executor exec"[5962] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 81.440753][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.482968][ T7695] netlink: 'syz.4.499': attribute type 3 has an invalid length. [ 81.486703][ T7695] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 81.487703][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.489187][ T7695] __nla_validate_parse: 3 callbacks suppressed [ 81.489196][ T7695] netlink: 220 bytes leftover after parsing attributes in process `syz.4.499'. [ 81.492823][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.502347][ T10] cfg80211: failed to load regulatory.db [ 81.502654][ T24] usb 8-1: Product: syz [ 81.506633][ T24] usb 8-1: Manufacturer: syz [ 81.508650][ T24] usb 8-1: SerialNumber: syz [ 81.511383][ T24] usb 8-1: config 0 descriptor?? [ 81.526792][ T24] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 81.556126][ T6759] udevd[6759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.599441][ T7699] 9pnet_fd: Insufficient options for proto=fd [ 81.645054][ T7704] evm: overlay not supported [ 81.739632][ T7711] warn_alloc: 3 callbacks suppressed [ 81.739643][ T7711] syz.1.505: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 81.748140][ T7711] CPU: 3 UID: 0 PID: 7711 Comm: syz.1.505 Not tainted syzkaller #0 PREEMPT(full) [ 81.748163][ T7711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.748174][ T7711] Call Trace: [ 81.748180][ T7711] [ 81.748186][ T7711] dump_stack_lvl+0x16c/0x1f0 [ 81.748213][ T7711] warn_alloc+0x248/0x3a0 [ 81.748233][ T7711] ? __pfx_warn_alloc+0x10/0x10 [ 81.748262][ T7711] ? hash_netportnet_create+0x3ec/0x1250 [ 81.748286][ T7711] ? __vmalloc_node_noprof+0xad/0xf0 [ 81.748315][ T7711] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 81.748338][ T7711] ? ip_set_create+0x7e1/0x14d0 [ 81.748354][ T7711] ? nfnetlink_rcv_msg+0x9fc/0x1200 [ 81.748378][ T7711] ? hash_netportnet_create+0x3ec/0x1250 [ 81.748409][ T7711] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.748439][ T7711] ? ___kmalloc_large_node+0xed/0x160 [ 81.748469][ T7711] __kvmalloc_node_noprof+0x30a/0x620 [ 81.748486][ T7711] ? hash_netportnet_create+0x3ec/0x1250 [ 81.748510][ T7711] ? hash_netportnet_create+0x3ec/0x1250 [ 81.748539][ T7711] ? hash_netportnet_create+0x3ec/0x1250 [ 81.748562][ T7711] hash_netportnet_create+0x3ec/0x1250 [ 81.748588][ T7711] ? __nla_validate_parse+0x2854/0x2880 [ 81.748641][ T7711] ? __pfx_hash_netportnet_create+0x10/0x10 [ 81.748669][ T7711] ip_set_create+0x7e1/0x14d0 [ 81.748692][ T7711] ? __pfx_ip_set_create+0x10/0x10 [ 81.748727][ T7711] ? find_held_lock+0x2b/0x80 [ 81.748756][ T7711] nfnetlink_rcv_msg+0x9fc/0x1200 [ 81.748782][ T7711] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 81.748802][ T7711] ? __lock_acquire+0x62e/0x1ce0 [ 81.748851][ T7711] ? avc_has_perm_noaudit+0x149/0x3b0 [ 81.748878][ T7711] netlink_rcv_skb+0x155/0x420 [ 81.748901][ T7711] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 81.748920][ T7711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.748955][ T7711] ? ns_capable+0xd7/0x110 [ 81.748980][ T7711] nfnetlink_rcv+0x1b3/0x430 [ 81.749007][ T7711] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 81.749033][ T7711] ? netlink_deliver_tap+0x1ae/0xd30 [ 81.749066][ T7711] netlink_unicast+0x5aa/0x870 [ 81.749093][ T7711] ? __pfx_netlink_unicast+0x10/0x10 [ 81.749126][ T7711] netlink_sendmsg+0x8d1/0xdd0 [ 81.749153][ T7711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.749201][ T7711] ____sys_sendmsg+0xa98/0xc70 [ 81.749230][ T7711] ? copy_msghdr_from_user+0x10a/0x160 [ 81.749250][ T7711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.749289][ T7711] ___sys_sendmsg+0x134/0x1d0 [ 81.749311][ T7711] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.749366][ T7711] __sys_sendmsg+0x16d/0x220 [ 81.749387][ T7711] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.749407][ T7711] ? __x64_sys_futex+0x1e0/0x4c0 [ 81.749450][ T7711] do_syscall_64+0xcd/0x4c0 [ 81.749475][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.749491][ T7711] RIP: 0033:0x7f8fa6b8ebe9 [ 81.749506][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.749522][ T7711] RSP: 002b:00007f8fa7944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.749538][ T7711] RAX: ffffffffffffffda RBX: 00007f8fa6dc6090 RCX: 00007f8fa6b8ebe9 [ 81.749549][ T7711] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000b [ 81.749560][ T7711] RBP: 00007f8fa6c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.749570][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.749580][ T7711] R13: 00007f8fa6dc6128 R14: 00007f8fa6dc6090 R15: 00007ffc157122f8 [ 81.749605][ T7711] [ 81.749630][ T7711] Mem-Info: [ 81.867557][ T7711] active_anon:5588 inactive_anon:155 isolated_anon:0 [ 81.867557][ T7711] active_file:15049 inactive_file:880 isolated_file:0 [ 81.867557][ T7711] unevictable:1768 dirty:207 writeback:0 [ 81.867557][ T7711] slab_reclaimable:7487 slab_unreclaimable:70968 [ 81.867557][ T7711] mapped:22911 shmem:1786 pagetables:2460 [ 81.867557][ T7711] sec_pagetables:334 bounce:0 [ 81.867557][ T7711] kernel_misc_reclaimable:0 [ 81.867557][ T7711] free:501888 free_pcp:12419 free_cma:0 [ 81.887298][ T7711] Node 0 active_anon:22332kB inactive_anon:428kB active_file:60064kB inactive_file:4356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91388kB dirty:816kB writeback:128kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13296kB pagetables:8232kB sec_pagetables:1312kB all_unreclaimable? yes Balloon:0kB [ 81.899632][ T7711] Node 1 active_anon:20kB inactive_anon:192kB active_file:132kB inactive_file:316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:256kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:1608kB sec_pagetables:24kB all_unreclaimable? yes Balloon:0kB [ 81.912183][ T7711] Node 0 DMA free:15200kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.924036][ T7711] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 81.926574][ T7711] Node 0 DMA32 free:388084kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:2048KB free_highatomic:1988KB active_anon:22332kB inactive_anon:428kB active_file:60064kB inactive_file:6916kB unevictable:3536kB writepending:820kB present:2080628kB managed:1263456kB mlocked:0kB bounce:0kB free_pcp:48116kB local_pcp:15612kB free_cma:0kB [ 81.939235][ T7711] lowmem_reserve[]: 0 0 0 0 0 [ 81.941255][ T7711] Node 1 Normal free:1600560kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:2048KB free_highatomic:2008KB active_anon:20kB inactive_anon:192kB active_file:132kB inactive_file:316kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:1468kB local_pcp:76kB free_cma:0kB [ 81.954189][ T7711] lowmem_reserve[]: 0 0 0 0 0 [ 81.956201][ T7711] Node 0 DMA: 8*4kB (UM) 10*8kB (UM) 11*16kB (UM) 12*32kB (UM) 9*64kB (U) 7*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 1*4096kB (U) = 15200kB [ 81.961849][ T7711] Node 0 DMA32: 890*4kB (UMEH) 514*8kB (UMH) 856*16kB (UMH) 861*32kB (UMH) 959*64kB (UMH) 472*128kB (UMEH) 239*256kB (UMEH) 112*512kB (UM) 39*1024kB (UME) 22*2048kB (UM) 3*4096kB (M) = 386520kB [ 81.968199][ T839] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 81.970728][ T7711] Node 1 Normal: 318*4kB (UMEH) 319*8kB (UMEH) 284*16kB (UMEH) 412*32kB (UMEH) 270*64kB (UMEH) 207*128kB (UMEH) 177*256kB (UMEH) 152*512kB (UMEH) 135*1024kB (UM) 64*2048kB (UM) 279*4096kB (UM) = 1600560kB [ 81.977346][ T7711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.980449][ T7711] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.983474][ T7711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.986717][ T7711] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.989742][ T7711] 21105 total pagecache pages [ 81.991286][ T7711] 1699 pages in swap cache [ 81.992742][ T7711] Free swap = 97308kB [ 81.994559][ T7711] Total swap = 124996kB [ 81.996336][ T7711] 1048443 pages RAM [ 81.997845][ T7711] 0 pages HighMem/MovableOnly [ 81.999359][ T7711] 283266 pages reserved [ 82.000706][ T7711] 0 pages cma reserved [ 82.045835][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.508'. [ 82.133938][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 82.136879][ T839] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.140445][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.150120][ T839] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.154166][ T839] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.158399][ T839] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.161463][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.373675][ T839] usb 7-1: GET_CAPABILITIES returned 0 [ 82.376578][ T839] usbtmc 7-1:16.0: can't read capabilities [ 82.584250][ T6042] usb 7-1: USB disconnect, device number 8 [ 82.648575][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 82.648587][ T40] audit: type=1326 audit(1757116223.613:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.4.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8218ebe9 code=0x7fc00000 [ 82.900653][ T7762] overlayfs: failed lookup in lower (newroot/41, name='bus', err=-40): overlapping layers [ 82.905092][ T7762] overlayfs: failed lookup in lower (newroot/41, name='bus', err=-40): overlapping layers [ 82.941156][ T40] audit: type=1400 audit(1757116223.903:483): avc: denied { module_load } for pid=7776 comm="syz.4.521" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 82.970876][ T40] audit: type=1400 audit(1757116223.933:484): avc: denied { read } for pid=7779 comm="syz.4.522" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.979044][ T40] audit: type=1400 audit(1757116223.933:485): avc: denied { open } for pid=7779 comm="syz.4.522" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.044786][ T7785] geneve2: entered promiscuous mode [ 83.046532][ T7785] geneve2: entered allmulticast mode [ 83.200870][ T40] audit: type=1400 audit(1757116224.163:486): avc: denied { create } for pid=7816 comm="syz.2.529" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.209889][ T40] audit: type=1400 audit(1757116224.163:487): avc: denied { mounton } for pid=7816 comm="syz.2.529" path="/132/file0" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.235395][ T7827] netlink: 60 bytes leftover after parsing attributes in process `syz.2.531'. [ 83.238392][ T7827] unsupported nlmsg_type 40 [ 83.327069][ T40] audit: type=1400 audit(1757116224.293:488): avc: denied { ioctl } for pid=7839 comm="syz.1.536" path="socket:[21219]" dev="sockfs" ino=21219 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.334922][ T40] audit: type=1400 audit(1757116224.293:489): avc: denied { getopt } for pid=7839 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.341737][ T40] audit: type=1400 audit(1757116224.293:490): avc: denied { view } for pid=7840 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.363428][ T40] audit: type=1400 audit(1757116224.323:491): avc: denied { write } for pid=7849 comm="syz.4.537" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.385440][ T7852] netlink: 304 bytes leftover after parsing attributes in process `syz.1.538'. [ 83.769461][ T7884] tipc: Can't bind to reserved service type 2 [ 83.790590][ T7889] binder: 7888:7889 ioctl c0306201 200000000040 returned -22 [ 83.943104][ T7902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.015353][ T34] usb 8-1: USB disconnect, device number 6 [ 84.537018][ T7942] binder: 7931:7942 ioctl c018620b 0 returned -14 [ 85.400788][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.577'. [ 85.857211][ T8016] netlink: 10 bytes leftover after parsing attributes in process `syz.1.584'. [ 86.473924][ T6004] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.625928][ T6004] usb 6-1: config 0 has no interfaces? [ 86.630114][ T6004] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 86.633557][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.637858][ T6004] usb 6-1: Product: syz [ 86.639295][ T6004] usb 6-1: Manufacturer: syz [ 86.640777][ T6004] usb 6-1: SerialNumber: syz [ 86.643750][ T6004] usb 6-1: config 0 descriptor?? [ 86.851915][ T8033] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 86.857376][ T8033] bond0: (slave wlan1): Opening slave failed [ 87.391600][ T59] usb 6-1: USB disconnect, device number 6 [ 87.663856][ T839] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 87.753880][ T59] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 87.813859][ T839] usb 8-1: Invalid ep0 maxpacket: 64 [ 87.923818][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 87.927124][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.931417][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.935407][ T59] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 87.938509][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.942770][ T59] usb 6-1: config 0 descriptor?? [ 87.963862][ T839] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 88.113950][ T839] usb 8-1: Invalid ep0 maxpacket: 64 [ 88.115858][ T839] usb usb8-port1: attempt power cycle [ 88.356898][ T59] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:041E:3100.0003/input/input11 [ 88.420249][ T59] creative-sb0540 0003:041E:3100.0003: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 88.423074][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 88.423085][ T40] audit: type=1400 audit(1757116229.383:509): avc: denied { append } for pid=8070 comm="syz.2.604" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.453878][ T839] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 88.475696][ T839] usb 8-1: Invalid ep0 maxpacket: 64 [ 88.549356][ T8074] syz.4.605 uses old SIOCAX25GETINFO [ 88.558268][ T59] usb 6-1: USB disconnect, device number 7 [ 88.605067][ T839] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 88.607366][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 88.610403][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 88.617322][ T8082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8082 comm=syz.4.609 [ 88.624633][ T839] usb 8-1: Invalid ep0 maxpacket: 64 [ 88.626510][ T839] usb usb8-port1: unable to enumerate USB device [ 88.902929][ T8109] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 88.907240][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8109 comm=syz.4.616 [ 88.929658][ T8111] netlink: zone id is out of range [ 88.931337][ T8111] netlink: zone id is out of range [ 88.933200][ T8111] netlink: del zone limit has 4 unknown bytes [ 88.941361][ T40] audit: type=1400 audit(1757116229.913:510): avc: denied { ioctl } for pid=8112 comm="syz.4.618" path="socket:[23645]" dev="sockfs" ino=23645 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.951043][ T8113] sctp: [Deprecated]: syz.4.618 (pid 8113) Use of int in max_burst socket option. [ 88.951043][ T8113] Use struct sctp_assoc_value instead [ 88.963335][ T8111] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 89.101450][ T40] audit: type=1400 audit(1757116230.063:511): avc: denied { getopt } for pid=8117 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.102148][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.619'. [ 89.118890][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 89.135219][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 89.161406][ T40] audit: type=1400 audit(1757116230.123:512): avc: denied { bind } for pid=8132 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.168940][ T40] audit: type=1400 audit(1757116230.123:513): avc: denied { listen } for pid=8132 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.237638][ T8138] comedi comedi0: Minor 3 specified more than once! [ 89.366246][ T8155] input: syz1 as /devices/virtual/input/input13 [ 89.375401][ T8155] netlink: 100 bytes leftover after parsing attributes in process `syz.2.633'. [ 89.380005][ T40] audit: type=1400 audit(1757116230.343:514): avc: denied { ioctl } for pid=8154 comm="syz.2.633" path="socket:[21946]" dev="sockfs" ino=21946 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.510439][ T40] audit: type=1326 audit(1757116230.473:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.640" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf8218ebe9 code=0x0 [ 89.526146][ T8180] wlan1: mtu less than device minimum [ 89.530302][ T8180] netlink: 'syz.2.641': attribute type 10 has an invalid length. [ 89.532966][ T8180] hsr_slave_0: left promiscuous mode [ 89.537428][ T8180] hsr_slave_1: left promiscuous mode [ 89.617204][ T40] audit: type=1326 audit(2000000000.080:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8182 comm="syz.1.642" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fa6b8ebe9 code=0x0 [ 89.824202][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 89.827228][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 89.830091][ T8199] netlink: 'syz.2.647': attribute type 19 has an invalid length. [ 89.991934][ T8212] loop8: detected capacity change from 0 to 8 [ 90.000748][ T8212] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 90.005411][ T8212] loop8: p1 start 1094235288 is beyond EOD, truncated [ 90.008356][ T8212] loop8: p2 start 2001190138 is beyond EOD, truncated [ 90.011125][ T8212] loop8: p3 start 1052393021 is beyond EOD, truncated [ 90.014467][ T8212] loop8: p4 start 2771965051 is beyond EOD, truncated [ 90.017499][ T8212] loop8: p5 start 2058321373 is beyond EOD, truncated [ 90.020366][ T8212] loop8: p6 start 354067484 is beyond EOD, truncated [ 90.023190][ T8212] loop8: p7 start 721891510 is beyond EOD, truncated [ 90.026178][ T8212] loop8: p8 start 250104858 is beyond EOD, truncated [ 90.029045][ T8212] loop8: p9 start 2537791866 is beyond EOD, truncated [ 90.031911][ T8212] loop8: p10 start 2188771813 is beyond EOD, truncated [ 90.035008][ T8212] loop8: p11 start 2029179045 is beyond EOD, truncated [ 90.037955][ T8212] loop8: p12 start 3811662475 is beyond EOD, truncated [ 90.075323][ T8215] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 90.077599][ T8215] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.080806][ T8215] vhci_hcd vhci_hcd.0: Device attached [ 90.090870][ T8216] vhci_hcd: connection closed [ 90.091031][ T96] vhci_hcd: stop threads [ 90.095311][ T96] vhci_hcd: release socket [ 90.096720][ T96] vhci_hcd: disconnect device [ 90.463555][ T8230] netlink: 76 bytes leftover after parsing attributes in process `syz.3.656'. [ 90.495672][ T8232] IPVS: set_ctl: invalid protocol: 108 172.30.1.2:20003 [ 90.500119][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.538812][ T8241] netlink: 25 bytes leftover after parsing attributes in process `syz.4.661'. [ 90.542213][ T8241] netlink: 'syz.4.661': attribute type 4 has an invalid length. [ 90.551472][ T8241] netlink: 'syz.4.661': attribute type 5 has an invalid length. [ 90.557912][ T40] audit: type=1400 audit(2000000001.019:517): avc: denied { append } for pid=8242 comm="syz.1.662" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.569796][ T40] audit: type=1400 audit(2000000001.029:518): avc: denied { ioctl } for pid=8242 comm="syz.1.662" path="socket:[24803]" dev="sockfs" ino=24803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.740303][ T8252] overlay: Bad value for 'workdir' [ 90.874897][ T8257] syzkaller0: entered promiscuous mode [ 90.876646][ T8257] syzkaller0: entered allmulticast mode [ 90.914312][ T6004] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.042537][ T8261] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 91.043909][ T6004] usb 7-1: device descriptor read/64, error -71 [ 91.045176][ T8261] netlink: 'syz.3.669': attribute type 3 has an invalid length. [ 91.049358][ T8261] NCSI netlink: No device for ifindex 0 [ 91.283906][ T6004] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 91.414277][ T6004] usb 7-1: device descriptor read/64, error -71 [ 91.525288][ T6004] usb usb7-port1: attempt power cycle [ 91.815151][ T8271] sch_fq: defrate 0 ignored. [ 91.860171][ T8279] block nbd3: Attempted send on invalid socket [ 91.862612][ T8279] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.867017][ T6004] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 91.868847][ T8279] (syz.3.672,8279,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 91.874142][ T8279] (syz.3.672,8279,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 91.877327][ T8279] (syz.3.672,8279,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 91.880647][ T8279] (syz.3.672,8279,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 91.885892][ T6004] usb 7-1: device descriptor read/8, error -71 [ 92.135359][ T6004] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 92.153882][ T6042] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 92.154489][ T6004] usb 7-1: device descriptor read/8, error -71 [ 92.264725][ T6004] usb usb7-port1: unable to enumerate USB device [ 92.296430][ T8298] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 92.304749][ T8300] CIFS mount error: No usable UNC path provided in device string! [ 92.304749][ T8300] [ 92.308301][ T8300] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 92.333310][ T6042] usb 8-1: config 0 has no interfaces? [ 92.336850][ T6042] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 92.340119][ T6042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.345353][ T6042] usb 8-1: config 0 descriptor?? [ 92.559728][ T8316] trusted_key: encrypted_key: master key parameter '‘cryptfs' is invalid [ 92.751737][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.754869][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.760996][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.763980][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.775755][ T6004] usb 8-1: USB disconnect, device number 11 [ 93.494271][ T5964] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.540912][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c4c3800: rx timeout, send abort [ 93.545388][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 93.545399][ T40] audit: type=1400 audit(2000000004.009:529): avc: denied { read } for pid=5358 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.546223][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c4c3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 93.547389][ T40] audit: type=1400 audit(2000000004.009:530): avc: denied { search } for pid=5358 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.568836][ T40] audit: type=1400 audit(2000000004.009:531): avc: denied { search } for pid=5358 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.578120][ T40] audit: type=1400 audit(2000000004.009:532): avc: denied { add_name } for pid=5358 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.585135][ T40] audit: type=1400 audit(2000000004.009:533): avc: denied { create } for pid=5358 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.592675][ T40] audit: type=1400 audit(2000000004.009:534): avc: denied { append open } for pid=5358 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.600617][ T40] audit: type=1400 audit(2000000004.009:535): avc: denied { getattr } for pid=5358 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.645519][ T5964] usb 6-1: Using ep0 maxpacket: 16 [ 93.655644][ T5964] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.658244][ T5964] usb 6-1: config 0 has no interface number 0 [ 93.663904][ T5964] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 93.666809][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.669343][ T5964] usb 6-1: Product: syz [ 93.670701][ T5964] usb 6-1: Manufacturer: syz [ 93.672374][ T5964] usb 6-1: SerialNumber: syz [ 93.687307][ T5964] usb 6-1: config 0 descriptor?? [ 93.688613][ T8347] can0: slcan on ttyS3. [ 93.695848][ T5964] hub 6-1:0.132: bad descriptor, ignoring hub [ 93.697920][ T5964] hub 6-1:0.132: probe with driver hub failed with error -5 [ 93.703037][ T5964] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input14 [ 93.736755][ T8359] tap0: tun_chr_ioctl cmd 1074025677 [ 93.736824][ T8359] tap0: linktype set to 270 [ 93.747474][ T8347] can0 (unregistered): slcan off ttyS3. [ 93.757793][ T8360] can0: slcan on ttyS3. [ 93.836143][ T8346] can0 (unregistered): slcan off ttyS3. [ 93.869174][ T8372] syz.2.698 (8372) used obsolete PPPIOCDETACH ioctl [ 93.947141][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.950248][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.002551][ T8387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.017988][ T40] audit: type=1400 audit(2000000004.479:536): avc: denied { append } for pid=8389 comm="syz.2.703" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.023187][ T8392] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.028665][ T8392] overlayfs: failed to set xattr on upper [ 94.030502][ T8392] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.032662][ T8392] overlayfs: ...falling back to index=off. [ 94.034806][ T8392] overlayfs: ...falling back to uuid=null. [ 94.036935][ T8392] overlayfs: ...falling back to xino=off. [ 94.067023][ T40] audit: type=1400 audit(2000000004.529:537): avc: denied { write } for pid=8394 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.130570][ T40] audit: type=1326 audit(2000000004.589:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.2.708" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fb558ebe9 code=0x0 [ 94.162356][ T8392] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 94.166232][ T8392] openvswitch: netlink: Flow key attr not present in new flow. [ 94.225389][ T8407] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 94.228619][ T8407] bond0: (slave wlan1): Opening slave failed [ 94.246105][ T8411] overlayfs: conflicting options: userxattr,metacopy=on [ 94.261474][ T8413] __nla_validate_parse: 7 callbacks suppressed [ 94.261487][ T8413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.711'. [ 94.365264][ T8414] ./bus: Can't lookup blockdev [ 94.535425][ T8426] netlink: 'syz.4.712': attribute type 2 has an invalid length. [ 94.537908][ T8426] netlink: 68 bytes leftover after parsing attributes in process `syz.4.712'. [ 94.618837][ T8435] netlink: 'syz.4.714': attribute type 2 has an invalid length. [ 95.042212][ T8456] 9pnet: p9_errstr2errno: server reported unknown error ?ãØnª [ 95.042212][ T8456] k‡l [ 95.051283][ T8458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.721'. [ 95.170590][ T8481] netlink: 'syz.1.730': attribute type 2 has an invalid length. [ 95.173025][ T8481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.730'. [ 95.182651][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 95.189478][ T8481] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 95.193673][ T8481] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 95.196858][ T8481] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 95.199418][ T8481] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 95.307016][ T8511] netlink: 68 bytes leftover after parsing attributes in process `syz.4.738'. [ 95.310150][ T8512] netlink: 68 bytes leftover after parsing attributes in process `syz.4.738'. [ 95.315273][ T8510] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 95.315724][ T8511] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 95.329323][ T8510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.337133][ T8510] bond1: (slave geneve2): making interface the new active one [ 95.340662][ T8510] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.370538][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.741'. [ 95.374380][ T8522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.377593][ T8519] nvme_fabrics: missing parameter 'transport=%s' [ 95.380260][ T8519] nvme_fabrics: missing parameter 'nqn=%s' [ 95.403185][ T8519] nvme_fabrics: missing parameter 'transport=%s' [ 95.405592][ T8519] nvme_fabrics: missing parameter 'nqn=%s' [ 95.408694][ T8525] program Ö:*%'ü]#$:{ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.454798][ T5361] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 95.495944][ T8528] sd 0:0:0:0: PR command failed: 1026 [ 95.497715][ T8528] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 95.499874][ T8528] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 95.583893][ T5361] usb 6-1: device descriptor read/64, error -71 [ 95.824232][ T5361] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 95.953912][ T5361] usb 6-1: device descriptor read/64, error -71 [ 96.098921][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 96.102583][ T8560] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.193981][ T5361] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 96.214582][ T5361] usb 6-1: device descriptor read/8, error -71 [ 96.241851][ T8579] sp0: Synchronizing with TNC [ 96.464176][ T5361] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 96.473347][ T8590] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 96.494437][ T5361] usb 6-1: device descriptor read/8, error -71 [ 96.609028][ T839] usb 6-1: USB disconnect, device number 8 [ 96.611095][ T8601] netlink: 9 bytes leftover after parsing attributes in process `syz.3.765'. [ 96.623406][ T8601] 0·: renamed from hsr0 (while UP) [ 96.629799][ T8601] 0·: entered allmulticast mode [ 96.631387][ T8601] hsr_slave_0: entered allmulticast mode [ 96.633165][ T8601] hsr_slave_1: entered allmulticast mode [ 96.635325][ T8601] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 96.694121][ T8599] Falling back ldisc for ttyS3. [ 96.755557][ T839] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 96.820794][ T8632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.884033][ T839] usb 6-1: device descriptor read/64, error -71 [ 97.123451][ T840] libceph: connect (1)[c::]:6789 error -101 [ 97.125599][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 97.135154][ T839] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 97.144299][ T8578] [U] è [ 97.174090][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 97.176263][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 97.179771][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 97.182279][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 97.264007][ T839] usb 6-1: device descriptor read/64, error -71 [ 97.268196][ T8682] block nbd4: Unsupported socket: shutdown callout must be supported. [ 97.376197][ T839] usb usb6-port1: attempt power cycle [ 97.384247][ T840] libceph: connect (1)[c::]:6789 error -101 [ 97.386283][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 97.444589][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 97.447286][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 97.517597][ T8704] loop8: detected capacity change from 0 to 8 [ 97.551699][ T8709] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 97.734651][ T839] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 97.754615][ T839] usb 6-1: device descriptor read/8, error -71 [ 97.894389][ T840] libceph: connect (1)[c::]:6789 error -101 [ 97.896368][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 97.952047][ T8672] ceph: No mds server is up or the cluster is laggy [ 97.952202][ T8677] ceph: No mds server is up or the cluster is laggy [ 97.957486][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 97.960138][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 97.994137][ T839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 98.014462][ T839] usb 6-1: device descriptor read/8, error -71 [ 98.015317][ T8716] macvlan2: entered promiscuous mode [ 98.018500][ T8716] macvlan2: entered allmulticast mode [ 98.020597][ T8716] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 98.125171][ T839] usb usb6-port1: unable to enumerate USB device [ 98.128264][ T8718] binder: 8717:8718 unknown command 0 [ 98.130417][ T8718] binder: 8717:8718 ioctl c0306201 2000000001c0 returned -22 [ 98.411947][ T8733] XFS (nullb0): Invalid superblock magic number [ 98.578063][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 98.578080][ T40] audit: type=1400 audit(2000000009.039:563): avc: denied { append } for pid=8757 comm="syz.2.806" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.688415][ T40] audit: type=1400 audit(2000000009.149:564): avc: denied { getopt } for pid=8770 comm="syz.4.809" lport=42471 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 98.919546][ T6042] IPVS: starting estimator thread 0... [ 98.992012][ T40] audit: type=1400 audit(2000000009.449:565): avc: denied { bind } for pid=8789 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.011413][ T8788] KVM: debugfs: duplicate directory 8788-4 [ 99.014092][ T40] audit: type=1400 audit(2000000009.459:566): avc: denied { connect } for pid=8789 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.024043][ T8784] IPVS: using max 44 ests per chain, 105600 per kthread [ 99.189946][ T8793] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 99.231870][ T40] audit: type=1400 audit(2000000009.679:567): avc: denied { map } for pid=8797 comm="syz.2.819" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.241679][ T40] audit: type=1400 audit(2000000009.689:568): avc: denied { execute } for pid=8797 comm="syz.2.819" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.307032][ T8803] Bluetooth: MGMT ver 1.23 [ 99.422147][ T8804] loop6: detected capacity change from 0 to 524287999 [ 99.583752][ T8812] __nla_validate_parse: 6 callbacks suppressed [ 99.586072][ T8812] netlink: 64 bytes leftover after parsing attributes in process `syz.4.824'. [ 99.613095][ T8816] netlink: 108 bytes leftover after parsing attributes in process `syz.4.825'. [ 99.618303][ T8816] netlink: 108 bytes leftover after parsing attributes in process `syz.4.825'. [ 99.621220][ T8816] netlink: 84 bytes leftover after parsing attributes in process `syz.4.825'. [ 99.669161][ T40] audit: type=1400 audit(2000000010.129:569): avc: denied { getopt } for pid=8818 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.682655][ T40] audit: type=1400 audit(2000000010.139:570): avc: denied { allowed } for pid=8822 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.689826][ T40] audit: type=1400 audit(2000000010.139:571): avc: denied { map } for pid=8822 comm="syz.4.828" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.699455][ T40] audit: type=1400 audit(2000000010.139:572): avc: denied { read write } for pid=8822 comm="syz.4.828" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.861854][ T8756] overlay: ./bus is not a directory [ 99.987276][ T8837] binder: 8836:8837 ioctl 400c620e 200000000640 returned -22 [ 100.005073][ T8837] bridge0: port 4(veth0_to_bridge) entered blocking state [ 100.007390][ T8837] bridge0: port 4(veth0_to_bridge) entered disabled state [ 100.009873][ T8837] veth0_to_bridge: entered allmulticast mode [ 100.012857][ T8837] veth0_to_bridge: entered promiscuous mode [ 100.160351][ T8840] netlink: 'syz.1.832': attribute type 13 has an invalid length. [ 100.162839][ T8840] netlink: 'syz.1.832': attribute type 17 has an invalid length. [ 100.162963][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.834'. [ 100.166494][ T8840] netlink: 'syz.1.832': attribute type 27 has an invalid length. [ 100.214631][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 100.252497][ T8859] bpf: Bad value for 'uid' [ 100.292944][ T8856] /dev/sr0: Can't open blockdev [ 100.407883][ T8878] trusted_key: encrypted_key: master key parameter '' is invalid [ 100.583862][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 100.733864][ T34] usb 6-1: device descriptor read/64, error -71 [ 100.995038][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 101.123856][ T34] usb 6-1: device descriptor read/64, error -71 [ 101.207539][ T8882] autofs: Unknown parameter './file0' [ 101.233244][ T8891] netlink: 'syz.2.846': attribute type 25 has an invalid length. [ 101.234646][ T8881] netlink: 100 bytes leftover after parsing attributes in process `syz.4.843'. [ 101.236179][ T34] usb usb6-port1: attempt power cycle [ 101.238704][ T8891] netlink: 'syz.2.846': attribute type 8 has an invalid length. [ 101.268904][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 101.342795][ T8908] unsupported nla_type 4111 [ 101.356034][ T8908] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 101.439536][ T8917] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 101.441921][ T8917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.447695][ T8917] vhci_hcd vhci_hcd.0: Device attached [ 101.451242][ T8918] usbip_core: unknown command [ 101.452801][ T8918] vhci_hcd: unknown pdu 0 [ 101.454674][ T8918] usbip_core: unknown command [ 101.457261][ T96] vhci_hcd: stop threads [ 101.459618][ T96] vhci_hcd: release socket [ 101.461186][ T96] vhci_hcd: disconnect device [ 101.461936][ T8921] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 101.465425][ T8921] UDF-fs: Scanning with blocksize 2048 failed [ 101.469356][ T8921] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 101.471630][ T8921] UDF-fs: Scanning with blocksize 4096 failed [ 101.573935][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 101.594315][ T34] usb 6-1: device descriptor read/8, error -71 [ 101.833862][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 101.855742][ T34] usb 6-1: device descriptor read/8, error -71 [ 101.968175][ T34] usb usb6-port1: unable to enumerate USB device [ 101.996982][ T8947] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 102.010823][ T8949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.860'. [ 102.018488][ T8949] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 102.079194][ T8954] misc userio: Begin command sent, but we're already running [ 102.168750][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 102.230118][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 102.249085][ T8954] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 102.296453][ T8968] vlan2: entered allmulticast mode [ 102.298088][ T8968] veth0_to_hsr: entered allmulticast mode [ 102.300061][ T8968] bridge3: port 1(vlan2) entered blocking state [ 102.302090][ T8968] bridge3: port 1(vlan2) entered disabled state [ 102.308320][ T8968] vlan2: entered promiscuous mode [ 102.310192][ T8968] veth0_to_hsr: entered promiscuous mode [ 102.394745][ T8981] netlink: 'syz.3.867': attribute type 21 has an invalid length. [ 102.468570][ T8991] netlink: 'syz.3.869': attribute type 7 has an invalid length. [ 102.478246][ T8991] : entered promiscuous mode [ 102.649534][ T9012] input: syz1 as /devices/virtual/input/input19 [ 102.703809][ T9018] vlan2: entered promiscuous mode [ 102.705456][ T9018] bridge0: entered promiscuous mode [ 102.946109][ T9031] No control pipe specified [ 103.432684][ T9048] tipc: Started in network mode [ 103.434473][ T9048] tipc: Node identity 080211000001, cluster identity 4711 [ 103.436954][ T9048] tipc: Enabled bearer , priority 0 [ 103.440161][ T9048] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 103.443272][ T9048] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 103.463069][ T9050] openvswitch: netlink: Flow key attr not present in new flow. [ 103.498677][ T9052] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.503752][ T9052] tipc: Resetting bearer [ 103.619007][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 103.619019][ T40] audit: type=1400 audit(2000000014.079:749): avc: denied { create } for pid=9061 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.792578][ T40] audit: type=1400 audit(2000000014.249:750): avc: denied { create } for pid=9067 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.810576][ T40] audit: type=1400 audit(2000000014.269:751): avc: denied { append } for pid=9072 comm="syz.1.892" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 103.820733][ T40] audit: type=1400 audit(2000000014.269:752): avc: denied { mounton } for pid=9072 comm="syz.1.892" path="/216/file0" dev="tmpfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 103.827920][ T40] audit: type=1400 audit(2000000014.279:753): avc: denied { read } for pid=9074 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.857953][ T40] audit: type=1400 audit(2000000014.319:754): avc: denied { read append } for pid=9081 comm="syz.2.895" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.867160][ T40] audit: type=1400 audit(2000000014.319:755): avc: denied { open } for pid=9081 comm="syz.2.895" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.909746][ T40] audit: type=1400 audit(2000000014.369:756): avc: denied { bind } for pid=9085 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.917017][ T40] audit: type=1400 audit(2000000014.369:757): avc: denied { block_suspend } for pid=9085 comm="syz.2.896" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.982964][ T40] audit: type=1400 audit(2000000014.439:758): avc: denied { write } for pid=9094 comm="syz.2.900" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 104.028578][ T9099] block nbd2: Attempted send on invalid socket [ 104.030734][ T9099] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.031526][ T9102] Sensor A: ================= START STATUS ================= [ 104.034400][ T9099] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 104.036955][ T9102] Sensor A: Test Pattern: 75% Colorbar [ 104.041177][ T9102] Sensor A: Show Information: All [ 104.042815][ T9102] Sensor A: Vertical Flip: false [ 104.045934][ T9102] Sensor A: Horizontal Flip: false [ 104.047658][ T9102] Sensor A: Brightness: 128 [ 104.049290][ T9102] Sensor A: Contrast: 128 [ 104.050713][ T9102] Sensor A: Hue: 0 [ 104.051921][ T9102] Sensor A: Saturation: 128 [ 104.053385][ T9102] Sensor A: ================== END STATUS ================== [ 104.061301][ T9102] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 104.070634][ T9102] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 104.143999][ T6042] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 104.294029][ T6042] usb 6-1: Using ep0 maxpacket: 8 [ 104.298516][ T6042] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.301737][ T6042] usb 6-1: config 0 has no interface number 0 [ 104.304475][ T6042] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.308604][ T6042] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.313008][ T6042] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.317440][ T6042] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.322373][ T6042] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.325959][ T6042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.330927][ T6042] usb 6-1: config 0 descriptor?? [ 104.338008][ T6042] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.404685][ T5964] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 104.505497][ T840] tipc: Node number set to 134418688 [ 104.555592][ T5964] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.558603][ T5964] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.562536][ T5964] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.565833][ T5964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 104.570071][ T5964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 104.575691][ T5964] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.578985][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.581821][ T5964] usb 7-1: Product: syz [ 104.583470][ T5964] usb 7-1: Manufacturer: syz [ 104.591466][ T5964] cdc_wdm 7-1:1.0: skipping garbage [ 104.592673][ T6042] usb 6-1: USB disconnect, device number 17 [ 104.593185][ T5964] cdc_wdm 7-1:1.0: skipping garbage [ 104.598192][ T5964] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 104.599477][ T6042] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 104.600215][ T5964] cdc_wdm 7-1:1.0: Unknown control protocol [ 104.739611][ T9111] __nla_validate_parse: 5 callbacks suppressed [ 104.739622][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'. [ 104.790818][ T9114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.907'. [ 104.865570][ T6042] usb 7-1: USB disconnect, device number 13 [ 105.005300][ C3] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 105.124627][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'. [ 105.369738][ T9128] netlink: 164 bytes leftover after parsing attributes in process `syz.4.912'. [ 105.373718][ T9128] netlink: 164 bytes leftover after parsing attributes in process `syz.4.912'. [ 105.378853][ T9128] netlink: 60 bytes leftover after parsing attributes in process `syz.4.912'. [ 105.398316][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.913'. [ 105.447797][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 105.487693][ T9149] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 105.491361][ T9149] batman_adv: batadv0: Adding interface: team0 [ 105.493332][ T9149] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.501672][ T9149] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 105.695362][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.928'. [ 105.741448][ T9187] Malformed UNC in devname [ 105.741448][ T9187] [ 105.743738][ T9187] CIFS: VFS: Malformed UNC in devname [ 105.746566][ T9187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.929'. [ 105.789132][ T9191] tmpfs: Unknown parameter 'indo64' [ 105.820202][ T9197] netlink: 'syz.2.934': attribute type 8 has an invalid length. [ 105.881786][ T9210] cgroup: release_agent respecified [ 105.907156][ T53] hid-generic 0362:07FF:7FFFFFFF.0004: item fetching failed at offset 0/2 [ 105.912148][ T53] hid-generic 0362:07FF:7FFFFFFF.0004: probe with driver hid-generic failed with error -22 [ 106.036844][ T9238] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 106.036889][ T9237] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 106.049995][ T9238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.053089][ T9237] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 106.059976][ T9240] loop6: detected capacity change from 0 to 63 [ 106.066410][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.071055][ T6759] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.074945][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.079176][ T6759] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.081984][ T6759] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.086249][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.089289][ T6759] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.092509][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.097263][ T9240] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.101426][ T6759] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.151243][ T9249] netlink: 'syz.2.951': attribute type 3 has an invalid length. [ 106.155977][ T9249] netlink: 'syz.2.951': attribute type 7 has an invalid length. [ 106.158489][ T9249] netlink: 'syz.2.951': attribute type 8 has an invalid length. [ 106.166099][ T9251] Malformed UNC in devname [ 106.166099][ T9251] [ 106.169352][ T9251] CIFS: VFS: Malformed UNC in devname [ 106.188534][ T9254] 8021q: VLANs not supported on ip6_vti0 [ 106.230004][ T9259] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 106.240152][ T9259] team0: Port device dummy0 added [ 106.242790][ T9259] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 106.247227][ T9259] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.254972][ T9259] team0: Failed to send options change via netlink (err -105) [ 106.257574][ T9259] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.260445][ T9259] team0: Port device dummy0 removed [ 106.264252][ T9259] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.413879][ T34] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 106.491503][ T9266] random: crng reseeded on system resumption [ 106.498237][ T9266] Restarting kernel threads ... [ 106.501245][ T9266] Done restarting kernel threads. [ 106.553866][ T34] usb 6-1: device descriptor read/64, error -71 [ 106.793984][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 106.909048][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.912974][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.916553][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.919568][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.922511][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.923882][ T34] usb 6-1: device descriptor read/64, error -71 [ 106.925713][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.930437][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.933329][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.938447][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.941641][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.944853][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.947757][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.950725][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.953720][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.956807][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.960069][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.963156][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.966442][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.969386][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.972289][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.975504][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.978547][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.981421][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.984431][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.987342][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.990272][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.993168][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.997091][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.000144][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.003147][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.006960][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.010632][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.014438][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.018091][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.021702][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.025863][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.029788][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.033424][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.034094][ T34] usb usb6-port1: attempt power cycle [ 107.038958][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.042738][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.047605][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.050667][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.053611][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.056831][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.059726][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.062619][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.065580][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.068522][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.071549][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.074587][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.077550][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.080523][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.083434][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.087339][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.090568][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.093447][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.096671][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.100063][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.102912][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.106384][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.109316][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.112203][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.115230][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.118139][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.121060][ T9369] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.186671][ T9389] kvm: kvm [9388]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0x0 [ 107.263231][ T9400] tmpfs: Cannot enable quota on remount [ 107.373919][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 107.405740][ T34] usb 6-1: device descriptor read/8, error -71 [ 107.462933][ T9414] syzkaller1: entered promiscuous mode [ 107.464874][ T9414] syzkaller1: entered allmulticast mode [ 107.467877][ T9413] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 107.554795][ T9417] bridge2: entered promiscuous mode [ 107.556615][ T9417] bridge2: entered allmulticast mode [ 107.590389][ T9420] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 107.594541][ T9420] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 107.597964][ T9420] CPU: 0 UID: 0 PID: 9420 Comm: syz.2.984 Not tainted syzkaller #0 PREEMPT(full) [ 107.601642][ T9420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.605754][ T9420] RIP: 0010:h5_recv+0x104/0x950 [ 107.607495][ T9420] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 93 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 107.614376][ T9420] RSP: 0018:ffffc90006a5fc00 EFLAGS: 00010293 [ 107.616530][ T9420] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887afaaa [ 107.619363][ T9420] RDX: ffff8880310d8000 RSI: ffffffff887afaef RDI: 0000000000000005 [ 107.622170][ T9420] RBP: ffffc90006a5fd88 R08: 0000000000000005 R09: 0000000000000000 [ 107.625364][ T9420] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 107.628102][ T9420] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47c80 [ 107.630934][ T9420] FS: 00007f8fb64016c0(0000) GS:ffff8880d66b6000(0000) knlGS:0000000000000000 [ 107.634167][ T9420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.636634][ T9420] CR2: 00007f8fb6400f98 CR3: 0000000013321000 CR4: 0000000000352ef0 [ 107.639122][ T9420] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 107.641579][ T9420] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 107.644520][ T9420] Call Trace: [ 107.645659][ T9420] [ 107.646643][ T9420] ? __pfx_h5_recv+0x10/0x10 [ 107.648131][ T9420] hci_uart_tty_receive+0x251/0x7e0 [ 107.649851][ T9420] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 107.651646][ T9420] tty_ioctl+0x580/0x1680 [ 107.653110][ T9420] ? __pfx_tty_ioctl+0x10/0x10 [ 107.654642][ T9420] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.656848][ T9420] ? hook_file_ioctl_common+0x145/0x410 [ 107.658684][ T9420] ? selinux_file_ioctl+0x180/0x270 [ 107.660338][ T9420] ? selinux_file_ioctl+0xb4/0x270 [ 107.662013][ T9420] ? __pfx_tty_ioctl+0x10/0x10 [ 107.663736][ T9420] __x64_sys_ioctl+0x18e/0x210 [ 107.665548][ T9420] do_syscall_64+0xcd/0x4c0 [ 107.667016][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.668983][ T9420] RIP: 0033:0x7f8fb558ebe9 [ 107.670410][ T9420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.676559][ T9420] RSP: 002b:00007f8fb6401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.679152][ T9420] RAX: ffffffffffffffda RBX: 00007f8fb57c6090 RCX: 00007f8fb558ebe9 [ 107.681609][ T9420] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 107.684208][ T9420] RBP: 00007f8fb5611e19 R08: 0000000000000000 R09: 0000000000000000 [ 107.686652][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.689138][ T9420] R13: 00007f8fb57c6128 R14: 00007f8fb57c6090 R15: 00007ffcc98356c8 [ 107.691616][ T9420] [ 107.692603][ T9420] Modules linked in: [ 107.694076][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 107.694238][ T9420] ---[ end trace 0000000000000000 ]--- [ 107.698951][ T9420] RIP: 0010:h5_recv+0x104/0x950 [ 107.700550][ T9420] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 93 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 107.706926][ T9420] RSP: 0018:ffffc90006a5fc00 EFLAGS: 00010293 [ 107.708937][ T9420] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887afaaa [ 107.711421][ T9420] RDX: ffff8880310d8000 RSI: ffffffff887afaef RDI: 0000000000000005 [ 107.714080][ T9420] RBP: ffffc90006a5fd88 R08: 0000000000000005 R09: 0000000000000000 [ 107.716551][ T9420] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 107.719001][ T9420] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb47c80 [ 107.721516][ T9420] FS: 00007f8fb64016c0(0000) GS:ffff8880d66b6000(0000) knlGS:0000000000000000 [ 107.724721][ T9420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.726825][ T9420] CR2: 00007f8fb6400f98 CR3: 0000000013321000 CR4: 0000000000352ef0 [ 107.727470][ T34] usb 6-1: device descriptor read/8, error -71 [ 107.729315][ T9420] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 107.734346][ T9420] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 107.736865][ T9420] Kernel panic - not syncing: Fatal exception [ 107.739537][ T9420] Kernel Offset: disabled [ 107.740989][ T9420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:50:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856452b5 RDI=ffffffff9b1140a0 RBP=ffffffff9b114060 RSP=ffffc90006a5f600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b114060 R15=ffffffff85645250 RIP=ffffffff856452df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8fb64016c0 ffffffff 00c00000 GS =0000 ffff8880d66b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fb6400f98 CR3=0000000013321000 CR4=00352ef0 DR0=000000000000004b DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e002fefc Opmask02=00000000f8000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9835bd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9835bd6 00007ffcc9835bdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb57974a8 00007f8fb57974a0 00007f8fb5797498 00007f8fb5797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb62fd100 00007f8fb5797460 00007f8fb5797478 00007f8fb57974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb57974b8 00007f8fb57974b0 00007f8fb57974a8 00007f8fb57974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000009709c RBX=0000000000000001 RCX=ffffffff8b943c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162a80 RDI=ffffffff81913111 RBP=ffffed1003c54488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801e2a2440 R14=ffffffff90ab6190 R15=0000000000000000 RIP=ffffffff8b94278f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561283746ec8 CR3=0000000032c2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591ed207c 0000555591ed0060 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591ebc490 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591ec6af8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555591ec27e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000806 060127f400020007 1e08000380030004 000008000c800401 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0126fc0002000701 0000000806001000 0100000008060602 069a03800402d0c6 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f400020007108080 8082080005800304 10000880a2d79008 0001000002080606 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010e800403c08010 0016800415800400 10000a0142d2ecd3 07223ff4b9399f58 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7661656c7265746e 693d6c6f706d3008 0e8003007366706d 7401ffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff30816800300 70756f7267632f2e 01ffffffffffffff ffed081580030580 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0402d0a408000100 00020806060127f4 0002000710808080 8208000580030410 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc032004002db803 0108002db0030404 002dac031004002d a8030008002da003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000007850c RBX=0000000000000002 RCX=ffffffff8b943c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162a80 RDI=ffffffff81913111 RBP=ffffed1003c54910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801e2a4880 R14=ffffffff90ab6190 R15=0000000000000000 RIP=ffffffff8b94278f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fb63e0d58 CR3=0000000013321000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9835bd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc9835bd6 00007ffcc9835bdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb5612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb57974a8 00007f8fb57974a0 00007f8fb5797498 00007f8fb5797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb62fd100 00007f8fb5797460 00007f8fb5797478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb57974b8 00007f8fb57974b0 00007f8fb57974a8 00007f8fb57974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=1ffff9200074ae9e RCX=ffffffff82483938 RDX=0000000000000000 RSI=00000000000001ae RDI=ffffffff8bc05e20 RBP=0000000000000000 RSP=ffffc90003a574d8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff8bc05e20 R13=00000000000001ae R14=0000000000000001 R15=ffffc90003a57820 RIP=ffffffff8b973120 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe3a5bbc880 ffffffff 00c00000 GS =0000 ffff8880d69b6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fb570d180 CR3=0000000032ced000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71b6831714a9427c fd522f5b0bf8d1ad ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26f298b5013327f6 4e70a6ef7e6c65b4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0985041db7d31f8d 15c09edebed3a91b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b65491ccc6abbe94 d1d1c4ab9b464d95 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e458f2e00424fb7 87960000c2ba0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 da5c64d700425082 4124398400000042 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00424f5057ee0000 138e95be95b3901d ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 50ce95748486c2ba 3984848646d10000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a2645f6c3bcd02b 34f9887b7c837e40 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e641916ef4798e18 ee494078df022442 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320786568 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000