last executing test programs: 2m55.314434583s ago: executing program 32 (id=1640): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000200)=0x1, 0x4) recvmmsg$unix(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ef2ae545190000000c009900c8ff0e00000033b7a3e07b535a030000cc8ea0a56d37d05c52f4ddfa70a28bee1c85852468374710287e646d3f999537e88c911d4eb3cf5525d0ea5a757081bb7484c116d7fbbd0654c333a63f43c2e4610900000000000000596353da7a7075dabe9b0276521ce28272407d5e7a22c1fcdbc602322b650255cc290370a8f2f841e831b73344350000000000000000"], 0x28}}, 0x4040800) 2m24.311504433s ago: executing program 1 (id=2331): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[], 0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) 2m23.77090547s ago: executing program 1 (id=2340): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0xb0, 0x0, 0x0, [{{0x5, 0x1, 0xe, 0x10001, 0x80, 0x0, {0x6, 0x9, 0xfffffffffffffffc, 0x6, 0x86, 0x573, 0x7, 0x1f000000, 0x2a11, 0x4000, 0x5, 0x0, r4, 0xc, 0x108}}, {0x3, 0x16800, 0x8, 0xcd9, 'rootmode'}}]}, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r1, r4) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='iso9660\x00', 0x405, 0x0) 2m23.770563843s ago: executing program 1 (id=2342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="680100001a0013070000000000004000e00000020040d0a30000000000000000000000200100000000000000009ffd4418000000000008000000020200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d232000000ac1e0001000000000000000000000000020000000000000000000000000000000000000000000000020000000000000000000000000000000000000000c0010000000000000000000000000000000000df1100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000060"], 0x168}, 0x1, 0x1c00000000000000}, 0x0) 2m23.679004933s ago: executing program 1 (id=2343): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) getpid() r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000003100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x800, 0x14, 0x16}, @ipv4=@tcp={{0x7, 0x4, 0x3, 0x3, 0xfc0, 0x65, 0x0, 0xa2, 0x6, 0x0, @local, @remote, {[@generic={0x94, 0x5, "a61698"}]}}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x5, 0x0, 0x6}, {"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"}}}}, 0xfce) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) write(r3, &(0x7f0000000480)="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", 0xfe) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$key(0xf, 0x3, 0x2) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) 2m23.569325867s ago: executing program 1 (id=2345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="68010000100013070000000000004000e00000020040d0a30000000000000000000000200100000000000000009ffd4418000000000008000000020200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d232000000ac1e0001000000000000000000000000020000000000000000000000000000000000001c00000000020000000000000000000000000000000000000000c0010000000000000000000000000000000000df1100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000060"], 0x168}}, 0x0) 2m23.370327336s ago: executing program 1 (id=2350): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@private, 0x0, 0x5d, 0xfffd, 0x2, 0xa}, {0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x2f, 0x2}, 0x0, 0x6e6bb0}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0x0, @in6=@empty, 0x10000, 0x0, 0x0, 0x0, 0x1000000}}, 0xe4) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace0000000000a001002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 2m23.277586265s ago: executing program 33 (id=2350): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@private, 0x0, 0x5d, 0xfffd, 0x2, 0xa}, {0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x2f, 0x2}, 0x0, 0x6e6bb0}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0x0, @in6=@empty, 0x10000, 0x0, 0x0, 0x0, 0x1000000}}, 0xe4) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace0000000000a001002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1m49.508460164s ago: executing program 3 (id=2993): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f640094000500", 0x2c}], 0x1) 1m49.421007252s ago: executing program 3 (id=2994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0x1}, {0x0, 0xfff1}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x48041}, 0x44000) socket$can_bcm(0x1d, 0x2, 0x2) 1m49.261301707s ago: executing program 3 (id=2997): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0xfffffffffffffef8, 0xa2ce4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x1, 0x6, 0x2, 0x7fffffff, 0x85f, 0x7, 0x7, 0x500, 0x3, 0x2000, 0x7, 0x2}) 1m48.391282252s ago: executing program 3 (id=3014): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x9, 0x2, 0x7, @lba=0x7, @lba=0xdf0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000001980)=""/4098, 0x1002}, {&(0x7f0000005240)=""/176, 0xb0}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000800)=""/64, 0x40}], 0x5}, 0x3}], 0x1, 0x6120, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000001240)=[{r5}, {r5}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000080), 0x10) umount2(&(0x7f00000000c0)='./file0\x00', 0x7) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000001200)={0x1d, r8}, 0x18) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @empty, 0x8000}, 0x1c) listen(r9, 0x7d4165c9) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x2}, 0x2}, 0x18) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) ioctl$FBIOBLANK(r6, 0x4611, 0x2) 1m48.276403806s ago: executing program 3 (id=3016): mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='gfs2\x00', 0x204000, 0x0) (async) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x8) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) (async) close(r1) (async, rerun: 32) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) (rerun: 32) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x3}, 0x4) ftruncate(r2, 0x2007ffb) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x105c42, 0x5) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (rerun: 32) sendfile(r7, r2, 0x0, 0x7ffff000) (async) close(r0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) close(r0) (async) write(r1, &(0x7f0000000040)='4', 0x1) close(r1) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000180)={0x4}, 0x0) 1m48.061192121s ago: executing program 3 (id=3018): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 1m47.997399992s ago: executing program 34 (id=3018): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 1m33.498095349s ago: executing program 4 (id=3278): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000005c0)="d8954cbfd00b33fbf2a6e00ff30cd0808a3e326ff2f8fed080715e3467ce3232a66949af022b90962998359bfd9667372801b05565a1ac7ee67cccf5adacb6d9c67097753a044f634c3cbdff2460c53ad8dbe98af12233dddc1a4fec317902902d7a4ed3ca04145ec9b0b00d64808ad0d6eb2b83446f0e5760498c52628fd2d6da197d31b23a5e62cedc91c5d80010e61129b39766963e88291701c9c8ea88267bf205614d68fb2e62a10fb257b979ce954e0dbe54c3e3721075d7342085f0f46538bc0353d627af09459c0de079d3d2fcda1b11f86d09ea5c94a8a612ddef87136bdcc4ecd06df579f39e964dcf3692f29a3794f2be3be907d83f025c009a92") syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000080)=ANY=[], 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0xc865, 0x4) syz_usb_connect$uac1(0x5, 0xc6, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000ff6b1d01014000010203010902b400030106300409040000000101000600000002007f02010208240404081e827a0924060505010500080924050105066e72ad0904010000010200000904010101010200000a24020206000900a8640e2402010103050deb48b55d360409050109080008801007250101010c00090402000001020000090402010101020000082402010b0209f7122402020000050003ecfc8a8165a2fbb0700924020104020309bc090582090800150002072501030c5800"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4a, 0x5, 0xd, 0x8, 0xe}, 0xea, &(0x7f00000001c0)={0x5, 0xf, 0xea, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb4, 0x10, 0x3, "ac2731514e89cc5cacc210bb3ab7c85ef11011d5835b65dcc1f1bfdba402e954593831f70995d9dc1c17fed35a8abe2e7d6bdafb326aaa2b209f6a7c3c51e6642f07c4446fbe50157fcdfa7f9f4564f2a0001930c388224e402dddd5d689e6bc1a5303133c8baeb9778db990333c2c7f9aa3611b50f094ceeb6847f2a38dcd4cc454cb037b6a7e25a00a2de70eec85a5117edbbc49a5a0c0f1b159c9777f32e1cf0b64f72129c75aaa84d96a580cf70ead"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "593658999bcfe84eea62162f3a46b5b4"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1a4a086fe63ae61082a9697e7d43c448"}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41e}}, {0x52, &(0x7f0000000340)=@string={0x52, 0x3, "37f84c706f5af320e74adc3cf8ed6f036df2d8b54df628f664850584c9d970d0035a9d438f8375dcb2d197a4762879a8b9326ad734a677f8cee1529e59c995b47b82e14e45e1aeb81740c183da4da85a"}}, {0x5c, &(0x7f00000003c0)=@string={0x5c, 0x3, "8bfc406da5420d1705cb9f47435e8d247f6de1a97b22b16d7e8f6f5d9313b82c05bfd70b3309ca557c0dfb7934c0fdb0a83dc4287535f7d966d65f1d920576bcadea1c415770235e73e290e97cb5828b4a3136f83582ccd2de14"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x457}}, {0xbf, &(0x7f0000000480)=@string={0xbf, 0x3, "f1996f2b2a0cf80abca9d11237cca21a9d080fd5a509ef8142ff7fa60f9055fa202efd971108da43a5e2f627d8249f3131a737e52f16fa79297af78e257e7a80ed6a6ea90f7f6ef95848e1516bbf2ea53bc4743039662f553e303da5ed592fb2df66d458eb343d50c76a0140e82d845932ca9e2ec52667d3d744413a0891f7936fd748d90ccfb986f7b186b576a1902626320cd29a048eaba29d79e90211b76bad246dec1a20932777f5a77690f3ee19cd735f668e98fcf4056f495e36"}}]}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000005c0)="d8954cbfd00b33fbf2a6e00ff30cd0808a3e326ff2f8fed080715e3467ce3232a66949af022b90962998359bfd9667372801b05565a1ac7ee67cccf5adacb6d9c67097753a044f634c3cbdff2460c53ad8dbe98af12233dddc1a4fec317902902d7a4ed3ca04145ec9b0b00d64808ad0d6eb2b83446f0e5760498c52628fd2d6da197d31b23a5e62cedc91c5d80010e61129b39766963e88291701c9c8ea88267bf205614d68fb2e62a10fb257b979ce954e0dbe54c3e3721075d7342085f0f46538bc0353d627af09459c0de079d3d2fcda1b11f86d09ea5c94a8a612ddef87136bdcc4ecd06df579f39e964dcf3692f29a3794f2be3be907d83f025c009a92") (async) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000080)=ANY=[], 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0xc865, 0x4) (async) syz_usb_connect$uac1(0x5, 0xc6, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000ff6b1d01014000010203010902b400030106300409040000000101000600000002007f02010208240404081e827a0924060505010500080924050105066e72ad0904010000010200000904010101010200000a24020206000900a8640e2402010103050deb48b55d360409050109080008801007250101010c00090402000001020000090402010101020000082402010b0209f7122402020000050003ecfc8a8165a2fbb0700924020104020309bc090582090800150002072501030c5800"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4a, 0x5, 0xd, 0x8, 0xe}, 0xea, &(0x7f00000001c0)={0x5, 0xf, 0xea, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xb4, 0x10, 0x3, "ac2731514e89cc5cacc210bb3ab7c85ef11011d5835b65dcc1f1bfdba402e954593831f70995d9dc1c17fed35a8abe2e7d6bdafb326aaa2b209f6a7c3c51e6642f07c4446fbe50157fcdfa7f9f4564f2a0001930c388224e402dddd5d689e6bc1a5303133c8baeb9778db990333c2c7f9aa3611b50f094ceeb6847f2a38dcd4cc454cb037b6a7e25a00a2de70eec85a5117edbbc49a5a0c0f1b159c9777f32e1cf0b64f72129c75aaa84d96a580cf70ead"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "593658999bcfe84eea62162f3a46b5b4"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1a4a086fe63ae61082a9697e7d43c448"}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41e}}, {0x52, &(0x7f0000000340)=@string={0x52, 0x3, "37f84c706f5af320e74adc3cf8ed6f036df2d8b54df628f664850584c9d970d0035a9d438f8375dcb2d197a4762879a8b9326ad734a677f8cee1529e59c995b47b82e14e45e1aeb81740c183da4da85a"}}, {0x5c, &(0x7f00000003c0)=@string={0x5c, 0x3, "8bfc406da5420d1705cb9f47435e8d247f6de1a97b22b16d7e8f6f5d9313b82c05bfd70b3309ca557c0dfb7934c0fdb0a83dc4287535f7d966d65f1d920576bcadea1c415770235e73e290e97cb5828b4a3136f83582ccd2de14"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x457}}, {0xbf, &(0x7f0000000480)=@string={0xbf, 0x3, "f1996f2b2a0cf80abca9d11237cca21a9d080fd5a509ef8142ff7fa60f9055fa202efd971108da43a5e2f627d8249f3131a737e52f16fa79297af78e257e7a80ed6a6ea90f7f6ef95848e1516bbf2ea53bc4743039662f553e303da5ed592fb2df66d458eb343d50c76a0140e82d845932ca9e2ec52667d3d744413a0891f7936fd748d90ccfb986f7b186b576a1902626320cd29a048eaba29d79e90211b76bad246dec1a20932777f5a77690f3ee19cd735f668e98fcf4056f495e36"}}]}) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) (async) 1m30.46118043s ago: executing program 4 (id=3336): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c562d0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m30.330876748s ago: executing program 4 (id=3337): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async, rerun: 32) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000580)={0x2d04, 0xb, 0x1, 0x1000, 0xd, "653729add7b47254"}) (rerun: 32) 1m30.33065776s ago: executing program 4 (id=3338): r0 = syz_open_dev$vbi(&(0x7f0000000480), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000400)=0x1) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a01060000ff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd66aaf2b7bd24fb99af4e6a4cdb12020e666137", 0x58}], 0x1) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000100100000d"], 0x18}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x4}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x20) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x5, 0x1e, 0xe1, &(0x7f0000000000)="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"}) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) 1m30.060457247s ago: executing program 5 (id=3341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="1e", 0x1}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f80)="a1", 0x1}], 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', r5, 0x2f, 0x2, 0x5, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10, 0x8, 0x1753, 0xd14}}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffffb000067"], 0x1eb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) 1m29.908699501s ago: executing program 5 (id=3342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280080000feffffff00080009"], 0x44}}, 0x0) 1m29.908386545s ago: executing program 5 (id=3343): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000002500), 0x8, 0x511302) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x8, 0x7, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x4, 0x202, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r5}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff}, {0xee00}}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="4d068bf663bac1e0cb6755d966a70459c06c24728e614d226f08f5e81dd501e7061cda12aa5f47bd62000000ad6accb4a30a2dab502645f09402fc425470ec035b805d554d07bdfdc5bb21a7a8292490b73d106b594afe92c23e1119193505e8567c3a45c03902baa7e738ea14c154f581cae7ed8430a2c9b2359ec1ac705b67fd293ec3bc72fefd9a4b80"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m29.848736033s ago: executing program 5 (id=3344): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='\x17\xcap '}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x40, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000000)={0x1, r4, 0x1, 0x9, 0xfffffff8, 0x3ff}) r5 = fanotify_init(0x200, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getsockopt$ax25_int(r6, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r2, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2) 1m29.79101159s ago: executing program 5 (id=3345): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a0677bc45ff810540010000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1m29.541351658s ago: executing program 5 (id=3346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x1, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r1) 1m29.532254492s ago: executing program 35 (id=3346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x1, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r1) 1m29.489310869s ago: executing program 4 (id=3348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1a9) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ufs\x00', 0x0, &(0x7f00000000c0)='\x80') socket$unix(0x1, 0x5, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, r4}}, 0x48) r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) syz_pidfd_open(r5, 0x0) capset(&(0x7f0000000100)={0x0, r5}, &(0x7f0000000140)={0x76d, 0x4, 0x9, 0x7, 0x1, 0x200}) 1m29.290659954s ago: executing program 4 (id=3349): r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xc65f, 0x10100, 0x1, 0x1c5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) listen(r3, 0xffff0413) io_uring_enter(r0, 0x2d7e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendto$inet6(r7, &(0x7f0000000240)="0261b2f041cfa98ac0709bccab2cbfac6d72c9121f8570d2ef30c19dd408bf3ec16ec961c85a4a7f8e1f5157f4c7669601d04a096ffbebaa6130205b1b35cdc2ce6075d6ddfc994144f281c73d5294ec5a02fd32c00fbe7621c44dd02bdacb8b854643f992bd1f71b8f222cc398e0e107a78b0498335ee5524b63c1c7b5b6a9118", 0x81, 0x20010040, 0x0, 0x0) 1m28.160256588s ago: executing program 7 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800000000030000080009"], 0x44}}, 0x0) 1m28.156136246s ago: executing program 7 (id=3373): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x1, "41a043905bc558165f9f2b8db0c42f9d63c3b03c9942e178458d590355149816", 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m28.100255055s ago: executing program 7 (id=3375): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001"], 0x104}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x981001, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000680000/0x2000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f000056d000/0x3000)=nil, 0x3000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 1m28.100054094s ago: executing program 7 (id=3377): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x55) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/183, 0xb7, 0x0, 0x0}, &(0x7f0000000280)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000002c0)) (async) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000002c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) close(r5) sendmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="3bf764bac88298e99ad46d79a52f48786c69c5689656c8a6e9af002e752498602595d2cee9ea5847ec4260acd66b9efd9880282d97f1d23b", 0x38}], 0x1}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="3bf764bac88298e99ad46d79a52f48786c69c5689656c8a6e9af002e752498602595d2cee9ea5847ec4260acd66b9efd9880282d97f1d23b", 0x38}], 0x1}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1m26.377854911s ago: executing program 7 (id=3408): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) (async, rerun: 64) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (async, rerun: 64) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f00000002c0)={0x0, 0x7, 0x40, 0x2, 0xa0, 0x7}) 1m26.373434739s ago: executing program 7 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000c3ff0000080009"], 0x44}}, 0x0) 1m13.980060602s ago: executing program 36 (id=3349): r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xc65f, 0x10100, 0x1, 0x1c5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) listen(r3, 0xffff0413) io_uring_enter(r0, 0x2d7e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendto$inet6(r7, &(0x7f0000000240)="0261b2f041cfa98ac0709bccab2cbfac6d72c9121f8570d2ef30c19dd408bf3ec16ec961c85a4a7f8e1f5157f4c7669601d04a096ffbebaa6130205b1b35cdc2ce6075d6ddfc994144f281c73d5294ec5a02fd32c00fbe7621c44dd02bdacb8b854643f992bd1f71b8f222cc398e0e107a78b0498335ee5524b63c1c7b5b6a9118", 0x81, 0x20010040, 0x0, 0x0) 1m10.584828721s ago: executing program 37 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000c3ff0000080009"], 0x44}}, 0x0) 28.442705912s ago: executing program 0 (id=4325): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') 28.432005281s ago: executing program 8 (id=4326): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b0e69f243dea0d601c09000000e3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c", 0x80}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402", 0x66}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b", 0x64}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b80)="b1f56ee29c433328d3b2a83b997e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dee36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a60500000000000000c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000003f1f435a1fb85aecc77b6d2ff58ee3d22", 0xe3}], 0x1}}], 0x2, 0xc0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={0x0, &(0x7f00000002c0)=""/4096, 0x0, 0x1000, 0x0, 0x19b, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a31000000000900010073717a30000000001400038008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a0102"], 0x2c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0) 28.430133321s ago: executing program 0 (id=4327): prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4f78}}, 0x0) 28.370790842s ago: executing program 0 (id=4328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.270243466s ago: executing program 0 (id=4329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000008000000000000000a20000000000a0500f400000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c000280080005401708ff110800014000000000080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_SHUTDOWN={0x22, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x35314142, 0x9, 0x81, 0x6, 0x5, 0xf9a, 0x0, 0x8, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getitimer(0xe, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(0x0, 0x0) rename(&(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) kcmp(r8, r9, 0x6, r6, r6) 28.150611267s ago: executing program 0 (id=4330): r0 = syz_open_dev$video(&(0x7f0000000080), 0x101, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0x0, 0xff95, 0x95, 0xa}}) (fail_nth: 2) 27.888031584s ago: executing program 0 (id=4342): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x100) syz_emit_ethernet(0x62, &(0x7f0000001480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x2c, 0x6, 0xff, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x4, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "4c32cbb02b869f7a4ac6fb13760bc02757b10ad7"}]}}}}}}}}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000600000011000000", @ANYRES32, @ANYBLOB="00000000000000000000000000da73e46d0efa27877b8baf00000000003269", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000503000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000380)=0xa, 0x10000000006, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) 27.806643795s ago: executing program 38 (id=4342): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x100) syz_emit_ethernet(0x62, &(0x7f0000001480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x2c, 0x6, 0xff, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x4, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "4c32cbb02b869f7a4ac6fb13760bc02757b10ad7"}]}}}}}}}}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000040000000600000011000000", @ANYRES32, @ANYBLOB="00000000000000000000000000da73e46d0efa27877b8baf00000000003269", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000503000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000380)=0xa, 0x10000000006, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) 27.570244839s ago: executing program 8 (id=4341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8f7e2347dffffffb703000008000000b7040000000000008500000033000000950041cc2ea20000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)) 27.507804711s ago: executing program 8 (id=4343): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x35314142, 0x9, 0x81, 0x6, 0x5, 0xf9a, 0x0, 0x8, 0xfdfd, 0x2}}) 27.507499658s ago: executing program 8 (id=4344): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="25000000faffffffffff0500000008000380", @ANYRES32=r4], 0x24}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, @local, @empty, 0x2, 0x9, 0x1, 0x600, 0x7, 0x1030000}) r6 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb86dd45110024006800000221904e2304419078c65e14b94c3b8e27"], 0x0) recvmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40012062) 27.37071444s ago: executing program 8 (id=4345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) mkdir(&(0x7f00000003c0)='./file1\x00', 0x1a9) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ufs\x00', 0x0, &(0x7f00000000c0)='\x80') socket$unix(0x1, 0x5, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, r4}}, 0x48) r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) syz_pidfd_open(r5, 0x0) capset(&(0x7f0000000100)={0x0, r5}, &(0x7f0000000140)={0x76d, 0x4, 0x9, 0x7, 0x1, 0x200}) 27.213500785s ago: executing program 8 (id=4346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.110371883s ago: executing program 39 (id=4346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x8], 0x2000, 0x98302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.220094591s ago: executing program 9 (id=4779): r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) msgget$private(0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000040)="efff7b9ac92a359eaba6f175288880a16a50e9c54a8dc5428397b9c04a28cf0c38073e6e7ad5b68b64d91366a841d2df571b6eb8fc62c3ee82733dab266ca220e2a09ed52e075db0", 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.219373646s ago: executing program 9 (id=4782): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.159305814s ago: executing program 9 (id=4784): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x3, 'lblc\x00', 0x15, 0xfffffffc, 0x49}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4800003e, r0, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) userfaultfd(0x801) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103942, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x3d) (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') (async) socket$inet_dccp(0x2, 0x6, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x208, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) fanotify_mark(r2, 0x61, 0x40001002, r3, 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) (rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x31) 969.938673ms ago: executing program 6 (id=4788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01030000000000000000010000000c00024000000000000000020900010073797a30"], 0x180}}, 0x0) 969.713607ms ago: executing program 6 (id=4789): sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES64=0x0, @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x50}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) recvmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000004c0)=""/86, 0xa9}], 0x7, &(0x7f00000005c0)=""/159, 0x50}, 0x0) 920.05084ms ago: executing program 2 (id=4791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 869.585136ms ago: executing program 2 (id=4792): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 748.296359ms ago: executing program 2 (id=4793): io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x0, 0x400}) (async) r0 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x0, 0x400}) socket$isdn_base(0x22, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}}) 748.021374ms ago: executing program 2 (id=4794): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) shutdown(r4, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xffffffff], 'syz_tun\x00', 'macvtap0\x00', {0x101}, {0xff}, 0x0, 0x3, 0x4, 0x20}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0x0, 0xff000000, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e22, 0x1ff, 0x9, 0x1, 0xc7ec, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000000000000000400000000007911c800000000009509000000000000584f8973cfa9000c0e9b6acb7a7b19151e4fddb81ed89972ce5ee91ceb93bd69eef116765345bc73fc96fcdd40bd0c0982cbf33a50048b5ac59478085a29949b17afb7a4268ddb9a7ebec5b08611ba788022762c20f0ed3d276a213671df7d761c2edf1e9e80bf02095011cceff5dba5"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="15000000100000000800"/20, @ANYRES32, @ANYBLOB="00e9ffffff0000000000000000000000000000004231e7778bc44ca432619936aee911bee889741398f24dc53cbe174f4d380354653d0c4a034ba29302cbb969619c2cc93eb0d568140649749c0e36b0999f9fcb89bf900eed3d080128caca0534490e68b4278b10f43e7a06ac7205d59817745f043a0a4c534d00a3642d4987b29db7696ff5449d1883a9be1fe4bc9478f44a9b297e183ab2a8d7e943e4265911bf2c9a879f5db69953dd26df699da77b095e0af3e4ff6ad636230bfed93fe6e0d74106c057bd5f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 747.900892ms ago: executing program 2 (id=4795): syz_clone(0x8000000, &(0x7f0000000000)="ef79d2140ad32e0bf5b2faa69860bb4022e6cab08cd634591a0851e2c1ff520d795bc3785b1c93c951161850ac777b5741b26b7840bc1e316330bad9660515f439f6b8a18c387848d6f515565881352982ac7c0138eeaf12b10dc335fe9d06c7bf1afa5355f9df001f6afa5d3ea9850800b85476ff38ba7fc48feef7081c6bf16c", 0x81, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="481e52b983f903be2e4c12d76202f7d8739541366e3b4950b020ebadd6402d773bf31e323f66f390b9c523779acc5171b085275e4c9c0c55dbcd0dc89f0b8bf10d0792ee5c6c5cc260dc6df3418e89766d47a39c57437da3499f185b5fc08516eb8a192a04567636a332e2ad1bea7bfa1a81364d6f3580ffab0c2a4b2311be9b0198b0f81be4ea6867") 747.764829ms ago: executing program 2 (id=4796): setuid(0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000072004e8100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 313.265231ms ago: executing program 9 (id=4797): r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000040)="efff7b9ac92a359eaba6f175288880a16a50e9c54a8dc5428397b9c04a28cf0c38073e6e7ad5b68b64d91366a841d2df571b6eb8fc62c3ee82733dab266ca220e2a09ed52e075db0", 0x0, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 229.824013ms ago: executing program 9 (id=4798): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x7, 0xb, 0x3, 0xda00, 0x0, "a03c66fe334026dc214430dc15c7a89cab0c8a", 0x5, 0xffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xcf, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) write$P9_RGETLOCK(r0, &(0x7f0000000400)={0x22, 0x37, 0x1, {0x1, 0x7, 0x8282, r2, 0x4, '-.{{'}}, 0x22) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='tcp_probe\x00', r0, 0x0, 0x1}, 0x18) tee(r3, r0, 0x1, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x4, &(0x7f00000004c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000500)='GPL\x00', 0x0, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x30, '\x00', r1, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001540)=[r0, r0, r0], &(0x7f0000001580)=[{0x0, 0x1, 0xa, 0xd7056b3173ce3051}, {0x3, 0x1, 0x1, 0x1}, {0x3, 0x5, 0xf, 0x11}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001680)={r0, r0, 0x0, r4}, 0x10) tee(r3, r0, 0x7616, 0x8) sendto$packet(r0, &(0x7f00000016c0)="ffbe388732dd9e8af1ec33a3ed54aee546422f6e66075d7075a31eb44867338e01c824294eaa54e6b8e277fa93cd21379c597d2e726ca570b1c551413c5a8d09197451c64634aaf0690602301c478f827b1baf34f64918191863bc1d6c168868542e63e65236f3b46b496086dc349244ae9a", 0x72, 0x0, &(0x7f0000001740)={0x11, 0x16, r1, 0x1, 0x26, 0x6, @broadcast}, 0x14) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000001780)=0x1) tee(r3, 0xffffffffffffffff, 0x631, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000017c0), &(0x7f0000001800)=0x4) r5 = syz_open_dev$mouse(&(0x7f0000001840), 0x8, 0x400200) close_range(r5, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) splice(r5, &(0x7f0000001880)=0x828, r3, &(0x7f00000018c0)=0x70, 0x9, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xa0000204}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000005) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x14, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6c3d}, @call={0x85, 0x0, 0x0, 0xd4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='GPL\x00', 0x400, 0xff, &(0x7f0000001b00)=""/255, 0x41100, 0x6e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c00)={0x3, 0x1, 0x2, 0x8dca}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001c40)=[r0], &(0x7f0000001c80)=[{0x1, 0x2, 0x8, 0xb}], 0x10, 0xc, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e80)={@fallback=r4, 0x1a, 0x0, 0x4, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001dc0)=[0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f80)={{r0, 0xffffffffffffffff}, &(0x7f0000001f00), &(0x7f0000001f40)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ec0)={@map=r9, r7, 0x2a, 0x1000, r0, @void, @value=r4, @void, @void, r8}, 0x20) pipe2$watch_queue(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200088d5}, 0x2000) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000002140)={0x2, 0xae}, 0x2) signalfd4(r6, &(0x7f0000002180)={[0x1]}, 0x8, 0x800) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r10, 0x4068aea3, &(0x7f00000021c0)={0xc5, 0x0, r11}) 229.439304ms ago: executing program 9 (id=4799): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff395954", 0x4d, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x20004080) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000040)=[{0x0, 0xfffffffe}], 0xdeadbeef, 0x8, 0x1}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x201883) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000200)={{0x2, 0x1, 0x8, 0x3, 0x3}, 0x7fffffff, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x7, 0x7fff, 0x3}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0xfffffffc, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 60.24964ms ago: executing program 6 (id=4800): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@private, 0x0, 0x5d, 0xfffd, 0x2, 0xa}, {0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x2f, 0x2}, 0x0, 0x6e6bb0}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0x0, @in6=@empty, 0x10000, 0x0, 0x0, 0x0, 0x1000000}}, 0xe4) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000300000000000000000000000104004e200023b0"], 0x0) 58.97344ms ago: executing program 6 (id=4801): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 210.016µs ago: executing program 6 (id=4802): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x18a) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) 0s ago: executing program 6 (id=4803): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) read$alg(r0, &(0x7f0000000640)=""/236, 0xec) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x2a, 0xff, &(0x7f0000000040)="5b13469a0a297de1b3024feac6405cee793c178f4dd4ce3dc1247fdcb90fe8e3487291f345525e21908c", &(0x7f0000000140)=""/255, 0x9, 0x0, 0x5f, 0xf8, &(0x7f0000000240)="ff54d0ff360aca9a510a2a18741b22845f5190b314e8f23129e0e978620f4ae0c3a1e9e155bd44e64447206a90ca8f54b5857c68e85c29c59f761f7efcf99120d5dc53b2da04d9cb02c30ae16c9808d13ceb8aca1623a7e9510ad11308a899", &(0x7f00000002c0)="16cbd8eda37100c9c07ad4586bd6449c4ba9fe9e808e6b433b1a5d2bb7eeb8bef973bf61817c6e99c1e840b01b5df43522988be49e1004ed84380a39aa14fd3d33dbf8d77ff40788f310987be44891ee797979b9a5f9d37f39b718306c5e46dc7471949977b9412ab755503ff4da7910dbf4ae16714d76eb1912268e4fc0dbfe2fc36ea13ef56f3446b942f35386c1e49d9d7a1b282d61852b600970106e52bd53494f44dd892d0dc7b14a2ca91ad7d87f90cced92674e35e2ccdbfb17587c667f047bee671fcab34fa538d77702dddc2766c318047b8dbf1b254c726622b9a7a3b7aa58ffa2a23848a7ef36258761ee0b283ad2d6dca062", 0x3, 0x0, 0xfffffffc}, 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) kernel console output (not intermixed with test programs): g socket to 127.0.0.1 [ 224.919577][ T9817] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.922760][ T9817] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.925658][ T9817] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 225.041962][ T9817] bridge_slave_1: left allmulticast mode [ 225.043630][ T9817] bridge_slave_1: left promiscuous mode [ 225.045368][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.050980][ T9817] bridge_slave_0: left allmulticast mode [ 225.052566][ T9817] bridge_slave_0: left promiscuous mode [ 225.054310][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.171870][ T9817] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 225.336752][ T9817] team0: Port device geneve0 removed [ 225.380393][T15963] ceph: Path missing in source [ 225.388473][ T5957] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 225.493266][ T9817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.499339][ T9817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.502686][ T9817] bond0 (unregistering): Released all slaves [ 225.587901][ T9817] bond1 (unregistering): Released all slaves [ 225.650244][T15974] __nla_validate_parse: 3 callbacks suppressed [ 225.650279][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3682'. [ 225.657974][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3682'. [ 225.681368][ T40] audit: type=1400 audit(225.570:11300): avc: denied { ioctl } for pid=15978 comm="syz.8.3685" path="socket:[61620]" dev="sockfs" ino=61620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.885400][T15995] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 225.887456][T15995] PKCS7: Only support pkcs7_signedData type [ 225.942151][ T40] audit: type=1400 audit(225.830:11301): avc: denied { getopt } for pid=15994 comm="syz.8.3690" laddr=172.20.20.170 lport=54526 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 226.125825][T16000] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3691'. [ 226.128657][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3691'. [ 226.154289][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 226.158510][ T40] audit: type=1400 audit(226.050:11302): avc: denied { read } for pid=15998 comm="syz.6.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.262300][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3695'. [ 226.373868][ T40] audit: type=1400 audit(226.260:11303): avc: denied { read } for pid=16010 comm="syz.9.3696" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 226.381771][ T40] audit: type=1400 audit(226.260:11304): avc: denied { open } for pid=16010 comm="syz.9.3696" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 226.402004][T16011] netlink: 504 bytes leftover after parsing attributes in process `syz.9.3696'. [ 226.406495][T16011] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3696'. [ 226.571507][T16020] program syz.9.3699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.628104][T16023] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3699'. [ 226.631843][T16020] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3699'. [ 226.637122][ T40] audit: type=1400 audit(226.530:11305): avc: denied { mount } for pid=16019 comm="syz.9.3699" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 226.643270][ T40] audit: type=1400 audit(226.530:11306): avc: denied { remount } for pid=16019 comm="syz.9.3699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 226.800161][T16036] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3705'. [ 226.925845][T16049] random: crng reseeded on system resumption [ 227.309324][ T9817] tipc: Left network mode [ 227.392668][T16078] ip6gretap0: entered allmulticast mode [ 227.394698][T16078] ip6gretap0: left allmulticast mode [ 227.594371][ T9817] hsr_slave_0: left promiscuous mode [ 227.604262][ T9817] hsr_slave_1: left promiscuous mode [ 227.611218][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.620253][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.627790][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.630717][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.662632][T16094] fuse: Bad value for 'group_id' [ 227.664698][T16094] fuse: Bad value for 'group_id' [ 227.704863][ T9817] veth1_macvtap: left promiscuous mode [ 227.706980][ T9817] veth0_macvtap: left promiscuous mode [ 227.709040][ T9817] veth1_vlan: left promiscuous mode [ 227.710983][ T9817] veth0_vlan: left promiscuous mode [ 228.184330][ T5985] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 228.344268][ T5985] usb 13-1: Using ep0 maxpacket: 8 [ 228.347498][ T5985] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 228.349685][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 228.353016][ T5985] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.356431][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.360166][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.367125][ T5985] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 228.369276][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 228.372367][ T5985] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.375795][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.379578][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.384088][ T5985] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 228.387375][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 228.390612][ T5985] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.393862][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.397011][ T5985] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.402478][ T5985] usb 13-1: string descriptor 0 read error: -22 [ 228.405579][ T5985] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 228.408256][ T5985] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.417188][ T5985] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 228.536855][ T9817] team0 (unregistering): Port device team_slave_1 removed [ 228.620964][T16100] sg_write: data in/out 440207358/4056 bytes for SCSI command 0x45-- guessing data in; [ 228.620964][T16100] program syz.8.3723 not setting count and/or reply_len properly [ 228.636328][ T1329] usb 13-1: USB disconnect, device number 2 [ 228.640503][ T9817] team0 (unregistering): Port device team_slave_0 removed [ 229.571487][ T9817] IPVS: stop unused estimator thread 0... [ 229.593580][T16134] usb usb8: usbfs: process 16134 (syz.9.3736) did not claim interface 0 before use [ 229.597374][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 229.597388][ T40] audit: type=1400 audit(229.490:11320): avc: denied { validate_trans } for pid=16133 comm="syz.9.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 229.624508][ T1460] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 229.782639][ T40] audit: type=1400 audit(229.670:11321): avc: denied { read } for pid=16153 comm="syz.9.3744" path="socket:[62709]" dev="sockfs" ino=62709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 229.805733][ T1460] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.808765][ T1460] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.811471][ T1460] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.814001][ T1460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.817740][T16125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.822074][ T1460] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.828311][ T40] audit: type=1400 audit(229.720:11322): avc: denied { mount } for pid=16155 comm="syz.9.3745" name="/" dev="configfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 229.864844][ T5985] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 229.937356][ T40] audit: type=1400 audit(229.830:11323): avc: denied { write } for pid=16157 comm="syz.9.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.999171][ T40] audit: type=1400 audit(229.890:11324): avc: denied { append } for pid=16157 comm="syz.9.3746" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 230.025714][ T5985] usb 11-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.028089][ T1460] usb 5-1: USB disconnect, device number 14 [ 230.029731][ T5985] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 230.036340][ T5985] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 230.040409][ T5985] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 230.044044][ T5985] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.050570][ T5985] usb 11-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 230.053968][ T5985] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.057145][ T5985] usb 11-1: Product: syz [ 230.058818][ T5985] usb 11-1: Manufacturer: syz [ 230.060684][ T5985] usb 11-1: SerialNumber: syz [ 230.063935][ T5985] usb 11-1: config 0 descriptor?? [ 230.069032][ T5985] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input22 [ 230.151900][ T40] audit: type=1400 audit(230.040:11325): avc: denied { bind } for pid=16169 comm="syz.9.3750" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.157927][ T40] audit: type=1400 audit(230.040:11326): avc: denied { node_bind } for pid=16169 comm="syz.9.3750" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 230.167455][T16161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.203878][T16179] bridge: RTM_NEWNEIGH with invalid ether address [ 230.248246][T16185] netlink: 'syz.9.3751': attribute type 7 has an invalid length. [ 230.251526][T16185] netlink: 'syz.9.3751': attribute type 8 has an invalid length. [ 230.257271][ T40] audit: type=1400 audit(230.150:11327): avc: denied { mounton } for pid=16181 comm="syz.8.3753" path="/50/file0/file1" dev="9p" ino=37880139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.263678][T16183] 9pnet_virtio: no channels available for device syz [ 230.267325][T16182] 9pnet_virtio: no channels available for device syz [ 230.330934][ T5985] usb 11-1: USB disconnect, device number 13 [ 230.893115][T16202] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 230.897065][T16202] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 230.900805][T16202] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 230.903895][T16202] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 231.009454][ T40] audit: type=1400 audit(230.900:11328): avc: denied { map } for pid=16209 comm="syz.0.3761" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 231.010401][T16210] netfs: Couldn't get user pages (rc=-14) [ 231.029738][ T40] audit: type=1400 audit(230.920:11329): avc: denied { execute } for pid=16209 comm="syz.0.3761" path="/409/file0/cpuset.effective_cpus" dev="9p" ino=37880137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.197945][T16224] __nla_validate_parse: 9 callbacks suppressed [ 231.197956][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3767'. [ 231.380327][T16234] bio_check_eod: 2 callbacks suppressed [ 231.380338][T16234] syz.8.3772: attempt to access beyond end of device [ 231.380338][T16234] nbd8: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 231.385690][T16234] EXT4-fs (nbd8): unable to read superblock [ 231.426518][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3778'. [ 231.454939][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3780'. [ 231.621847][T16291] netlink: 'syz.8.3788': attribute type 25 has an invalid length. [ 231.624252][T16291] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 231.914433][ T1460] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.075350][ T1460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.078439][ T1460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.081119][ T1460] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.084923][ T1460] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.087533][ T1460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.095767][ T1460] usb 5-1: config 0 descriptor?? [ 232.201732][T16318] netlink: 'syz.6.3797': attribute type 25 has an invalid length. [ 232.204326][T16318] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 232.347400][T16322] Cannot find add_set index 2 as target [ 232.476724][T16340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3804'. [ 232.480497][T16340] netlink: 'syz.6.3804': attribute type 1 has an invalid length. [ 232.517190][ T1460] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 232.525266][ T1460] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 232.580834][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3807'. [ 232.874041][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3811'. [ 233.337399][T16372] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3815'. [ 233.578494][T16383] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3818'. [ 233.583905][T16385] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3818'. [ 233.587710][T16385] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3818'. [ 233.739612][T16393] netlink: 'syz.9.3821': attribute type 1 has an invalid length. [ 234.026386][T16418] Cannot find add_set index 2 as target [ 234.200905][T16432] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 234.341104][T16455] SET target dimension over the limit! [ 234.342100][T16457] netlink: 'syz.6.3843': attribute type 2 has an invalid length. [ 234.410598][T16464] IPv6: addrconf: prefix option has invalid lifetime [ 234.445678][T16469] IPv6: addrconf: prefix option has invalid lifetime [ 234.510099][ T5985] usb 5-1: USB disconnect, device number 15 [ 234.553150][T16478] trusted_key: encrypted_key: master key parameter '' is invalid [ 234.730338][T16491] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 234.733243][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 234.733253][ T40] audit: type=1400 audit(234.620:11343): avc: denied { map } for pid=16490 comm="syz.9.3853" path="/proc/202/cpuset" dev="proc" ino=62460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 234.821864][ T40] audit: type=1400 audit(234.710:11344): avc: denied { name_connect } for pid=16505 comm="syz.6.3860" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 234.848936][ T40] audit: type=1400 audit(234.740:11345): avc: denied { bind } for pid=16511 comm="syz.9.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.854960][T16512] netlink: 'syz.9.3861': attribute type 39 has an invalid length. [ 235.032553][ T40] audit: type=1400 audit(234.920:11346): avc: denied { read } for pid=16518 comm="syz.9.3864" name="file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.069196][T16523] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 235.107271][T16523] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.112659][ T40] audit: type=1400 audit(235.000:11347): avc: denied { setopt } for pid=16524 comm="syz.0.3867" lport=44062 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 235.190126][T16523] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.300560][T16523] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.331051][T16533] blktrace: Concurrent blktraces are not allowed on loop1 [ 235.333422][T16534] blktrace: Concurrent blktraces are not allowed on loop1 [ 235.383088][T16523] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.478396][T16523] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.483810][T16523] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.489355][T16523] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.496218][T16523] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.532008][T16548] 9pnet_fd: Insufficient options for proto=fd [ 235.534501][T16548] hfsplus: Unknown parameter 'barrierF' [ 235.583086][ T40] audit: type=1400 audit(235.470:11348): avc: denied { append } for pid=16556 comm="syz.9.3879" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 235.626239][ T40] audit: type=1400 audit(235.520:11349): avc: denied { append } for pid=16562 comm="syz.0.3882" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.716454][T16581] program syz.0.3888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.742403][T16588] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 235.745454][T16590] IPVS: Unknown mcast interface: dvmrp1 [ 235.776538][T16597] program syz.6.3894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.888068][ T40] audit: type=1400 audit(235.780:11350): avc: denied { setopt } for pid=16614 comm="syz.6.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.970550][T16630] x_tables: duplicate underflow at hook 1 [ 235.970564][T16631] x_tables: duplicate underflow at hook 1 [ 236.749418][ T40] audit: type=1400 audit(236.640:11351): avc: denied { ioctl } for pid=16660 comm="syz.0.3915" path="socket:[64710]" dev="sockfs" ino=64710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.750434][T16663] netlink: 'syz.9.3916': attribute type 2 has an invalid length. [ 236.756564][ T40] audit: type=1400 audit(236.640:11352): avc: denied { read } for pid=16660 comm="syz.0.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.759080][T16663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.839294][T16673] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 236.853834][T16669] kvm: MONITOR instruction emulated as NOP! [ 236.987577][T16687] netlink: 'syz.0.3926': attribute type 3 has an invalid length. [ 236.989819][T16687] __nla_validate_parse: 37 callbacks suppressed [ 236.989827][T16687] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3926'. [ 237.370978][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3929'. [ 237.376101][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3929'. [ 237.391338][T16696] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 237.426185][T16703] loop2: detected capacity change from 0 to 7 [ 237.430269][T16703] Dev loop2: unable to read RDB block 7 [ 237.431828][T16703] loop2: AHDI p1 p2 p3 [ 237.433029][T16703] loop2: partition table partially beyond EOD, truncated [ 237.436005][T16703] loop2: p1 start 1601398130 is beyond EOD, truncated [ 237.437904][T16703] loop2: p2 start 1702059890 is beyond EOD, truncated [ 237.861677][T16746] 9pnet_fd: p9_fd_create_unix (16746): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 238.105524][T16775] netlink: 'syz.8.3956': attribute type 8 has an invalid length. [ 238.107680][T16775] netlink: 163260 bytes leftover after parsing attributes in process `syz.8.3956'. [ 238.559199][T16802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.864341][ T9] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 238.963988][T16827] block nbd0: not configured, cannot reconfigure [ 239.024331][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 239.027876][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3973'. [ 239.028486][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 239.033024][ T9] usb 11-1: can't read configurations, error -61 [ 239.069316][T16835] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 239.165005][ T9] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 239.299418][T16857] overlay: filesystem on ./bus not supported as upperdir [ 239.314236][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 239.317177][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 239.319279][ T9] usb 11-1: can't read configurations, error -61 [ 239.321170][ T9] usb usb11-port1: attempt power cycle [ 239.455175][T16866] xt_hashlimit: overflow, rate too high: 0 [ 239.554653][ T1460] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 239.654317][ T9] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 239.676271][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 239.679507][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 239.681702][ T9] usb 11-1: can't read configurations, error -61 [ 239.716099][ T1460] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 239.718545][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 239.721352][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.725071][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 239.728489][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.732956][ T1460] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 239.735809][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 239.738840][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.741849][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 239.746588][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.750209][ T1460] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 239.752486][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 239.756114][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.759906][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 239.763152][ T1460] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.768051][ T1460] usb 5-1: string descriptor 0 read error: -22 [ 239.769869][ T1460] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 239.772374][ T1460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.784270][ T1460] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 239.804253][ T9] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 239.825204][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 239.829020][ T9] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 239.831152][ T9] usb 11-1: can't read configurations, error -61 [ 239.833196][ T9] usb usb11-port1: unable to enumerate USB device [ 239.972148][T16899] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4002'. [ 239.979294][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.981754][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.985848][ T1460] usb 5-1: USB disconnect, device number 16 [ 240.010457][T16903] bridge0: port 3(syz_tun) entered blocking state [ 240.013075][T16903] bridge0: port 3(syz_tun) entered disabled state [ 240.017097][T16903] syz_tun: entered allmulticast mode [ 240.019161][T16903] syz_tun: entered promiscuous mode [ 240.020861][T16903] bridge0: port 3(syz_tun) entered blocking state [ 240.022692][T16903] bridge0: port 3(syz_tun) entered forwarding state [ 240.066703][ T40] kauditd_printk_skb: 9078 callbacks suppressed [ 240.066713][ T40] audit: type=1400 audit(239.960:20431): avc: denied { remount } for pid=16906 comm="syz.8.4005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 240.092840][T16909] syz.9.4006: attempt to access beyond end of device [ 240.092840][T16909] loop9: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 240.097094][T16909] gfs2: error -5 reading superblock [ 240.110307][ T40] audit: type=1400 audit(240.000:20432): avc: denied { append } for pid=16910 comm="syz.8.4007" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.126633][T16913] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4008'. [ 240.129412][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4008'. [ 240.166456][ T40] audit: type=1400 audit(240.060:20433): avc: denied { ioctl } for pid=16910 comm="syz.8.4007" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x4806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 240.379639][T16942] xt_hashlimit: max too large, truncated to 1048576 [ 240.382705][T16943] xt_hashlimit: max too large, truncated to 1048576 [ 240.421630][T16947] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 240.421996][T16946] i2c i2c-1: Invalid block write size 34 [ 240.427919][T16946] IPVS: stopping master sync thread 16947 ... [ 240.431889][T16946] netlink: 'syz.8.4018': attribute type 3 has an invalid length. [ 240.434048][T16946] netlink: 120 bytes leftover after parsing attributes in process `syz.8.4018'. [ 240.552796][ T5957] Bluetooth: hci4: Malformed Event: 0x13 [ 240.603755][T16966] syz_tun: left allmulticast mode [ 240.606398][T16966] syz_tun: left promiscuous mode [ 240.607877][T16966] bridge0: port 3(syz_tun) entered disabled state [ 240.612858][T16966] bridge_slave_0: left allmulticast mode [ 240.614815][T16966] bridge_slave_0: left promiscuous mode [ 240.616417][T16966] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.620064][T16966] bridge_slave_1: left allmulticast mode [ 240.621638][T16966] bridge_slave_1: left promiscuous mode [ 240.623293][T16966] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.628733][T16966] bond0: (slave bond_slave_0): Releasing backup interface [ 240.637194][T16966] bond0: (slave bond_slave_1): Releasing backup interface [ 240.657152][T16966] team0: Port device team_slave_0 removed [ 240.661046][T16966] team0: Port device team_slave_1 removed [ 240.663044][T16966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.665442][T16966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.668204][T16966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.670396][T16966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.695841][T16966] team0: Mode changed to "activebackup" [ 240.793439][T16976] af_packet: tpacket_rcv: packet too big, clamped from 17 to 4294967272. macoff=96 [ 240.801460][ T40] audit: type=1400 audit(240.690:20434): avc: denied { read } for pid=16975 comm="syz.0.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.831976][T16978] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 241.244822][ T40] audit: type=1400 audit(241.140:20435): avc: denied { bind } for pid=16989 comm="syz.9.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.250204][ T40] audit: type=1400 audit(241.140:20436): avc: denied { ioctl } for pid=16989 comm="syz.9.4033" path="socket:[65145]" dev="sockfs" ino=65145 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.552722][T17009] sctp: [Deprecated]: syz.9.4038 (pid 17009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.552722][T17009] Use struct sctp_sack_info instead [ 241.672749][ T40] audit: type=1800 audit(241.560:20437): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4039" name="file1" dev="tmpfs" ino=1385 res=0 errno=0 [ 241.708266][T17018] FAULT_INJECTION: forcing a failure. [ 241.708266][T17018] name failslab, interval 1, probability 0, space 0, times 0 [ 241.712389][T17018] CPU: 2 UID: 0 PID: 17018 Comm: syz.6.4041 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 241.712403][T17018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.712409][T17018] Call Trace: [ 241.712413][T17018] [ 241.712417][T17018] dump_stack_lvl+0x16c/0x1f0 [ 241.712447][T17018] should_fail_ex+0x50a/0x650 [ 241.712469][T17018] ? fs_reclaim_acquire+0xae/0x150 [ 241.712485][T17018] ? tomoyo_realpath_from_path+0xb9/0x720 [ 241.712500][T17018] should_failslab+0xc2/0x120 [ 241.712512][T17018] __kmalloc_noprof+0xcb/0x510 [ 241.712523][T17018] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 241.712540][T17018] tomoyo_realpath_from_path+0xb9/0x720 [ 241.712555][T17018] ? tomoyo_path_number_perm+0x235/0x590 [ 241.712568][T17018] ? tomoyo_path_number_perm+0x235/0x590 [ 241.712582][T17018] tomoyo_path_number_perm+0x248/0x590 [ 241.712594][T17018] ? tomoyo_path_number_perm+0x235/0x590 [ 241.712608][T17018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.712632][T17018] ? __pfx_lock_release+0x10/0x10 [ 241.712646][T17018] ? trace_lock_acquire+0x14e/0x1f0 [ 241.712659][T17018] ? lock_acquire+0x2f/0xb0 [ 241.712671][T17018] ? __fget_files+0x40/0x3a0 [ 241.712683][T17018] ? __fget_files+0x206/0x3a0 [ 241.712694][T17018] security_file_ioctl+0x9b/0x240 [ 241.712710][T17018] __x64_sys_ioctl+0xb7/0x200 [ 241.712725][T17018] do_syscall_64+0xcd/0x250 [ 241.712740][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.712754][T17018] RIP: 0033:0x7f83ca98d169 [ 241.712762][T17018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.712772][T17018] RSP: 002b:00007f83cb81b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.712781][T17018] RAX: ffffffffffffffda RBX: 00007f83caba5fa0 RCX: 00007f83ca98d169 [ 241.712787][T17018] RDX: 00004000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 241.712793][T17018] RBP: 00007f83cb81b090 R08: 0000000000000000 R09: 0000000000000000 [ 241.712799][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.712804][T17018] R13: 0000000000000000 R14: 00007f83caba5fa0 R15: 00007ffc5cefc6b8 [ 241.712816][T17018] [ 241.712820][T17018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.772258][ T40] audit: type=1400 audit(241.660:20438): avc: denied { connect } for pid=17021 comm="syz.0.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 241.781748][T17022] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 242.064630][ T1460] usb 11-1: new low-speed USB device number 18 using dummy_hcd [ 242.079293][T17039] ptrace attach of "/syz-executor exec"[11603] was attempted by ""[17039] [ 242.231755][ T1460] usb 11-1: config index 0 descriptor too short (expected 1307, got 27) [ 242.236781][ T1460] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 242.241095][ T1460] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 242.244773][ T1460] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 242.248806][ T1460] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 242.252490][ T1460] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 242.260129][ T1460] usb 11-1: string descriptor 0 read error: -22 [ 242.263700][ T1460] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 242.267146][ T1460] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.271541][ T1460] usb 11-1: config 0 descriptor?? [ 242.274077][T17026] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 242.277600][ T1460] hub 11-1:0.0: bad descriptor, ignoring hub [ 242.280952][ T1460] hub 11-1:0.0: probe with driver hub failed with error -5 [ 242.285391][ T1460] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input27 [ 242.299512][ C0] usb_acecad 11-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 242.309674][ C0] usb_acecad 11-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 242.330786][T17056] netlink: 165 bytes leftover after parsing attributes in process `syz.8.4057'. [ 242.367594][T17061] netlink: 'syz.8.4059': attribute type 10 has an invalid length. [ 242.373114][T17061] batman_adv: batadv0: Adding interface: team0 [ 242.375624][T17061] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.382052][T17061] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.388215][T17061] netlink: 'syz.8.4059': attribute type 10 has an invalid length. [ 242.390375][T17061] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4059'. [ 242.393041][T17061] team0: entered promiscuous mode [ 242.395479][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.397951][T17061] batman_adv: batadv0: Interface activated: team0 [ 242.400385][T17061] batman_adv: batadv0: Interface deactivated: team0 [ 242.403063][T17061] batman_adv: batadv0: Removing interface: team0 [ 242.408943][T17061] bridge0: port 1(team0) entered blocking state [ 242.411027][T17061] bridge0: port 1(team0) entered disabled state [ 242.413102][T17061] team0: entered allmulticast mode [ 242.420876][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4062'. [ 242.435527][T17063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.437940][T17063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.440281][T17063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.449024][T17063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 242.451272][T17063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.453007][T17063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.457598][T17063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.462925][ T5297] Bluetooth: hci0: Opcode 0x1407 failed: -112 [ 242.469339][T17063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.471057][T17063] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 242.473201][T17063] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 242.487906][ T40] audit: type=1400 audit(242.380:20439): avc: denied { ioctl } for pid=17070 comm="syz.8.4063" path="socket:[65850]" dev="sockfs" ino=65850 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 242.504321][ T40] audit: type=1400 audit(242.390:20440): avc: denied { map } for pid=17070 comm="syz.8.4063" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 242.526238][T17077] FAULT_INJECTION: forcing a failure. [ 242.526238][T17077] name failslab, interval 1, probability 0, space 0, times 0 [ 242.530690][T17077] CPU: 1 UID: 0 PID: 17077 Comm: syz.0.4065 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 242.530708][T17077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.530717][T17077] Call Trace: [ 242.530721][T17077] [ 242.530727][T17077] dump_stack_lvl+0x16c/0x1f0 [ 242.530751][T17077] should_fail_ex+0x50a/0x650 [ 242.530773][T17077] ? fs_reclaim_acquire+0xae/0x150 [ 242.530795][T17077] ? video_usercopy+0x1ac/0x1620 [ 242.530812][T17077] should_failslab+0xc2/0x120 [ 242.530829][T17077] __kmalloc_noprof+0xcb/0x510 [ 242.530844][T17077] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 242.530867][T17077] video_usercopy+0x1ac/0x1620 [ 242.530884][T17077] ? __pfx___video_do_ioctl+0x10/0x10 [ 242.530898][T17077] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 242.530929][T17077] ? __pfx_video_usercopy+0x10/0x10 [ 242.530970][T17077] v4l2_ioctl+0x1ba/0x250 [ 242.530985][T17077] ? __pfx_v4l2_ioctl+0x10/0x10 [ 242.531001][T17077] __x64_sys_ioctl+0x190/0x200 [ 242.531023][T17077] do_syscall_64+0xcd/0x250 [ 242.531043][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.531063][T17077] RIP: 0033:0x7f29b698d169 [ 242.531074][T17077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.531088][T17077] RSP: 002b:00007f29b77ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.531102][T17077] RAX: ffffffffffffffda RBX: 00007f29b6ba5fa0 RCX: 00007f29b698d169 [ 242.531111][T17077] RDX: 00004000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 242.531120][T17077] RBP: 00007f29b77ba090 R08: 0000000000000000 R09: 0000000000000000 [ 242.531128][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.531137][T17077] R13: 0000000000000000 R14: 00007f29b6ba5fa0 R15: 00007ffca82f2868 [ 242.531154][T17077] [ 242.598665][ T5985] usb 11-1: USB disconnect, device number 18 [ 242.787374][T17097] program syz.9.4074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.893594][T17103] FAULT_INJECTION: forcing a failure. [ 242.893594][T17103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.897642][T17103] CPU: 0 UID: 0 PID: 17103 Comm: syz.9.4076 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 242.897655][T17103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.897661][T17103] Call Trace: [ 242.897664][T17103] [ 242.897668][T17103] dump_stack_lvl+0x16c/0x1f0 [ 242.897685][T17103] should_fail_ex+0x50a/0x650 [ 242.897703][T17103] _copy_from_user+0x2e/0xd0 [ 242.897713][T17103] video_usercopy+0xedb/0x1620 [ 242.897726][T17103] ? __pfx___video_do_ioctl+0x10/0x10 [ 242.897737][T17103] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 242.897755][T17103] ? __pfx_video_usercopy+0x10/0x10 [ 242.897774][T17103] v4l2_ioctl+0x1ba/0x250 [ 242.897783][T17103] ? __pfx_v4l2_ioctl+0x10/0x10 [ 242.897794][T17103] __x64_sys_ioctl+0x190/0x200 [ 242.897810][T17103] do_syscall_64+0xcd/0x250 [ 242.897825][T17103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.897839][T17103] RIP: 0033:0x7f774fd8d169 [ 242.897847][T17103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.897856][T17103] RSP: 002b:00007f7750be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.897866][T17103] RAX: ffffffffffffffda RBX: 00007f774ffa5fa0 RCX: 00007f774fd8d169 [ 242.897872][T17103] RDX: 00004000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 242.897877][T17103] RBP: 00007f7750be1090 R08: 0000000000000000 R09: 0000000000000000 [ 242.897883][T17103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.897893][T17103] R13: 0000000000000000 R14: 00007f774ffa5fa0 R15: 00007ffd7069b008 [ 242.897904][T17103] [ 243.223364][T17124] FAULT_INJECTION: forcing a failure. [ 243.223364][T17124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.227032][T17124] CPU: 3 UID: 0 PID: 17124 Comm: syz.9.4086 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 243.227045][T17124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.227052][T17124] Call Trace: [ 243.227055][T17124] [ 243.227059][T17124] dump_stack_lvl+0x16c/0x1f0 [ 243.227076][T17124] should_fail_ex+0x50a/0x650 [ 243.227094][T17124] _copy_to_user+0x32/0xd0 [ 243.227105][T17124] video_usercopy+0xf3e/0x1620 [ 243.227118][T17124] ? __pfx___video_do_ioctl+0x10/0x10 [ 243.227129][T17124] ? __pfx_video_usercopy+0x10/0x10 [ 243.227148][T17124] v4l2_ioctl+0x1ba/0x250 [ 243.227157][T17124] ? __pfx_v4l2_ioctl+0x10/0x10 [ 243.227168][T17124] __x64_sys_ioctl+0x190/0x200 [ 243.227189][T17124] do_syscall_64+0xcd/0x250 [ 243.227204][T17124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.227218][T17124] RIP: 0033:0x7f774fd8d169 [ 243.227226][T17124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.227235][T17124] RSP: 002b:00007f7750be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.227245][T17124] RAX: ffffffffffffffda RBX: 00007f774ffa5fa0 RCX: 00007f774fd8d169 [ 243.227251][T17124] RDX: 00004000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 243.227257][T17124] RBP: 00007f7750be1090 R08: 0000000000000000 R09: 0000000000000000 [ 243.227262][T17124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.227267][T17124] R13: 0000000000000000 R14: 00007f774ffa5fa0 R15: 00007ffd7069b008 [ 243.227278][T17124] [ 243.302349][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4085'. [ 243.305283][T17122] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4085'. [ 243.315405][T17122] program syz.6.4085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.421242][T17132] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4090'. [ 243.445427][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4091'. [ 243.476817][T17144] FAULT_INJECTION: forcing a failure. [ 243.476817][T17144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.481832][T17144] CPU: 3 UID: 0 PID: 17144 Comm: syz.8.4095 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 243.481854][T17144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.481863][T17144] Call Trace: [ 243.481869][T17144] [ 243.481875][T17144] dump_stack_lvl+0x16c/0x1f0 [ 243.481900][T17144] should_fail_ex+0x50a/0x650 [ 243.481928][T17144] _copy_to_user+0x32/0xd0 [ 243.481946][T17144] simple_read_from_buffer+0xd0/0x160 [ 243.481972][T17144] proc_fail_nth_read+0x198/0x270 [ 243.481996][T17144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.482022][T17144] ? rw_verify_area+0xcf/0x680 [ 243.482041][T17144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.482061][T17144] vfs_read+0x1df/0xbf0 [ 243.482085][T17144] ? __fget_files+0x1fc/0x3a0 [ 243.482119][T17144] ? __pfx___mutex_lock+0x10/0x10 [ 243.482140][T17144] ? __pfx_vfs_read+0x10/0x10 [ 243.482170][T17144] ? __fget_files+0x206/0x3a0 [ 243.482197][T17144] ksys_read+0x12b/0x250 [ 243.482212][T17144] ? __pfx_ksys_read+0x10/0x10 [ 243.482234][T17144] do_syscall_64+0xcd/0x250 [ 243.482259][T17144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.482281][T17144] RIP: 0033:0x7f9d9018bb7c [ 243.482295][T17144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.482310][T17144] RSP: 002b:00007f9d910b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.482327][T17144] RAX: ffffffffffffffda RBX: 00007f9d903a5fa0 RCX: 00007f9d9018bb7c [ 243.482337][T17144] RDX: 000000000000000f RSI: 00007f9d910b60a0 RDI: 0000000000000004 [ 243.482346][T17144] RBP: 00007f9d910b6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.482355][T17144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.482365][T17144] R13: 0000000000000000 R14: 00007f9d903a5fa0 R15: 00007fff16518a38 [ 243.482385][T17144] [ 243.546887][T17145] CUSE: info not properly terminated [ 243.863910][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4102'. [ 244.185571][T17176] ata1.00: invalid cdb length 6 [ 244.251597][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4106'. [ 244.255093][T17178] veth0_to_bridge: left promiscuous mode [ 244.257331][T17178] bridge0: port 4(veth0_to_bridge) entered disabled state [ 244.261772][T17178] erspan0: left promiscuous mode [ 244.263905][T17178] bridge0: port 3(erspan0) entered disabled state [ 244.268108][T17178] bridge_slave_1: left promiscuous mode [ 244.270423][T17178] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.274771][T17178] bridge_slave_0: left promiscuous mode [ 244.276389][T17178] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.474330][ T5297] Bluetooth: hci0: command 0x0419 tx timeout [ 244.476404][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.476734][ T68] Bluetooth: hci2: command 0x0405 tx timeout [ 244.476770][ T68] Bluetooth: hci4: command 0x040f tx timeout [ 244.521917][T17195] overlay: Bad value for 'workdir' [ 244.689996][T17211] netlink: 'syz.9.4118': attribute type 7 has an invalid length. [ 244.826977][ T5985] usb 11-1: new low-speed USB device number 19 using dummy_hcd [ 244.995734][ T5985] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 244.998813][ T5985] usb 11-1: config 0 has no interface number 0 [ 245.001163][ T5985] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.005510][ T5985] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 245.009484][ T5985] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 245.013538][ T5985] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 245.017557][ T5985] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 245.020958][ T5985] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.024686][ T5985] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 245.027023][ T5985] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.030260][ T5985] usb 11-1: config 0 descriptor?? [ 245.032225][T17205] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 245.035989][ T5985] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 245.238816][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4116'. [ 245.337013][ T9] usb 11-1: USB disconnect, device number 19 [ 245.340626][ T9] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 245.363309][T17217] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 245.708898][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 245.708912][ T40] audit: type=1400 audit(245.600:20443): avc: denied { setopt } for pid=17243 comm="syz.9.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.730249][T17244] overlayfs: upper fs does not support file handles, falling back to index=off. [ 245.734868][T17244] overlayfs: conflicting lowerdir path [ 246.153131][T17268] kvm: kvm [17267]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 246.554681][ T5956] Bluetooth: hci2: command 0x0405 tx timeout [ 246.556669][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.558490][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 246.595005][T17281] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 246.654295][ T40] audit: type=1326 audit(246.540:20444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.6.4144" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83ca98d169 code=0x0 [ 246.971294][ T40] audit: type=1400 audit(246.860:20445): avc: denied { getattr } for pid=17314 comm="syz.9.4154" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 247.394040][ T40] audit: type=1400 audit(247.280:20446): avc: denied { setopt } for pid=17330 comm="syz.8.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.762498][ T40] audit: type=1400 audit(247.650:20447): avc: denied { read } for pid=17349 comm="syz.8.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.947803][T17354] __nla_validate_parse: 4 callbacks suppressed [ 247.947816][T17354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4168'. [ 248.251833][T17370] x_tables: duplicate underflow at hook 2 [ 248.354964][ T40] audit: type=1400 audit(248.250:20448): avc: denied { read } for pid=17377 comm="syz.6.4178" path="socket:[68745]" dev="sockfs" ino=68745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.400457][T17384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.405934][ T40] audit: type=1400 audit(248.300:20449): avc: denied { mount } for pid=17383 comm="syz.6.4186" name="/" dev="hugetlbfs" ino=68751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 248.412101][ T40] audit: type=1400 audit(248.300:20450): avc: denied { remount } for pid=17383 comm="syz.6.4186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 248.420069][ T40] audit: type=1400 audit(248.310:20451): avc: denied { unmount } for pid=13887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 248.634243][ T68] Bluetooth: hci0: command 0x0419 tx timeout [ 248.634262][ T5956] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.634286][ T5297] Bluetooth: hci2: command 0x0405 tx timeout [ 249.114349][ T5957] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 249.116477][ T5956] Bluetooth: hci3: command 0x1003 tx timeout [ 249.175545][ T40] audit: type=1400 audit(249.070:20452): avc: denied { shutdown } for pid=17385 comm="syz.6.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.222235][T17393] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4179'. [ 249.246068][T17401] autofs4:pid:17401:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 249.252728][T17401] bridge0: port 2(syz_tun) entered blocking state [ 249.255866][T17401] bridge0: port 2(syz_tun) entered disabled state [ 249.258325][T17401] syz_tun: entered allmulticast mode [ 249.261136][T17401] syz_tun: entered promiscuous mode [ 249.263595][T17401] bridge0: port 2(syz_tun) entered blocking state [ 249.266085][T17401] bridge0: port 2(syz_tun) entered forwarding state [ 249.734979][T17432] autofs4:pid:17432:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 249.740345][T17432] bridge0: port 3(syz_tun) entered blocking state [ 249.742297][T17432] bridge0: port 3(syz_tun) entered disabled state [ 249.745536][T17432] syz_tun: entered allmulticast mode [ 249.753273][T17432] syz_tun: entered promiscuous mode [ 249.756163][T17432] bridge0: port 3(syz_tun) entered blocking state [ 249.758647][T17432] bridge0: port 3(syz_tun) entered forwarding state [ 250.272063][T17442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4200'. [ 250.745423][ T5957] Bluetooth: hci0: unexpected event for opcode 0x203b [ 250.800640][T17451] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 251.148225][T17462] autofs4:pid:17462:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 251.151703][T17459] netlink: 'syz.9.4214': attribute type 39 has an invalid length. [ 251.161791][T17459] bridge0: port 3(syz_tun) entered disabled state [ 251.178229][T17459] syz_tun (unregistering): left allmulticast mode [ 251.180457][T17459] syz_tun (unregistering): left promiscuous mode [ 251.182372][T17459] bridge0: port 3(syz_tun) entered disabled state [ 251.638303][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 251.638314][ T40] audit: type=1400 audit(251.530:20460): avc: denied { search } for pid=17488 comm="syz.6.4216" name="/" dev="configfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.641277][T17489] overlayfs: overlapping lowerdir path [ 251.646372][ T40] audit: type=1400 audit(251.530:20461): avc: denied { mounton } for pid=17488 comm="syz.6.4216" path="/320/file0" dev="configfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.759739][ T40] audit: type=1400 audit(251.650:20462): avc: denied { unmount } for pid=13887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 251.781553][T17496] dns_resolver: Unsupported content type (234) [ 251.786816][ T40] audit: type=1400 audit(251.680:20463): avc: denied { bind } for pid=17495 comm="syz.6.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 252.181585][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 252.184100][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4228'. [ 252.739245][T17519] delete_channel: no stack [ 252.833080][T17574] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 252.833080][T17574] program syz.9.4249 not setting count and/or reply_len properly [ 253.118216][T17597] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.120441][T17597] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4255'. [ 253.137858][ T40] audit: type=1400 audit(253.030:20464): avc: denied { recv } for pid=5929 comm="syz-executor" saddr=127.0.0.1 src=54280 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.155538][T17599] hugetlbfs: Unknown parameter '0x00000000000000071844674407370955161501777777777777777777777' [ 253.185011][ T40] audit: type=1400 audit(253.080:20465): avc: denied { recv } for pid=35 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54280 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.224505][ T59] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.388057][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.391357][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.394880][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.404225][ T59] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.406807][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.416051][ T59] usb 5-1: config 0 descriptor?? [ 253.451417][T17619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.565170][T17632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.567272][T17632] IPv6: NLM_F_CREATE should be set when creating new route [ 253.579805][ T40] audit: type=1400 audit(253.470:20466): avc: denied { name_bind } for pid=17623 comm="syz.8.4267" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 253.620315][ T59] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 253.623672][ T59] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 253.632057][ T59] usb 5-1: USB disconnect, device number 17 [ 253.652510][T17639] uprobe: syz.9.4269:17639 failed to unregister, leaking uprobe [ 254.068681][T17662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.174670][T17678] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 254.183985][T17678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.188886][T17678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4293'. [ 254.273824][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4290'. [ 254.350073][T17700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.469129][T17708] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.704128][T17729] sp0: Synchronizing with TNC [ 254.916375][T17740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.052673][T17745] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 17745 comm: syz.6.4310) [ 255.060377][ T40] audit: type=1800 audit(254.950:20467): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4310" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=68321 res=0 errno=0 [ 255.220896][T17758] mkiss: ax0: crc mode is auto. [ 255.310667][T17765] FAULT_INJECTION: forcing a failure. [ 255.310667][T17765] name failslab, interval 1, probability 0, space 0, times 0 [ 255.315846][T17765] CPU: 0 UID: 0 PID: 17765 Comm: syz.8.4316 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 255.315865][T17765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.315875][T17765] Call Trace: [ 255.315880][T17765] [ 255.315886][T17765] dump_stack_lvl+0x16c/0x1f0 [ 255.315925][T17765] should_fail_ex+0x50a/0x650 [ 255.315955][T17765] ? fs_reclaim_acquire+0xae/0x150 [ 255.315980][T17765] ? tomoyo_realpath_from_path+0xb9/0x720 [ 255.316003][T17765] should_failslab+0xc2/0x120 [ 255.316019][T17765] __kmalloc_noprof+0xcb/0x510 [ 255.316042][T17765] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 255.316071][T17765] tomoyo_realpath_from_path+0xb9/0x720 [ 255.316090][T17765] ? tomoyo_path_number_perm+0x235/0x590 [ 255.316111][T17765] ? tomoyo_path_number_perm+0x235/0x590 [ 255.316136][T17765] tomoyo_path_number_perm+0x248/0x590 [ 255.316157][T17765] ? tomoyo_path_number_perm+0x235/0x590 [ 255.316177][T17765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.316215][T17765] ? __pfx_lock_release+0x10/0x10 [ 255.316234][T17765] ? trace_lock_acquire+0x14e/0x1f0 [ 255.316254][T17765] ? lock_acquire+0x2f/0xb0 [ 255.316272][T17765] ? __fget_files+0x40/0x3a0 [ 255.316290][T17765] ? __fget_files+0x206/0x3a0 [ 255.316307][T17765] security_file_ioctl+0x9b/0x240 [ 255.316330][T17765] __x64_sys_ioctl+0xb7/0x200 [ 255.316351][T17765] do_syscall_64+0xcd/0x250 [ 255.316371][T17765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.316391][T17765] RIP: 0033:0x7f9d9018d169 [ 255.316402][T17765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.316416][T17765] RSP: 002b:00007f9d910b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.316432][T17765] RAX: ffffffffffffffda RBX: 00007f9d903a5fa0 RCX: 00007f9d9018d169 [ 255.316441][T17765] RDX: 0000400000000100 RSI: 000000004014563c RDI: 0000000000000003 [ 255.316450][T17765] RBP: 00007f9d910b6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.316459][T17765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.316468][T17765] R13: 0000000000000000 R14: 00007f9d903a5fa0 R15: 00007fff16518a38 [ 255.316489][T17765] [ 255.316495][T17765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.473787][T17751] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 255.650873][T17787] NILFS (nbd0): device size too small [ 255.666998][T17782] x86/PAT: syz.8.4324:17782 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 255.756259][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4326'. [ 255.759155][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4326'. [ 255.828763][ T40] audit: type=1400 audit(255.720:20468): avc: denied { override_creds } for pid=17798 comm="syz.0.4329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 255.837050][ T40] audit: type=1400 audit(255.730:20469): avc: denied { shutdown } for pid=17798 comm="iou-wrk-17799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.460390][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.467127][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.470035][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.473846][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.477570][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.481249][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.502525][T17819] »»»»»» speed is unknown, defaulting to 1000 [ 256.593384][T17831] lo speed is unknown, defaulting to 1000 [ 256.598227][T17831] lo speed is unknown, defaulting to 1000 [ 256.600155][T17831] lo speed is unknown, defaulting to 1000 [ 256.610431][T17819] chnl_net:caif_netlink_parms(): no params data found [ 256.635331][T17836] »»»»»»: renamed from lo [ 256.637558][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4344'. [ 256.649537][T17831] infiniband sz1: set down [ 256.650962][T17831] infiniband sz1: added »»»»»» [ 256.658551][ T1460] »»»»»» speed is unknown, defaulting to 1000 [ 256.667638][T17831] RDS/IB: sz1: added [ 256.668815][T17831] smc: adding ib device sz1 with port count 1 [ 256.670541][T17831] smc: ib device sz1 port 1 has pnetid [ 256.677278][ T1460] »»»»»» speed is unknown, defaulting to 1000 [ 256.691626][T17831] »»»»»» speed is unknown, defaulting to 1000 [ 256.692133][T17819] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.696333][T17819] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.699148][T17819] bridge_slave_0: entered allmulticast mode [ 256.702773][T17819] bridge_slave_0: entered promiscuous mode [ 256.706692][T17819] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.709496][T17819] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.712372][T17819] bridge_slave_1: entered allmulticast mode [ 256.718984][T17819] bridge_slave_1: entered promiscuous mode [ 256.737428][T17831] »»»»»» speed is unknown, defaulting to 1000 [ 256.738945][T17819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.742990][T17819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.768118][T17819] team0: Port device team_slave_0 added [ 256.770986][T17819] team0: Port device team_slave_1 added [ 256.780917][T17831] »»»»»» speed is unknown, defaulting to 1000 [ 256.790403][T17819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.792352][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.800290][T17819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.804391][T17819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.806379][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.813432][T17819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.819939][T17831] »»»»»» speed is unknown, defaulting to 1000 [ 256.838870][T17819] hsr_slave_0: entered promiscuous mode [ 256.840791][T17819] hsr_slave_1: entered promiscuous mode [ 256.866977][T17831] »»»»»» speed is unknown, defaulting to 1000 [ 256.918023][T17831] »»»»»» speed is unknown, defaulting to 1000 [ 257.234025][T17819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.237341][T17819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.240307][T17819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.243264][T17819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.259833][T17819] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.261804][T17819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.263795][T17819] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.265754][T17819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.276563][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.279904][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.303658][T17819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.310582][T17819] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.314721][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.316784][ T9812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.321895][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.324030][T12225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.346046][ T40] kauditd_printk_skb: 495 callbacks suppressed [ 257.346057][ T40] audit: type=1400 audit(257.240:20965): avc: denied { egress } for pid=1460 comm="kworker/1:3" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 257.353335][ T40] audit: type=1400 audit(257.240:20966): avc: denied { sendto } for pid=1460 comm="kworker/1:3" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 257.412817][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4349'. [ 257.425406][T17819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.440750][T17819] veth0_vlan: entered promiscuous mode [ 257.446001][T17819] veth1_vlan: entered promiscuous mode [ 257.458326][T17819] veth0_macvtap: entered promiscuous mode [ 257.461396][T17819] veth1_macvtap: entered promiscuous mode [ 257.467120][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.469911][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.472427][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.476263][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.478924][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.481734][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.485172][T17819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.488396][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.491239][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.493831][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.497147][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.499796][T17819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.502608][T17819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.506152][T17819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.515309][T17819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.517657][T17819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.519991][T17819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.522271][T17819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.550190][T12220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.552474][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4354'. [ 257.555251][T12220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.569772][T12220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.571953][T12220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.596726][T17873] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 257.701033][T17876] x86/PAT: syz.2.4336:17876 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 257.730813][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4357'. [ 257.792136][T17884] rdma_rxe: rxe_newlink: failed to add lo [ 257.794783][T17884] »»»»»»: renamed from lo (while UP) [ 258.438535][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4363'. [ 258.567926][ T5957] Bluetooth: hci3: command tx timeout [ 258.601975][T17908] vivid-003: disconnect [ 258.603868][T17907] vivid-003: reconnect [ 258.609709][T17910] mkiss: ax0: crc mode is auto. [ 258.864279][ T59] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 259.015773][ T59] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.019892][ T59] usb 11-1: config 0 interface 0 has no altsetting 0 [ 259.024688][ T59] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.028260][ T59] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.031599][ T59] usb 11-1: Product: syz [ 259.033426][ T59] usb 11-1: Manufacturer: syz [ 259.035712][ T59] usb 11-1: SerialNumber: syz [ 259.039314][ T59] usb 11-1: config 0 descriptor?? [ 259.045165][ T59] usb 11-1: selecting invalid altsetting 0 [ 259.247612][ T26] usb 11-1: USB disconnect, device number 20 [ 259.324540][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'. [ 259.358399][T17923] openvswitch: netlink: Message has 20 unknown bytes. [ 259.428063][ T40] audit: type=1400 audit(259.320:20967): avc: denied { execute } for pid=17933 comm="syz.9.4381" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.510557][ T40] audit: type=1400 audit(259.400:20968): avc: denied { audit_write } for pid=17940 comm="syz.9.4384" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.517595][ T40] audit: type=1400 audit(259.400:20969): avc: denied { watch watch_reads } for pid=17940 comm="syz.9.4384" path=2F6D656D66643A2D42D54E49C570430A202864656C6574656429 dev="tmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 259.572241][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4386'. [ 259.574960][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4386'. [ 259.577417][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4386'. [ 259.579924][T17945] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4386'. [ 259.766276][T17957] netlink: set zone limit has 8 unknown bytes [ 260.274120][T17982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4400'. [ 260.278498][T17982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17982 comm=syz.2.4400 [ 260.378827][T17987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4402'. [ 260.382113][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4402'. [ 260.401761][T17989] netlink: 'syz.6.4403': attribute type 1 has an invalid length. [ 260.421417][T17989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.440821][T17989] bond4: (slave veth5): Enslaving as an active interface with a down link [ 260.449991][T17989] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 260.634408][ T5957] Bluetooth: hci3: command tx timeout [ 260.671159][T17998] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4406'. [ 260.702936][T18002] QAT: Device 7 not found [ 261.198165][T18036] 9pnet_fd: p9_fd_create_unix (18036): problem connecting socket: ./file2: -2 [ 261.275568][ T40] audit: type=1400 audit(261.170:20970): avc: denied { remount } for pid=18042 comm="syz.2.4420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.279141][T18043] option changes via remount are deprecated (pid=18042 comm=syz.2.4420) [ 261.310099][ T40] audit: type=1400 audit(261.200:20971): avc: denied { unmount } for pid=17819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 262.241718][T18051] 9p: Unknown access argument 18446744073709551615: -34 [ 262.287939][T18051] netlink: 'syz.9.4424': attribute type 9 has an invalid length. [ 262.350346][T18055] netlink: 'syz.9.4424': attribute type 26 has an invalid length. [ 262.614728][T18069] netlink: 'syz.2.4430': attribute type 12 has an invalid length. [ 262.683422][T18073] input: syz0 as /devices/virtual/input/input28 [ 263.239563][T18101] x86/PAT: syz.2.4440:18101 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 263.291532][T18106] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 263.302808][T18111] FAULT_INJECTION: forcing a failure. [ 263.302808][T18111] name failslab, interval 1, probability 0, space 0, times 0 [ 263.307694][T18111] CPU: 0 UID: 0 PID: 18111 Comm: syz.2.4444 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 263.307711][T18111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.307718][T18111] Call Trace: [ 263.307722][T18111] [ 263.307726][T18111] dump_stack_lvl+0x16c/0x1f0 [ 263.307745][T18111] should_fail_ex+0x50a/0x650 [ 263.307762][T18111] ? fs_reclaim_acquire+0xae/0x150 [ 263.307780][T18111] should_failslab+0xc2/0x120 [ 263.307792][T18111] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 263.307804][T18111] ? vm_area_dup+0x21/0x2f0 [ 263.307822][T18111] vm_area_dup+0x21/0x2f0 [ 263.307839][T18111] __split_vma+0x181/0x1160 [ 263.307851][T18111] ? __pfx___split_vma+0x10/0x10 [ 263.307861][T18111] ? mark_lock+0xb5/0xc60 [ 263.307878][T18111] ? __lock_acquire+0xcc5/0x3c40 [ 263.307896][T18111] vms_gather_munmap_vmas+0x1c3/0x1730 [ 263.307911][T18111] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 263.307924][T18111] ? mas_walk+0x6a6/0x910 [ 263.307942][T18111] __mmap_region+0x328/0x2760 [ 263.307955][T18111] ? __pfx___mmap_region+0x10/0x10 [ 263.307971][T18111] ? hlock_class+0x4e/0x130 [ 263.307982][T18111] ? mark_lock+0xb5/0xc60 [ 263.307996][T18111] ? avc_has_perm_noaudit+0x119/0x3a0 [ 263.308008][T18111] ? __pfx_lock_release+0x10/0x10 [ 263.308023][T18111] ? __pfx_mark_lock+0x10/0x10 [ 263.308036][T18111] ? __pfx___lock_acquire+0x10/0x10 [ 263.308050][T18111] ? process_measurement+0x1e8/0x2370 [ 263.308088][T18111] mmap_region+0x1ab/0x3f0 [ 263.308103][T18111] do_mmap+0xd8d/0x11b0 [ 263.308122][T18111] ? __pfx_do_mmap+0x10/0x10 [ 263.308138][T18111] ? __pfx_down_write_killable+0x10/0x10 [ 263.308157][T18111] vm_mmap_pgoff+0x203/0x3a0 [ 263.308170][T18111] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 263.308181][T18111] ? __fget_files+0x206/0x3a0 [ 263.308194][T18111] ksys_mmap_pgoff+0x32c/0x5c0 [ 263.308210][T18111] ? __pfx_ksys_write+0x10/0x10 [ 263.308221][T18111] __x64_sys_mmap+0x125/0x190 [ 263.308239][T18111] do_syscall_64+0xcd/0x250 [ 263.308254][T18111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.308270][T18111] RIP: 0033:0x7f5078f8d169 [ 263.308279][T18111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.308289][T18111] RSP: 002b:00007f5079d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 263.308300][T18111] RAX: ffffffffffffffda RBX: 00007f50791a5fa0 RCX: 00007f5078f8d169 [ 263.308307][T18111] RDX: 000000000300000f RSI: 0000000000000930 RDI: 0000400000ffb000 [ 263.308313][T18111] RBP: 00007f5079d89090 R08: 0000000000000003 R09: 0000000000000000 [ 263.308319][T18111] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 263.308326][T18111] R13: 0000000000000000 R14: 00007f50791a5fa0 R15: 00007ffeee799db8 [ 263.308339][T18111] [ 263.468102][T18123] __nla_validate_parse: 35 callbacks suppressed [ 263.468120][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4449'. [ 263.528304][ T40] audit: type=1400 audit(263.420:20972): avc: denied { create } for pid=18128 comm="syz.9.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 263.536038][ T40] audit: type=1400 audit(263.420:20973): avc: denied { sys_admin } for pid=18128 comm="syz.9.4452" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 263.542859][T18129] »»»»»» speed is unknown, defaulting to 1000 [ 263.594748][T18129] »»»»»» speed is unknown, defaulting to 1000 [ 263.652246][ T40] audit: type=1400 audit(263.540:20974): avc: denied { associate } for pid=18131 comm="syz.9.4452" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 263.724350][ T5985] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 263.885678][ T5985] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.888855][ T5985] usb 7-1: config 0 interface 0 has no altsetting 0 [ 263.892597][ T5985] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.896097][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.899141][ T5985] usb 7-1: Product: syz [ 263.900690][ T5985] usb 7-1: Manufacturer: syz [ 263.902415][ T5985] usb 7-1: SerialNumber: syz [ 263.908064][ T5985] usb 7-1: config 0 descriptor?? [ 263.914665][ T5985] usb 7-1: selecting invalid altsetting 0 [ 263.994068][T18142] netlink: 'syz.9.4455': attribute type 1 has an invalid length. [ 264.004860][T18142] nbd: couldn't find a device at index 20 [ 264.098436][T18144] x86/PAT: syz.6.4456:18144 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 264.136210][ T5985] usb 7-1: USB disconnect, device number 2 [ 264.146148][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4460'. [ 264.148249][T18152] netlink: 'syz.9.4459': attribute type 39 has an invalid length. [ 264.438424][T18180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.876499][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4470'. [ 265.147274][ T40] audit: type=1400 audit(265.040:20975): avc: denied { bind } for pid=18191 comm="syz.9.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 265.152641][T18191] delete_channel: no stack [ 265.299722][T18204] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4479'. [ 265.342190][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4481'. [ 265.405270][T18215] 9p: Unknown access argument 18446744073709551615: -34 [ 265.436591][ T5957] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 265.439162][ T5957] Bluetooth: hci3: Injecting HCI hardware error event [ 265.442185][ T5957] Bluetooth: hci3: hardware error 0x00 [ 265.653700][T18221] fuse: Bad value for 'fd' [ 265.674709][ T1329] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 265.827736][ T1329] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 265.832249][ T1329] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.833323][T18240] netlink: 'syz.2.4491': attribute type 13 has an invalid length. [ 265.835191][ T1329] usb 11-1: Product: syz [ 265.835208][ T1329] usb 11-1: Manufacturer: syz [ 265.835221][ T1329] usb 11-1: SerialNumber: syz [ 265.836496][ T1329] usb 11-1: config 0 descriptor?? [ 265.838132][T18239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4491'. [ 265.889685][T18248] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 265.890436][T18246] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4495'. [ 265.912123][T18246] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4495'. [ 266.000486][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.049774][ T40] audit: type=1400 audit(265.940:20976): avc: denied { listen } for pid=18212 comm="syz.6.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.313599][T18266] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4501'. [ 266.414840][T18270] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.614297][ T5957] Bluetooth: hci3: Opcode 0x0c03 failed: -38 [ 266.637119][T18291] FAULT_INJECTION: forcing a failure. [ 266.637119][T18291] name failslab, interval 1, probability 0, space 0, times 0 [ 266.641635][T18291] CPU: 0 UID: 0 PID: 18291 Comm: syz.2.4511 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 266.641654][T18291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.641663][T18291] Call Trace: [ 266.641668][T18291] [ 266.641675][T18291] dump_stack_lvl+0x16c/0x1f0 [ 266.641699][T18291] should_fail_ex+0x50a/0x650 [ 266.641720][T18291] ? fs_reclaim_acquire+0xae/0x150 [ 266.641744][T18291] should_failslab+0xc2/0x120 [ 266.641760][T18291] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 266.641776][T18291] ? mas_alloc_nodes+0x18b/0x8b0 [ 266.641797][T18291] mas_alloc_nodes+0x18b/0x8b0 [ 266.641817][T18291] mas_node_count_gfp+0x105/0x130 [ 266.641835][T18291] mas_preallocate+0x53f/0xce0 [ 266.641856][T18291] ? __pfx_mas_preallocate+0x10/0x10 [ 266.641899][T18291] ? anon_vma_name+0x75/0x100 [ 266.641918][T18291] __split_vma+0x474/0x1160 [ 266.641933][T18291] ? __pfx___split_vma+0x10/0x10 [ 266.641953][T18291] vms_gather_munmap_vmas+0x38b/0x1730 [ 266.641982][T18291] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 266.641999][T18291] ? mas_walk+0x6a6/0x910 [ 266.642024][T18291] __mmap_region+0x328/0x2760 [ 266.642043][T18291] ? __pfx___mmap_region+0x10/0x10 [ 266.642065][T18291] ? hlock_class+0x4e/0x130 [ 266.642082][T18291] ? mark_lock+0xb5/0xc60 [ 266.642102][T18291] ? avc_has_perm_noaudit+0x119/0x3a0 [ 266.642120][T18291] ? __pfx_lock_release+0x10/0x10 [ 266.642141][T18291] ? __pfx_mark_lock+0x10/0x10 [ 266.642162][T18291] ? __pfx___lock_acquire+0x10/0x10 [ 266.642183][T18291] ? process_measurement+0x1e8/0x2370 [ 266.642247][T18291] mmap_region+0x1ab/0x3f0 [ 266.642271][T18291] do_mmap+0xd8d/0x11b0 [ 266.642300][T18291] ? __pfx_do_mmap+0x10/0x10 [ 266.642326][T18291] ? __pfx_down_write_killable+0x10/0x10 [ 266.642355][T18291] vm_mmap_pgoff+0x203/0x3a0 [ 266.642376][T18291] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.642395][T18291] ? __fget_files+0x206/0x3a0 [ 266.642416][T18291] ksys_mmap_pgoff+0x32c/0x5c0 [ 266.642440][T18291] ? __pfx_ksys_write+0x10/0x10 [ 266.642457][T18291] __x64_sys_mmap+0x125/0x190 [ 266.642484][T18291] do_syscall_64+0xcd/0x250 [ 266.642508][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.642529][T18291] RIP: 0033:0x7f5078f8d169 [ 266.642542][T18291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.642557][T18291] RSP: 002b:00007f5079d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.642573][T18291] RAX: ffffffffffffffda RBX: 00007f50791a5fa0 RCX: 00007f5078f8d169 [ 266.642583][T18291] RDX: 000000000300000f RSI: 0000000000000930 RDI: 0000400000ffb000 [ 266.642593][T18291] RBP: 00007f5079d89090 R08: 0000000000000003 R09: 0000000000000000 [ 266.642602][T18291] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 266.642610][T18291] R13: 0000000000000000 R14: 00007f50791a5fa0 R15: 00007ffeee799db8 [ 266.642630][T18291] [ 266.755032][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 266.885112][T18301] overlayfs: missing 'lowerdir' [ 266.928858][T18297] input: syz0 as /devices/virtual/input/input29 [ 267.003534][T18309] overlayfs: failed to clone upperpath [ 267.452769][T18331] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 267.455380][T18331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 267.651291][T18307] Set syz1 is full, maxelem 65536 reached [ 268.389648][ T1329] usb 11-1: USB disconnect, device number 21 [ 268.415518][ T40] audit: type=1400 audit(268.310:20977): avc: denied { map } for pid=18347 comm="syz.6.4534" path="socket:[71407]" dev="sockfs" ino=71407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.425327][ T40] audit: type=1400 audit(268.310:20978): avc: denied { ioctl } for pid=18347 comm="syz.6.4534" path="socket:[72623]" dev="sockfs" ino=72623 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.485634][T18356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 268.488840][T18356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 268.637148][ T40] audit: type=1400 audit(268.530:20979): avc: denied { map } for pid=18359 comm="syz.9.4538" path="socket:[73311]" dev="sockfs" ino=73311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 268.648393][T18365] Cannot find del_set index 4 as target [ 268.651406][T18366] Cannot find del_set index 4 as target [ 268.773988][T18373] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 268.789252][T18373] wg2: entered promiscuous mode [ 268.791647][T18373] wg2: entered allmulticast mode [ 268.911155][T18384] MPI: mpi too large (16392 bits) [ 269.068766][T18388] __nla_validate_parse: 3 callbacks suppressed [ 269.068784][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4547'. [ 269.136275][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4549'. [ 269.168836][ T40] audit: type=1400 audit(269.060:20980): avc: denied { mount } for pid=18393 comm="syz.9.4550" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 269.179802][T18394] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4550'. [ 269.211272][T18397] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 269.337991][T18402] fuse: Unknown parameter '000000000000000000030x000000000000000e' [ 269.351431][T18404] netlink: 'syz.9.4554': attribute type 5 has an invalid length. [ 269.467328][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4559'. [ 269.528397][ T40] audit: type=1400 audit(269.420:20981): avc: denied { write } for pid=18422 comm="syz.6.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 269.596252][ T40] audit: type=1400 audit(269.490:20982): avc: denied { watch_sb } for pid=18430 comm="syz.9.4566" path="/323/file0" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 269.776159][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4572'. [ 269.807132][T18446] FAULT_INJECTION: forcing a failure. [ 269.807132][T18446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.812153][T18446] CPU: 3 UID: 0 PID: 18446 Comm: syz.2.4573 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 269.812174][T18446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.812184][T18446] Call Trace: [ 269.812190][T18446] [ 269.812198][T18446] dump_stack_lvl+0x16c/0x1f0 [ 269.812224][T18446] should_fail_ex+0x50a/0x650 [ 269.812251][T18446] _copy_from_user+0x2e/0xd0 [ 269.812270][T18446] copy_msghdr_from_user+0x99/0x160 [ 269.812294][T18446] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 269.812327][T18446] ___sys_sendmsg+0xff/0x1e0 [ 269.812352][T18446] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.812386][T18446] ? __pfx_lock_release+0x10/0x10 [ 269.812408][T18446] ? trace_lock_acquire+0x14e/0x1f0 [ 269.812435][T18446] ? __fget_files+0x206/0x3a0 [ 269.812459][T18446] __sys_sendmsg+0x16e/0x220 [ 269.812482][T18446] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.812521][T18446] do_syscall_64+0xcd/0x250 [ 269.812545][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.812569][T18446] RIP: 0033:0x7f5078f8d169 [ 269.812583][T18446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.812598][T18446] RSP: 002b:00007f5079d89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.812614][T18446] RAX: ffffffffffffffda RBX: 00007f50791a5fa0 RCX: 00007f5078f8d169 [ 269.812625][T18446] RDX: 0000000000000000 RSI: 0000400000000440 RDI: 0000000000000004 [ 269.812635][T18446] RBP: 00007f5079d89090 R08: 0000000000000000 R09: 0000000000000000 [ 269.812643][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.812653][T18446] R13: 0000000000000000 R14: 00007f50791a5fa0 R15: 00007ffeee799db8 [ 269.812674][T18446] [ 269.850218][T18450] 9pnet_fd: Insufficient options for proto=fd [ 269.885698][T18450] netlink: 'syz.9.4575': attribute type 4 has an invalid length. [ 269.922915][T18456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.963647][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 270.028180][ T40] audit: type=1326 audit(269.920:20983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.2.4582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5078f8d169 code=0x7ffc0000 [ 270.034553][ T40] audit: type=1326 audit(269.920:20984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.2.4582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5078f8d169 code=0x7ffc0000 [ 270.040465][ T40] audit: type=1326 audit(269.930:20985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.2.4582" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f5078f8d169 code=0x7ffc0000 [ 270.046933][ T40] audit: type=1326 audit(269.930:20986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.2.4582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5078f8d169 code=0x7ffc0000 [ 270.053016][ T40] audit: type=1326 audit(269.930:20987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.2.4582" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5078f8d169 code=0x7ffc0000 [ 270.061505][ T40] audit: type=1326 audit(269.930:20988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18474 comm="syz.2.4582" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f5078f8d169 code=0x7ffc0000 [ 270.110215][T18472] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 270.202735][T18486] FAULT_INJECTION: forcing a failure. [ 270.202735][T18486] name failslab, interval 1, probability 0, space 0, times 0 [ 270.207238][T18486] CPU: 0 UID: 0 PID: 18486 Comm: syz.2.4586 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 270.207253][T18486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.207259][T18486] Call Trace: [ 270.207263][T18486] [ 270.207267][T18486] dump_stack_lvl+0x16c/0x1f0 [ 270.207284][T18486] should_fail_ex+0x50a/0x650 [ 270.207300][T18486] ? fs_reclaim_acquire+0xae/0x150 [ 270.207317][T18486] should_failslab+0xc2/0x120 [ 270.207330][T18486] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 270.207341][T18486] ? __alloc_skb+0x2b1/0x380 [ 270.207357][T18486] __alloc_skb+0x2b1/0x380 [ 270.207372][T18486] ? __pfx___alloc_skb+0x10/0x10 [ 270.207385][T18486] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 270.207399][T18486] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 270.207416][T18486] netlink_alloc_large_skb+0x69/0x130 [ 270.207432][T18486] netlink_sendmsg+0x689/0xd70 [ 270.207447][T18486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.207466][T18486] ____sys_sendmsg+0xaaf/0xc90 [ 270.207477][T18486] ? copy_msghdr_from_user+0x10b/0x160 [ 270.207493][T18486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.207509][T18486] ___sys_sendmsg+0x135/0x1e0 [ 270.207528][T18486] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.207555][T18486] ? __pfx_lock_release+0x10/0x10 [ 270.207574][T18486] ? trace_lock_acquire+0x14e/0x1f0 [ 270.207597][T18486] ? __fget_files+0x206/0x3a0 [ 270.207618][T18486] __sys_sendmsg+0x16e/0x220 [ 270.207638][T18486] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.207675][T18486] do_syscall_64+0xcd/0x250 [ 270.207703][T18486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.207725][T18486] RIP: 0033:0x7f5078f8d169 [ 270.207736][T18486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.207751][T18486] RSP: 002b:00007f5079d89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.207766][T18486] RAX: ffffffffffffffda RBX: 00007f50791a5fa0 RCX: 00007f5078f8d169 [ 270.207776][T18486] RDX: 0000000000000000 RSI: 0000400000000440 RDI: 0000000000000004 [ 270.207785][T18486] RBP: 00007f5079d89090 R08: 0000000000000000 R09: 0000000000000000 [ 270.207793][T18486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.207803][T18486] R13: 0000000000000000 R14: 00007f50791a5fa0 R15: 00007ffeee799db8 [ 270.207822][T18486] [ 270.424719][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4592'. [ 270.541284][T18518] overlayfs: missing 'workdir' [ 270.800022][T18537] FAULT_INJECTION: forcing a failure. [ 270.800022][T18537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.803726][T18537] CPU: 1 UID: 0 PID: 18537 Comm: syz.2.4605 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 270.803740][T18537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.803747][T18537] Call Trace: [ 270.803751][T18537] [ 270.803755][T18537] dump_stack_lvl+0x16c/0x1f0 [ 270.803773][T18537] should_fail_ex+0x50a/0x650 [ 270.803791][T18537] _copy_from_user+0x2e/0xd0 [ 270.803802][T18537] copy_msghdr_from_user+0x99/0x160 [ 270.803818][T18537] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 270.803839][T18537] ___sys_sendmsg+0xff/0x1e0 [ 270.803854][T18537] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.803875][T18537] ? __pfx_lock_release+0x10/0x10 [ 270.803889][T18537] ? trace_lock_acquire+0x14e/0x1f0 [ 270.803905][T18537] ? __fget_files+0x206/0x3a0 [ 270.803919][T18537] __sys_sendmsg+0x16e/0x220 [ 270.803934][T18537] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.803956][T18537] do_syscall_64+0xcd/0x250 [ 270.803971][T18537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.803986][T18537] RIP: 0033:0x7f5078f8d169 [ 270.803996][T18537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.804005][T18537] RSP: 002b:00007f5079d89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.804015][T18537] RAX: ffffffffffffffda RBX: 00007f50791a5fa0 RCX: 00007f5078f8d169 [ 270.804022][T18537] RDX: 0000000000000080 RSI: 0000400000000100 RDI: 0000000000000003 [ 270.804028][T18537] RBP: 00007f5079d89090 R08: 0000000000000000 R09: 0000000000000000 [ 270.804033][T18537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.804039][T18537] R13: 0000000000000000 R14: 00007f50791a5fa0 R15: 00007ffeee799db8 [ 270.804050][T18537] [ 270.891353][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4607'. [ 270.970125][T18544] macsec0: entered promiscuous mode [ 270.971894][T18544] macsec0: left promiscuous mode [ 270.973361][T18544] macsec0: left allmulticast mode [ 271.058243][T18562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=18562 comm=syz.2.4615 [ 271.081735][T18565] overlayfs: failed to clone upperpath [ 271.092234][T18568] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4617'. [ 271.108416][T18566] x86/PAT: syz.6.4612:18566 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 271.139856][T18572] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 271.226443][T18579] rdma_rxe: rxe_newlink: failed to add syz_tun [ 271.375713][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4626'. [ 271.407802][T18598] fuse: Bad value for 'fd' [ 271.414343][T18596] ptrace attach of "/syz-executor exec"[17819] was attempted by ""[18596] [ 271.572822][T18610] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 271.575994][T18610] openvswitch: netlink: IPv6 tunnel dst address is zero [ 272.094036][T15762] bridge0: port 2(syz_tun) entered disabled state [ 272.134717][T15762] syz_tun (unregistering): left allmulticast mode [ 272.136595][T15762] syz_tun (unregistering): left promiscuous mode [ 272.138613][T15762] bridge0: port 2(syz_tun) entered disabled state [ 272.145128][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.150195][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.152875][ T5956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.158544][ T5956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.163389][ T5956] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.166371][ T5956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.183137][T18647] »»»»»» speed is unknown, defaulting to 1000 [ 272.230580][T18647] »»»»»» speed is unknown, defaulting to 1000 [ 272.327527][T18662] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003 [ 272.371577][T18647] chnl_net:caif_netlink_parms(): no params data found [ 272.422847][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.425678][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.427928][T18647] bridge_slave_0: entered allmulticast mode [ 272.430197][T18647] bridge_slave_0: entered promiscuous mode [ 272.432789][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.435062][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.437214][T18647] bridge_slave_1: entered allmulticast mode [ 272.439475][T18647] bridge_slave_1: entered promiscuous mode [ 272.466223][T18671] x86/PAT: syz.6.4652:18671 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 272.483822][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.488611][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.521758][T18647] team0: Port device team_slave_0 added [ 272.528778][T18647] team0: Port device team_slave_1 added [ 272.556313][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.558283][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.565478][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.569325][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.571276][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.578382][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.616105][T18647] hsr_slave_0: entered promiscuous mode [ 272.618668][T18647] hsr_slave_1: entered promiscuous mode [ 272.621026][T18647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.623925][T18647] Cannot create hsr debugfs directory [ 272.847142][T18697] overlayfs: failed to clone upperpath [ 273.009737][T18647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.013957][T18647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.026809][T18647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.031783][T18647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.046534][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.049094][T18647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.051785][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.054344][T18647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.089605][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.101940][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.108155][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.125886][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.136078][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.138774][T12225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.146125][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.148337][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.281191][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.308877][T18647] veth0_vlan: entered promiscuous mode [ 273.314795][T18647] veth1_vlan: entered promiscuous mode [ 273.333066][T18647] veth0_macvtap: entered promiscuous mode [ 273.337403][T18647] veth1_macvtap: entered promiscuous mode [ 273.347180][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.350906][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.354519][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.358182][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.361604][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.365389][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.368896][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.372558][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.377120][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.382931][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.388303][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.391821][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.395772][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.399117][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.402792][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.406724][T18647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.410576][T18647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.414923][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.420136][T18647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.423305][T18647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.426765][T18647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.429804][T18647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.449639][T18726] x86/PAT: syz.2.4668:18726 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 273.505965][ T9812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.508412][ T9812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.531006][ T9812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.533378][ T9812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.539027][T18745] netlink: 'syz.9.4676': attribute type 13 has an invalid length. [ 273.632067][T18757] FAULT_INJECTION: forcing a failure. [ 273.632067][T18757] name failslab, interval 1, probability 0, space 0, times 0 [ 273.636446][T18757] CPU: 3 UID: 0 PID: 18757 Comm: syz.2.4680 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 273.636469][T18757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.636478][T18757] Call Trace: [ 273.636483][T18757] [ 273.636490][T18757] dump_stack_lvl+0x16c/0x1f0 [ 273.636515][T18757] should_fail_ex+0x50a/0x650 [ 273.636538][T18757] ? fs_reclaim_acquire+0xae/0x150 [ 273.636562][T18757] ? tomoyo_encode2+0x100/0x3e0 [ 273.636583][T18757] should_failslab+0xc2/0x120 [ 273.636609][T18757] __kmalloc_noprof+0xcb/0x510 [ 273.636625][T18757] ? d_absolute_path+0x137/0x1b0 [ 273.636645][T18757] ? rcu_is_watching+0x12/0xc0 [ 273.636664][T18757] tomoyo_encode2+0x100/0x3e0 [ 273.636688][T18757] tomoyo_encode+0x29/0x50 [ 273.636708][T18757] tomoyo_realpath_from_path+0x19d/0x720 [ 273.636736][T18757] tomoyo_path_number_perm+0x248/0x590 [ 273.636754][T18757] ? tomoyo_path_number_perm+0x235/0x590 [ 273.636775][T18757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.636816][T18757] ? __pfx_lock_release+0x10/0x10 [ 273.636835][T18757] ? trace_lock_acquire+0x14e/0x1f0 [ 273.636855][T18757] ? lock_acquire+0x2f/0xb0 [ 273.636874][T18757] ? __fget_files+0x40/0x3a0 [ 273.636892][T18757] ? __fget_files+0x206/0x3a0 [ 273.636911][T18757] security_file_ioctl+0x9b/0x240 [ 273.636933][T18757] __x64_sys_ioctl+0xb7/0x200 [ 273.636957][T18757] do_syscall_64+0xcd/0x250 [ 273.636979][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.637000][T18757] RIP: 0033:0x7f5078f8d169 [ 273.637012][T18757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.637027][T18757] RSP: 002b:00007f5079d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.637042][T18757] RAX: ffffffffffffffda RBX: 00007f50791a5fa0 RCX: 00007f5078f8d169 [ 273.637052][T18757] RDX: 0000400000000100 RSI: 000000004014563c RDI: 0000000000000004 [ 273.637061][T18757] RBP: 00007f5079d89090 R08: 0000000000000000 R09: 0000000000000000 [ 273.637071][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.637080][T18757] R13: 0000000000000000 R14: 00007f50791a5fa0 R15: 00007ffeee799db8 [ 273.637101][T18757] [ 273.637113][T18757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.680441][T18763] overlayfs: failed to clone upperpath [ 273.716170][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 273.716182][ T40] audit: type=1400 audit(273.610:20999): avc: denied { append } for pid=18766 comm="syz.2.4683" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 273.855226][T18786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18786 comm=syz.9.4690 [ 273.890305][T18792] FAULT_INJECTION: forcing a failure. [ 273.890305][T18792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.895150][T18792] CPU: 2 UID: 0 PID: 18792 Comm: syz.6.4692 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 273.895182][T18792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.895192][T18792] Call Trace: [ 273.895197][T18792] [ 273.895203][T18792] dump_stack_lvl+0x16c/0x1f0 [ 273.895228][T18792] should_fail_ex+0x50a/0x650 [ 273.895254][T18792] _copy_from_user+0x2e/0xd0 [ 273.895271][T18792] video_usercopy+0xedb/0x1620 [ 273.895288][T18792] ? __pfx___video_do_ioctl+0x10/0x10 [ 273.895304][T18792] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 273.895329][T18792] ? __pfx_video_usercopy+0x10/0x10 [ 273.895360][T18792] v4l2_ioctl+0x1ba/0x250 [ 273.895376][T18792] ? __pfx_v4l2_ioctl+0x10/0x10 [ 273.895392][T18792] __x64_sys_ioctl+0x190/0x200 [ 273.895416][T18792] do_syscall_64+0xcd/0x250 [ 273.895437][T18792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.895458][T18792] RIP: 0033:0x7f83ca98d169 [ 273.895471][T18792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.895486][T18792] RSP: 002b:00007f83cb81b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.895501][T18792] RAX: ffffffffffffffda RBX: 00007f83caba5fa0 RCX: 00007f83ca98d169 [ 273.895511][T18792] RDX: 0000400000000100 RSI: 000000004014563c RDI: 0000000000000004 [ 273.895520][T18792] RBP: 00007f83cb81b090 R08: 0000000000000000 R09: 0000000000000000 [ 273.895530][T18792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.895538][T18792] R13: 0000000000000000 R14: 00007f83caba5fa0 R15: 00007ffc5cefc6b8 [ 273.895559][T18792] [ 273.938822][T18796] overlayfs: failed to clone upperpath [ 274.024574][ T78] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 274.061014][T18798] x86/PAT: syz.6.4695:18798 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 274.115893][T18809] __nla_validate_parse: 7 callbacks suppressed [ 274.115905][T18809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4698'. [ 274.186542][ T78] usb 7-1: config 0 has an invalid interface number: 37 but max is 1 [ 274.188699][ T78] usb 7-1: config 0 has an invalid interface number: 12 but max is 1 [ 274.190952][ T78] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 274.193470][ T78] usb 7-1: config 0 has an invalid interface number: 249 but max is 1 [ 274.195837][ T78] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 274.198314][ T78] usb 7-1: config 0 has no interface number 0 [ 274.200014][ T78] usb 7-1: config 0 has no interface number 1 [ 274.201713][ T78] usb 7-1: config 0 has no interface number 2 [ 274.203496][ T78] usb 7-1: config 0 interface 37 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 274.206479][ T78] usb 7-1: config 0 interface 37 altsetting 5 bulk endpoint 0xD has invalid maxpacket 576 [ 274.209160][ T78] usb 7-1: config 0 interface 37 altsetting 5 endpoint 0x84 has invalid maxpacket 28149, setting to 1024 [ 274.212164][ T78] usb 7-1: config 0 interface 37 altsetting 5 bulk endpoint 0x84 has invalid maxpacket 1024 [ 274.215317][ T78] usb 7-1: config 0 interface 37 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 274.218569][ T78] usb 7-1: config 0 interface 37 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 274.221471][ T78] usb 7-1: config 0 interface 37 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 274.224903][ T78] usb 7-1: config 0 interface 37 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 274.228333][ T78] usb 7-1: config 0 interface 37 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 274.231292][ T78] usb 7-1: config 0 interface 37 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 274.234581][ T5956] Bluetooth: hci1: command tx timeout [ 274.234803][ T78] usb 7-1: config 0 interface 37 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 274.239815][ T78] usb 7-1: config 0 interface 37 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.243528][ T78] usb 7-1: config 0 interface 12 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 16 [ 274.246994][ T78] usb 7-1: config 0 interface 12 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 274.249966][ T78] usb 7-1: config 0 interface 12 altsetting 9 endpoint 0xA has invalid maxpacket 584, setting to 64 [ 274.252986][ T78] usb 7-1: config 0 interface 12 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 274.256067][ T78] usb 7-1: config 0 interface 12 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 274.259018][ T78] usb 7-1: config 0 interface 12 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.262659][ T78] usb 7-1: too many endpoints for config 0 interface 249 altsetting 46: 193, using maximum allowed: 30 [ 274.266416][ T78] usb 7-1: config 0 interface 249 altsetting 46 has a duplicate endpoint with address 0x4, skipping [ 274.270130][ T78] usb 7-1: config 0 interface 249 altsetting 46 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 274.273154][ T78] usb 7-1: config 0 interface 249 altsetting 46 has a duplicate endpoint with address 0x8, skipping [ 274.277246][ T78] usb 7-1: config 0 interface 249 altsetting 46 has a duplicate endpoint with address 0x89, skipping [ 274.281280][ T78] usb 7-1: config 0 interface 249 altsetting 46 has a duplicate endpoint with address 0xA, skipping [ 274.285387][ T78] usb 7-1: config 0 interface 249 altsetting 46 has an invalid descriptor for endpoint zero, skipping [ 274.289479][ T78] usb 7-1: config 0 interface 249 altsetting 46 has 7 endpoint descriptors, different from the interface descriptor's value: 193 [ 274.294521][ T78] usb 7-1: config 0 interface 37 has no altsetting 0 [ 274.297030][ T78] usb 7-1: config 0 interface 12 has no altsetting 0 [ 274.299537][ T78] usb 7-1: config 0 interface 249 has no altsetting 0 [ 274.303914][ T78] usb 7-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=20.a7 [ 274.307759][ T78] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.310737][ T78] usb 7-1: Product: щ [ 274.312323][ T78] usb 7-1: Manufacturer: â±± [ 274.314117][ T78] usb 7-1: SerialNumber: Љ [ 274.317596][ T78] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 274.320934][ T78] usb 7-1: no configuration chosen from 1 choice [ 274.965750][T18819] overlayfs: failed to clone upperpath [ 274.997597][T18823] FAULT_INJECTION: forcing a failure. [ 274.997597][T18823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.001205][T18823] CPU: 3 UID: 0 PID: 18823 Comm: syz.6.4702 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 275.001220][T18823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 275.001227][T18823] Call Trace: [ 275.001231][T18823] [ 275.001235][T18823] dump_stack_lvl+0x16c/0x1f0 [ 275.001253][T18823] should_fail_ex+0x50a/0x650 [ 275.001271][T18823] _copy_to_user+0x32/0xd0 [ 275.001283][T18823] simple_read_from_buffer+0xd0/0x160 [ 275.001303][T18823] proc_fail_nth_read+0x198/0x270 [ 275.001318][T18823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.001333][T18823] ? rw_verify_area+0xcf/0x680 [ 275.001347][T18823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.001361][T18823] vfs_read+0x1df/0xbf0 [ 275.001377][T18823] ? __fget_files+0x1fc/0x3a0 [ 275.001387][T18823] ? __pfx___mutex_lock+0x10/0x10 [ 275.001401][T18823] ? __pfx_vfs_read+0x10/0x10 [ 275.001421][T18823] ? __fget_files+0x206/0x3a0 [ 275.001434][T18823] ksys_read+0x12b/0x250 [ 275.001442][T18823] ? __pfx_ksys_read+0x10/0x10 [ 275.001455][T18823] do_syscall_64+0xcd/0x250 [ 275.001469][T18823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.001484][T18823] RIP: 0033:0x7f83ca98bb7c [ 275.001493][T18823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.001503][T18823] RSP: 002b:00007f83cb81b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.001512][T18823] RAX: ffffffffffffffda RBX: 00007f83caba5fa0 RCX: 00007f83ca98bb7c [ 275.001518][T18823] RDX: 000000000000000f RSI: 00007f83cb81b0a0 RDI: 0000000000000005 [ 275.001525][T18823] RBP: 00007f83cb81b090 R08: 0000000000000000 R09: 0000000000000000 [ 275.001530][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.001536][T18823] R13: 0000000000000000 R14: 00007f83caba5fa0 R15: 00007ffc5cefc6b8 [ 275.001548][T18823] [ 275.899378][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.324518][ T5956] Bluetooth: hci1: command tx timeout [ 276.494272][ T6006] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 276.644306][ T6006] usb 11-1: Using ep0 maxpacket: 8 [ 276.647918][ T6006] usb 11-1: config 0 has an invalid interface number: 35 but max is 0 [ 276.650802][ T6006] usb 11-1: config 0 has no interface number 0 [ 276.654781][ T6006] usb 11-1: New USB device found, idVendor=12d1, idProduct=0ccd, bcdDevice=37.c3 [ 276.658010][ T6006] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.660841][ T6006] usb 11-1: Product: syz [ 276.662372][ T6006] usb 11-1: Manufacturer: syz [ 276.664458][ T6006] usb 11-1: SerialNumber: syz [ 276.667922][ T6006] usb 11-1: config 0 descriptor?? [ 276.671365][ T6006] option 11-1:0.35: GSM modem (1-port) converter detected [ 276.795664][ T1329] usb 7-1: USB disconnect, device number 3 [ 276.878424][T18843] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 276.882398][ T26] usb 11-1: USB disconnect, device number 22 [ 276.887661][ T26] option 11-1:0.35: device disconnected [ 277.522510][T18889] netlink: 'syz.6.4722': attribute type 10 has an invalid length. [ 277.525923][T18889] team0: left allmulticast mode [ 277.531426][T18889] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.534785][T18889] team0: entered allmulticast mode [ 277.536418][T18889] bond0: (slave team0): Enslaving as an active interface with an up link [ 277.545150][ T5956] Bluetooth: hci0: Malformed LE Event: 0x1b [ 277.619902][T18895] x86/PAT: syz.6.4724:18895 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 277.663943][ T5956] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 277.665149][T18897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=18897 comm=syz.6.4726 [ 277.727336][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4728'. [ 277.807842][ T40] audit: type=1400 audit(277.700:21000): avc: denied { map } for pid=18910 comm="syz.9.4731" path="socket:[75888]" dev="sockfs" ino=75888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.815127][ T40] audit: type=1400 audit(277.700:21001): avc: denied { read } for pid=18910 comm="syz.9.4731" path="socket:[75888]" dev="sockfs" ino=75888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.873132][T18917] x86/PAT: syz.6.4734:18917 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 278.058568][T18939] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4742'. [ 278.061060][T18939] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 278.404605][ T5956] Bluetooth: hci1: command tx timeout [ 278.957638][ T40] audit: type=1400 audit(278.850:21002): avc: denied { write } for pid=18959 comm="syz.6.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.964815][ T40] audit: type=1400 audit(278.850:21003): avc: denied { read } for pid=18959 comm="syz.6.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.971053][ T40] audit: type=1400 audit(278.850:21004): avc: denied { nlmsg_write } for pid=18959 comm="syz.6.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 279.001261][T18963] digital: digital_start_poll: Unknown protocol [ 279.068157][T18966] x86/PAT: syz.6.4753:18966 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 279.106526][T18973] tipc: Started in network mode [ 279.108551][T18973] tipc: Node identity ac14140f, cluster identity 4711 [ 279.111738][T18973] tipc: New replicast peer: 255.255.255.255 [ 279.121862][T18973] tipc: Enabled bearer , priority 10 [ 279.329425][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4763'. [ 279.332914][T18997] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4763'. [ 279.332976][T18992] @: renamed from vlan0 [ 279.345603][ T58] e1000 0000:00:06.0 eth0: Reset adapter [ 279.483819][T18988] program syz.6.4761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.130938][T19007] overlayfs: conflicting options: userxattr,metacopy=on [ 280.228082][ T1329] tipc: Node number set to 2886997007 [ 280.474466][ T5956] Bluetooth: hci1: command tx timeout [ 281.525289][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 282.610214][T19019] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4770'. [ 282.669917][ T5956] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 282.670181][T19025] x_tables: duplicate underflow at hook 1 [ 282.682289][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4773'. [ 282.686510][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4773'. [ 282.800450][T19036] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 282.932557][T19055] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 282.935275][T19055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.942950][T19055] netlink: 'syz.6.4783': attribute type 1 has an invalid length. [ 282.951953][ T1329] IPVS: starting estimator thread 0... [ 282.987023][T19064] netlink: 'syz.6.4785': attribute type 39 has an invalid length. [ 283.034311][T19059] IPVS: using max 36 ests per chain, 86400 per kthread [ 283.117658][T19061] [U] ³•¯1WT [ 283.166973][T19078] netlink: 'syz.6.4789': attribute type 1 has an invalid length. [ 283.169164][T19078] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4789'. [ 283.892493][T19103] netlink: 'syz.9.4799': attribute type 39 has an invalid length. [ 284.158418][T19115] ================================================================== [ 284.160657][T19115] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.163103][T19115] Write of size 5760 at addr ffffc90006903000 by task vivid-000-vid-c/19115 [ 284.166668][T19115] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.167656][T19115] CPU: 3 UID: 0 PID: 19115 Comm: vivid-000-vid-c Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 284.167670][T19115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.167677][T19115] Call Trace: [ 284.167681][T19115] [ 284.167685][T19115] dump_stack_lvl+0x116/0x1f0 [ 284.167702][T19115] print_report+0xc3/0x670 [ 284.167714][T19115] ? __virt_addr_valid+0x5e/0x590 [ 284.167726][T19115] kasan_report+0xd9/0x110 [ 284.167737][T19115] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.167750][T19115] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.167763][T19115] kasan_check_range+0xef/0x1a0 [ 284.167777][T19115] __asan_memcpy+0x3c/0x60 [ 284.167791][T19115] tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.167809][T19115] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 284.167823][T19115] vivid_fillbuff+0x8e0/0x41f0 [ 284.167838][T19115] ? hlock_class+0x4e/0x130 [ 284.167850][T19115] ? __lock_acquire+0x15a9/0x3c40 [ 284.167867][T19115] ? __pfx_vivid_fillbuff+0x10/0x10 [ 284.167880][T19115] ? vivid_thread_vid_cap_tick+0x7ab/0x15d0 [ 284.167894][T19115] ? v4l2_ctrl_request_setup+0x45c/0xa60 [ 284.167909][T19115] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.167922][T19115] ? vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 284.167934][T19115] vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 284.167946][T19115] ? lock_acquire+0x2f/0xb0 [ 284.167961][T19115] vivid_thread_vid_cap+0x5b8/0xb90 [ 284.167973][T19115] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.167985][T19115] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 284.167997][T19115] ? __kthread_parkme+0x148/0x220 [ 284.168008][T19115] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 284.168019][T19115] kthread+0x3af/0x750 [ 284.168031][T19115] ? __pfx_kthread+0x10/0x10 [ 284.168044][T19115] ? __pfx_kthread+0x10/0x10 [ 284.168056][T19115] ret_from_fork+0x45/0x80 [ 284.168069][T19115] ? __pfx_kthread+0x10/0x10 [ 284.168081][T19115] ret_from_fork_asm+0x1a/0x30 [ 284.168095][T19115] [ 284.168099][T19115] [ 284.171145][ T40] audit: type=1400 audit(284.060:21005): avc: denied { write } for pid=5929 comm="syz-executor" path="pipe:[3791]" dev="pipefs" ino=3791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 284.171202][T19115] The buggy address belongs to the virtual mapping at [ 284.171202][T19115] [ffffc900068a9000, ffffc90006904000) created by: [ 284.171202][T19115] vb2_vmalloc_alloc+0x11e/0x3d0 [ 284.233200][T19115] [ 284.233897][T19115] Memory state around the buggy address: [ 284.235485][T19115] ffffc90006902f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 284.237603][T19115] ffffc90006902f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 284.240071][T19115] >ffffc90006903000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 284.243007][T19115] ^ [ 284.244525][T19115] ffffc90006903080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 284.247442][T19115] ffffc90006903100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 284.250185][T19115] ================================================================== [ 284.260196][T19115] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 284.262203][T19115] CPU: 2 UID: 0 PID: 19115 Comm: vivid-000-vid-c Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 284.265271][T19115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.268356][T19115] Call Trace: [ 284.269296][T19115] [ 284.270159][T19115] dump_stack_lvl+0x3d/0x1f0 [ 284.271455][T19115] panic+0x71d/0x800 [ 284.272570][T19115] ? __pfx_panic+0x10/0x10 [ 284.273836][T19115] ? irqentry_exit+0x3b/0x90 [ 284.275153][T19115] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.276598][T19115] ? preempt_schedule_thunk+0x1a/0x30 [ 284.278109][T19115] ? preempt_schedule_common+0x44/0xc0 [ 284.279582][T19115] ? check_panic_on_warn+0x1f/0xb0 [ 284.280969][T19115] check_panic_on_warn+0xab/0xb0 [ 284.282334][T19115] end_report+0x117/0x180 [ 284.283546][T19115] kasan_report+0xe9/0x110 [ 284.284792][T19115] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.286376][T19115] ? tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.287913][T19115] kasan_check_range+0xef/0x1a0 [ 284.289213][T19115] __asan_memcpy+0x3c/0x60 [ 284.290446][T19115] tpg_fill_plane_buffer+0x1fdc/0x4380 [ 284.291965][T19115] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 284.293522][T19115] vivid_fillbuff+0x8e0/0x41f0 [ 284.294841][T19115] ? hlock_class+0x4e/0x130 [ 284.296074][T19115] ? __lock_acquire+0x15a9/0x3c40 [ 284.297413][T19115] ? __pfx_vivid_fillbuff+0x10/0x10 [ 284.298858][T19115] ? vivid_thread_vid_cap_tick+0x7ab/0x15d0 [ 284.300442][T19115] ? v4l2_ctrl_request_setup+0x45c/0xa60 [ 284.302002][T19115] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.303421][T19115] ? vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 284.304949][T19115] vivid_thread_vid_cap_tick+0x81b/0x15d0 [ 284.306427][T19115] ? lock_acquire+0x2f/0xb0 [ 284.307629][T19115] vivid_thread_vid_cap+0x5b8/0xb90 [ 284.309027][T19115] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.310444][T19115] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 284.311961][T19115] ? __kthread_parkme+0x148/0x220 [ 284.313274][T19115] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 284.314812][T19115] kthread+0x3af/0x750 [ 284.315897][T19115] ? __pfx_kthread+0x10/0x10 [ 284.317107][T19115] ? __pfx_kthread+0x10/0x10 [ 284.318362][T19115] ret_from_fork+0x45/0x80 [ 284.319584][T19115] ? __pfx_kthread+0x10/0x10 [ 284.320853][T19115] ret_from_fork_asm+0x1a/0x30 [ 284.322168][T19115] [ 284.323550][T19115] Kernel Offset: disabled [ 284.324697][T19115] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:28:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000364567 RBX=0000000000000000 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36a20 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90626310 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555592d24808 CR3=00000000542e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507900f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507900f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507900f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507900f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507900f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507900f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507917c488 00007f507917c480 00007f507917c478 00007f507917c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5079cdd100 00007f507917c440 00007f5079170004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f507917c498 00007f507917c490 00007f507917c488 00007f507917c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffed1003c4e123 RBX=ffffed1003c4e124 RCX=ffffffff8228a65f RDX=ffffed1003c4e124 RSI=0000000000000004 RDI=ffff88801e27091c RBP=ffffed1003c4e123 RSP=ffffc9000293f750 R8 =0000000000000000 R9 =ffffed1003c4e123 R10=ffff88801e27091f R11=0000000000000003 R12=0000000000000000 R13=0000000000000001 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff821d0851 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88322d7d60 CR3=0000000035d22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f883177c6a3 00007f883177c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4b3c9200 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584e18c89 0000555584e18b80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584e8614e 0000555584e85ec0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04003fe8030210b8 8084003fe6030010 b08084003fe60304 01e0808084003fe4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100004800401 0000040806060164 f000080004e00300 100004d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04c00302100004b0 0302a01000039003 0008004098030008 0040900310040040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c03180400408803 0008004080030008 003ff8030e04003f f4031804003ff003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c04003fec030804 003fe8030210b880 84003fe6030010b0 8084003fe6030401 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002961fd RBX=0000000000000002 RCX=ffffffff8b579469 RDX=0000000000000000 RSI=ffffffff8b6cfc80 RDI=ffffffff8bd36a20 RBP=ffffed1003b5a488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad2440 R14=ffffffff90626310 R15=0000000000000000 RIP=ffffffff8b57a84f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000400000001000 CR3=000000005bdd2000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000006 DR2=0200000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83cab7c488 00007f83cab7c480 00007f83cab7c478 00007f83cab7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83cb6dd100 00007f83cab7c440 00007f83cab7c458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83cab7c498 00007f83cab7c490 00007f83cab7c488 00007f83cab7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 62a0dcd6d23a280b ee61872536efa748 38a2a2ff58aab7a3 a7b92266724c251b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf8d7b0418c36627 dcdd0277d738a54f b3ca1f67ee7b047f 667c5817fbdbcce2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 354e6792edcc907f d8d71aa92c4ab1c7 0d2d89dd444f4953 bd526e107009602b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 85612d281b7a9d9d e4c18653f342b946 346ff53ea16ec32f fedbc04f8e261219 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8540aff0 RDI=ffffffff9ab837c0 RBP=ffffffff9ab83780 RSP=ffffc9000430f248 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=ffffffff9ab837d0 R14=ffffffff9ab83780 R15=0000000000000000 RIP=ffffffff8540b017 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f83ca970f20 CR3=000000005bdd2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83caa0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000