last executing test programs: 6m3.407842305s ago: executing program 32 (id=2636): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40045b17, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000000)) 4m46.796129539s ago: executing program 33 (id=3778): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) close(r0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) close(r0) 4m4.745042788s ago: executing program 34 (id=4215): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x2a, 0xb, 0x70bd27, 0x4000, {0x1}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x24}}, 0x4040080) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 3m34.130559705s ago: executing program 35 (id=4513): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) dup3(r0, r0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) 3m16.818178546s ago: executing program 36 (id=4523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x3, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x44000080) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f00009ee000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="c744240007000000c7442402000000008f687896a00bae5301920f011c2466b869008ec00fc79914000000b9800000c00f3235000800000f300f22d9f365f30fc09f78860000410fc77d1df20f011bf3f083230066baf80cb8b681f484ef66bafc0c66ed", 0x64}], 0x1, 0x0, 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$TCFLSH(r11, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r11, 0x800455c9, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup_ro(r12, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xa, 0x0, 0xf747029, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r11, @ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r12, @ANYBLOB, @ANYRES32=r14, @ANYBLOB="8a3b72d60df371ead8168459ae16cd3b9419cf608c9bfda9d1107de3d202c93aa8e8abfd9fe38e724d617f562a2b92cf39c093c29501d91d541386b70802da145ceef5544c7b1161b6d525efa7270b859c1f10bb447afde76ff6ca9fe0eb783a85cf", @ANYRES64=r13], 0x20) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 3m16.16364052s ago: executing program 4 (id=4542): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f00000005c0)='bdev\x00', 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='\xa3X\xbf){P\xbd&\xfa\xd5\xc7\x1a^L\x8c\nc\b\x03\x00\x00\x00\x00\x00\x00\x0018-\xf9\x18\xfb\xb1\xf9\xff\xff\xff\xff\xff\xff\xffN\x8db\xc9\x0fJ\x00d%\xb6wV\"UP\x00-\x1c\xb2\xa2\x17Z\xd7', &(0x7f00000000c0)='\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r3, 0x79f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_vlan\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4502, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) statx(r6, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000200)="6d9dbb7283b6282c9db6f8687a1c375999a3b9c561d0bb0d4ec0fdcaa26165e375cde85809a533ea82ca4b688f75e72936c54ea5c746edcc3ad593e3d8bccc09c59d25e87997e4cd1471c58b83652d57983a29f14c58ef9900eba9045afec1656c262b81e2f570b80b1bc62da61268bab07c0f72e4c1d06f43f7cb9f5b8a5638ad15eaf1a96eecbe406e284cd07f66", 0x8f}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r8, r9, 0x6, 0x0, @void}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendfile(r5, r0, &(0x7f0000000680)=0x8e, 0x903) sendmsg$nl_route(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="c295028b6b554a7c4fe1d1abb676d1b6427d4dd3a7725294f90a46e361e2e8c6ad567691810501b92548deefa9b5301c217d0792bea61ef3fa37048ca75d760d90b5a6a5bb8ed461e0502011e250cc6557b30078781227771dea56a4bde0be19c7f50532fa4fe74019d995054f9d9f97762cef5a321c728bfa1fe88943198a7a9436373d0a9c030c2de52974caeeb7bab565523708895af3d60884cb20f272c8a9ac0147cdc06a0eea3ce60190d8102e3c86e62f58fab3e4eff2"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m15.646854511s ago: executing program 4 (id=4544): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x1ff, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7656}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000010003c521560070000001c000180080006000c000000060001000200000008000300640101050ee8e87dbc3453949672bb1095f605a570348bbf7bb687029534ee31bc"], 0x30}}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b80)=""/4112, 0x1010}], 0x1}, 0x14001) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x5, 0x4, 0x3, 0x3, 0x3288}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 3m15.317269693s ago: executing program 4 (id=4546): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c480000000000000000000008000000", @ANYRES32=r0], 0x68}, 0x0) 3m15.158151006s ago: executing program 4 (id=4548): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x3, 0x2, 0xf3a8, 0x0, r0, 0xfffff800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x4, 0x80, 0xffffffff, 0xa, 0x7, 0x40}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 3m15.019891546s ago: executing program 4 (id=4549): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000cc0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private0}}}}}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvmsg(r1, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x22) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000300)={&(0x7f00000002c0)="6239bea0d19aba8f6c264761a7e50ab16cde7f3ff7341afdb77f9439e1fffc0278554d76e51fe57b7d4696d582797658a8bbaccc4bb7", 0x36}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x30, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffd}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd9}, 0x1c) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 3m14.602156163s ago: executing program 4 (id=4550): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r0, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) 3m14.509620184s ago: executing program 37 (id=4550): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r0, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) 2m33.022197928s ago: executing program 7 (id=4818): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m32.823728148s ago: executing program 7 (id=4821): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m30.300172898s ago: executing program 7 (id=4826): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1d5}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m30.10836448s ago: executing program 7 (id=4830): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 2m29.775277352s ago: executing program 7 (id=4834): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r3, &(0x7f00000006c0)="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", 0x2000, &(0x7f000000b880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.551370486s ago: executing program 7 (id=4836): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x34000895}, 0x0) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988cafbe882cac5050093517d176c709a6db96cb03276db1bb7c9f6ca6878744421b3197464cdb25e2576bd8345f788", 0x3b}], 0x1) 2m13.526774892s ago: executing program 38 (id=4836): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x34000895}, 0x0) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988cafbe882cac5050093517d176c709a6db96cb03276db1bb7c9f6ca6878744421b3197464cdb25e2576bd8345f788", 0x3b}], 0x1) 1m57.361960927s ago: executing program 9 (id=4886): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x1c, [0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m57.18007827s ago: executing program 9 (id=4888): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800d868dbf1000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0xc1000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x213c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x100000}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r0, 0x0, 0x8}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x6, 0x3fe7b379, 0x1, 0xffffffff, 0x5, 0x7, 0xf, 0xc, 0x28000, 0x9, 0xc297, 0x0, 0x4, 0x6, 0x1, 0x1000, 0xf, 0x2, 0x2, 0xa1, 0xac6, 0x2, 0xd6af, 0x1fc, 0xd57e, 0x5, 0x6, 0x8, 0x6, 0x7, 0x7, 0x4, 0x75, 0x98, 0xd75, 0x6, 0x4, 0x38000000, 0x2, 0x3, 0xe2, 0x3, 0x4, 0x7, 0xcbf, 0xa, 0x5, 0x1, 0x2ea, 0x9, 0x6, 0x0, 0xffff63e2, 0xd, 0x6, 0x1, 0x4, 0x1, 0x9, 0x5, 0xff, 0x2, 0x9, 0x686, 0xef, 0x5326, 0x10, 0x550000, 0xc, 0x8, 0x6, 0x4d96, 0xfff, 0xbb22, 0x8, 0x1, 0x4, 0xff, 0x9ae, 0x9, 0x2, 0x1, 0x720, 0x1, 0x1, 0x1, 0x5, 0x7, 0xffffffff, 0x6, 0x3, 0x1ff, 0x2d2a, 0x9, 0x7, 0x1, 0x8, 0x4, 0xc239, 0x6, 0x0, 0x3, 0x861a, 0x1, 0x893, 0x7fffffff, 0xd000, 0x5, 0xfff, 0x2cc6f47, 0x6, 0x6, 0x3, 0x7, 0x9, 0xca52, 0xf8b, 0xffffff41, 0x52, 0x101, 0x8, 0x3, 0x5, 0x400, 0x8, 0x9, 0x4, 0x6, 0x9, 0xfffffff7, 0x7, 0x7, 0x8, 0xe00, 0x5, 0x24a, 0x6, 0x25, 0x32fc0c8d, 0x6, 0x5, 0xff, 0x5d3, 0x5, 0x6, 0x4, 0x9, 0x8, 0x8, 0x100, 0x8, 0xd5dd, 0x9, 0x1, 0x80000000, 0x3, 0xffff9ca6, 0x1, 0x3, 0x9, 0x0, 0x5, 0x7f, 0x3, 0x7, 0x2, 0x6, 0x4, 0x4, 0x5, 0x8001, 0xfffffffd, 0x400, 0xd, 0x8, 0x10, 0x1, 0xfffffffd, 0x1, 0x9, 0x7, 0xffff, 0x7e2e, 0x0, 0x6, 0xfffffffd, 0x100, 0x0, 0x3, 0x8, 0x6, 0x2, 0xfffffff1, 0x80, 0x9, 0x1, 0x9a8, 0x6, 0x40, 0x5, 0x4, 0xfffffffc, 0xa, 0x1, 0x7f, 0x24000000, 0x8, 0x7ff, 0x8001, 0x5, 0x90, 0x10000, 0xf87d, 0x7, 0x200, 0x5, 0x6, 0x7, 0xfff, 0x1, 0x9, 0x1000, 0x9, 0xbc5, 0x8, 0xff, 0x4, 0x6, 0x7, 0x0, 0x7f, 0x8, 0x5, 0x3ff, 0x2, 0x71, 0x4, 0x7e8, 0x100, 0x0, 0x9, 0x401, 0x0, 0x3, 0x5, 0x6, 0x9, 0x5, 0xbaa, 0x1, 0xb, 0x5, 0x8000, 0x2]}]}}]}, 0x45c}}, 0x44080) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x20004094) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r11 = socket(0x15, 0x3, 0x4) ioctl$sock_netrom_SIOCADDRT(r11, 0x80044942, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0xf0f017, 0x2}) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r9) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r13 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r13, 0xc0045516, &(0x7f0000000000)=0x639) readv(r13, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/242, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r13, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 1m56.953901396s ago: executing program 9 (id=4890): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m56.506878412s ago: executing program 9 (id=4893): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x29) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f00000001c0)='./file1\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1400) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(0x0, 0x0) 1m56.217735245s ago: executing program 9 (id=4898): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000028c0)=""/201, 0xc9}], 0x1}}], 0x1, 0x0, 0x0) 1m55.459536665s ago: executing program 9 (id=4904): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m55.410266202s ago: executing program 39 (id=4904): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m21.495246395s ago: executing program 0 (id=5216): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="b80500000064f30f2acd0f46a78900000066ba2100b067ee66ba2000b000ee6df20f1b3e2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3f}], 0x1, 0x0, 0x0, 0x4a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev\x00') r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1}, {0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10004}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$P9_RLOCK(r3, &(0x7f0000000300)={0x8, 0x35, 0x1, 0x1}, 0x8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xcc60], 0x0, 0x200}) 1m20.885381843s ago: executing program 0 (id=5223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r2, 0x5421, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="5b47aac7df1865979726e1ddee1326c674", 0x11}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="23f1193cf154e063ff89a9d56819cc84b98f1fa6d42d77669212f3240c96aefce8ee0e63d237623756ada35992ef10db7f7e719136cdda9aa160d61eeb99ff673a85838b631e53d17523a344f38829f61df0559352890df18e24d8d1893f80cc3ab7dba6d862c61e69bfd8afae22d94ee94093c1a125ac34eee2abef11a2dd12c00f5ef1fa4b04d080fa827bbb6f50a88cddd2ac4f6cd7cdc1aaed2c7f53429a2aca9776f93be36b0b9d01dc4ba677910713fe3bc215b578578ccebe4d75bbd45d8aa9e3013c8dcb2f726b19513d62873ea3860f2555a10f46d048c2bca0254625aa", 0xe2}, {&(0x7f0000000240)="20b6e89116470ce680d4487c5ae8c4c5c5f4b83ed67b98b60e811101ac114345c5451324e7e298a41cb06f43f6299980abace06c958146e39c52f1308413b09409d81e2077ed75a935447049d7af1072126e8cc4ee81074b8137e534c01f2ea03b070eb03caab19cf99577be26f677aaeacd99dce416abd8e0", 0x79}], 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 1m20.650654848s ago: executing program 0 (id=5224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="93003300a0800000ffffffffffff080211000000ffffffffffff"], 0xb0}}, 0x20040000) 1m20.59297911s ago: executing program 0 (id=5226): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x29) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f00000001c0)='./file1\x00', r0, &(0x7f0000000280)='./file0\x00', 0x1400) unlink(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) (fail_nth: 2) 1m20.169309957s ago: executing program 0 (id=5229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 1m19.291601566s ago: executing program 0 (id=5238): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffc, [0x0, 0x10000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x400], [0x1, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x6e3a, 0x2, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1225, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d28795e, 0x8000]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 1m19.279209691s ago: executing program 40 (id=5238): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffc, [0x0, 0x10000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x400], [0x1, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x20000000, 0x0, 0x0, 0x6e3a, 0x2, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1225, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d28795e, 0x8000]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 47.07042271s ago: executing program 3 (id=5371): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', r1, 0x0, 0x0, 0x4000002, 0xff89, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x67, 0x0, 0xfe, 0x4, 0x0, @remote, @loopback}}}}) 46.796778542s ago: executing program 3 (id=5375): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 46.396225264s ago: executing program 3 (id=5380): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="392fa3267000fedbdf250500000008000900020000000801000500000008000b000200"/46], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x0) 46.301374502s ago: executing program 3 (id=5381): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x29) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') unlink(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x1000000) 46.012199691s ago: executing program 3 (id=5383): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x3, 0x3ff, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x20000}, {@dev={0xac, 0x14, 0x14, 0x15}}, {@multicast2, 0x7}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0x3}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x3, 0x3}}}}, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 45.444792656s ago: executing program 3 (id=5389): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) (fail_nth: 5) 45.393143478s ago: executing program 41 (id=5389): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) (fail_nth: 5) 34.498675441s ago: executing program 5 (id=5479): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @rand_addr, 0x2069e}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x10001, @empty, 0xfffffffd}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc288", 0x57f, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4081, 0xff1, 0x100, 0x0, 0x0) 33.375317158s ago: executing program 5 (id=5491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$binfmt_script(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r2, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x200}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102}}}}}}, 0x2a) 32.814631147s ago: executing program 5 (id=5496): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000580)={0x27, {0x200000, 0x100, 0x0, 0x4000003, 0x0, 0x3}}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x2, {0xb4, 0xef, 0x31c, 0x1ff, 0x7, 0x80000001}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r1, 0x301, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x2, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff], [0x0, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6306, 0x0, 0x40000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x45c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) kexec_load(0x0, 0x1, &(0x7f0000001440)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x1, @bcast, @netrom={'nr', 0x0}, 0xe3, 'syz1\x00', @default, 0xfffffffe, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000740)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000001c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) read(r7, &(0x7f0000000c80)=""/4096, 0x1000) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000000a0301010000000000000000050000080900020000000702010000000800010001000015"], 0x28}, 0x1, 0x0, 0x0, 0xc810}, 0x20000004) 32.585005859s ago: executing program 5 (id=5498): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x29) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') unlink(0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x3f000000) 32.30709637s ago: executing program 5 (id=5500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800d868dbf1000000000000000000009500000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0xc1000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x213c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x100000}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r0, 0x0, 0x8}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x6, 0x3fe7b379, 0x1, 0xffffffff, 0x5, 0x7, 0xf, 0xc, 0x28000, 0x9, 0xc297, 0x0, 0x4, 0x6, 0x1, 0x1000, 0xf, 0x2, 0x2, 0xa1, 0xac6, 0x2, 0xd6af, 0x1fc, 0xd57e, 0x5, 0x6, 0x8, 0x6, 0x7, 0x7, 0x4, 0x75, 0x98, 0xd75, 0x6, 0x4, 0x38000000, 0x2, 0x3, 0xe2, 0x3, 0x4, 0x7, 0xcbf, 0xa, 0x5, 0x1, 0x2ea, 0x9, 0x6, 0x0, 0xffff63e2, 0xd, 0x6, 0x1, 0x4, 0x1, 0x9, 0x5, 0xff, 0x2, 0x9, 0x686, 0xef, 0x5326, 0x10, 0x550000, 0xc, 0x8, 0x6, 0x4d96, 0xfff, 0xbb22, 0x8, 0x1, 0x4, 0xff, 0x9ae, 0x9, 0x2, 0x1, 0x720, 0x1, 0x1, 0x1, 0x5, 0x7, 0xffffffff, 0x6, 0x3, 0x1ff, 0x2d2a, 0x9, 0x7, 0x1, 0x8, 0x4, 0xc239, 0x6, 0x0, 0x3, 0x861a, 0x1, 0x893, 0x7fffffff, 0xd000, 0x5, 0xfff, 0x2cc6f47, 0x6, 0x6, 0x3, 0x7, 0x9, 0xca52, 0xf8b, 0xffffff41, 0x52, 0x101, 0x8, 0x3, 0x5, 0x400, 0x8, 0x9, 0x4, 0x6, 0x9, 0xfffffff7, 0x7, 0x7, 0x8, 0xe00, 0x5, 0x24a, 0x6, 0x25, 0x32fc0c8d, 0x6, 0x5, 0xff, 0x5d3, 0x5, 0x6, 0x4, 0x9, 0x8, 0x8, 0x100, 0x8, 0xd5dd, 0x9, 0x1, 0x80000000, 0x3, 0xffff9ca6, 0x1, 0x3, 0x9, 0x0, 0x5, 0x7f, 0x3, 0x7, 0x2, 0x6, 0x4, 0x4, 0x5, 0x8001, 0xfffffffd, 0x400, 0xd, 0x8, 0x10, 0x1, 0xfffffffd, 0x1, 0x9, 0x7, 0xffff, 0x7e2e, 0x0, 0x6, 0xfffffffd, 0x100, 0x0, 0x3, 0x8, 0x6, 0x2, 0xfffffff1, 0x80, 0x9, 0x1, 0x9a8, 0x6, 0x40, 0x5, 0x4, 0xfffffffc, 0xa, 0x1, 0x7f, 0x24000000, 0x8, 0x7ff, 0x8001, 0x5, 0x90, 0x10000, 0xf87d, 0x7, 0x200, 0x5, 0x6, 0x7, 0xfff, 0x1, 0x9, 0x1000, 0x9, 0xbc5, 0x8, 0xff, 0x4, 0x6, 0x7, 0x0, 0x7f, 0x8, 0x5, 0x3ff, 0x2, 0x71, 0x4, 0x7e8, 0x100, 0x0, 0x9, 0x401, 0x0, 0x3, 0x5, 0x6, 0x9, 0x5, 0xbaa, 0x1, 0xb, 0x5, 0x8000, 0x2]}]}}]}, 0x45c}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x8, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0x2, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x6752d591}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd5}, 0xc800) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x20004094) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r11 = socket(0x15, 0x3, 0x4) ioctl$sock_netrom_SIOCADDRT(r11, 0x80044942, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0xf0f017, 0x2}) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r9) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r13 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r13, 0xc0045516, &(0x7f0000000000)=0x639) readv(r13, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/242, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r13, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 31.62294626s ago: executing program 5 (id=5507): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000000000000100008400000000030000000200000000000021000000000000000500000000000000"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48085}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) dup(r10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 31.597134182s ago: executing program 42 (id=5507): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000000000000100008400000000030000000200000000000021000000000000000500000000000000"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48085}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) dup(r10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 2.88526031s ago: executing program 2 (id=5782): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0xe) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000100), 0x8) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x29) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) pipe2$watch_queue(0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 2.786611477s ago: executing program 8 (id=5784): syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES16], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e7780) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x6, 0x100000001, 0x100, 0xfffffffffffffff4, 0x1ff, 0xfffffffffffffffe, 0x4, 0x1000}, &(0x7f0000000380)={0x9, 0xa92, 0x2, 0x8000, 0x1e6db964, 0xc, 0x100000000, 0x8}, &(0x7f00000003c0)={0xfffffffffffffdf0, 0x3, 0xffffffffffff75b8, 0x9, 0x0, 0x4, 0x3}, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000440)={[0x1]}, 0x8}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa06}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x82}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x68, &(0x7f0000000700)=""/104, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x18, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0x10, 0x35, 0x7}, 0x10, r6, r7, 0x5, &(0x7f00000007c0)=[r0, r0, r0, r0, r0], &(0x7f0000000800)=[{0x4, 0x5}, {0x2, 0x2, 0x4, 0x6}, {0x3, 0x1, 0x10, 0x7}, {0x4, 0x3, 0x0, 0x1}, {0x1, 0x3, 0x9, 0xa}], 0x10, 0x50, @void, @value}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc6000002) socket$inet_tcp(0x2, 0x1, 0x0) r11 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)="a784b3e00926fcd0903e5e8d05633703656ee288a3a4a1f55a5064a97eef9cc2442b403800207078f2a84eb06511b3b200e3f3ec3eca0a7ffda9f9e3a10d8a20698dff2fba3fbc2c845f2b4db77ed83a9535b91185c4d2631ce98f9f0ca25c59c69f1cf9b9816c2f70eaeca7d10eba819d39ae2bbbc233cb96c93637a186b32060636331d6da00ec68a3c8afe2ad44d8ebbb0b069e677cd789c4065a273ff88ad9cb41bf30d91474253e2854cf9dfec36cf7a45c7244fa86ec637c943d7a9c0f9bc309997122caf0047feea7169616568b6e9adc07e77de784b2802441897a02599b7a9b0474ae83b2baef6f8a64ec79bfded595631e114e", 0xf8, 0xfffffffffffffffd) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, 0x0, r11}, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 1.902210518s ago: executing program 2 (id=5791): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @rand_addr, 0x2069e}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000004a80)=ANY=[@ANYBLOB="68bfa95a6d932e923a01000000000000f4050000ae5087cd8f84ecf400000000"], 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x10001, @empty, 0xfffffffd}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x33, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}]}, 0x20}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0xa08410, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000052c0)={{{@in=@empty, @in6}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004ac0)=0xe8) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000004f00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000000c0)=""/193, 0xc1}], 0x2, &(0x7f0000000280)=""/247, 0xf7}, 0x6}, {{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/89, 0x59}], 0x2, &(0x7f0000000580)=""/38, 0xffffffffffffffdb}, 0x3}, {{&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000800)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/20, 0x14}, {&(0x7f0000003a80)=""/4096, 0x1000}], 0x5, &(0x7f0000000880)=""/206, 0xce}, 0xc22d}, {{&(0x7f0000000980)=@can, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/118, 0x76}, {&(0x7f0000000a80)}], 0x2}, 0xa512}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000000c40)=""/176, 0xb0}, {&(0x7f0000000d00)=""/87, 0x57}], 0x3}, 0x948}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001400)=""/227, 0xe3}, {&(0x7f0000000dc0)=""/135, 0x87}, {&(0x7f0000001500)=""/171, 0xab}, {&(0x7f00000015c0)=""/198, 0xc6}], 0x4, &(0x7f0000001700)=""/118, 0x76}, 0x8}, {{&(0x7f0000001780)=@caif=@rfm, 0x80, &(0x7f0000004c00)=[{&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f0000001900)=""/56, 0x38}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/117, 0x80}, {&(0x7f0000004f80)=""/229, 0xe5}, {&(0x7f0000004b80)=""/32, 0x20}, {&(0x7f0000004bc0)=""/5, 0x5}], 0x14, &(0x7f0000004c80)=""/182, 0xb6}, 0x8}], 0x7, 0x10102, &(0x7f0000004f40)={r6, r7+10000000}) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000005080)={0x3, {{0xa, 0x4e20, 0x9e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {{0xa, 0x4e22, 0x354f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff800}}}, 0x108) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) r10 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r10, 0xc02c5638, &(0x7f0000000000)={0x0, 0x1, 0x1}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)={0x28, r9, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4800) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000000)) recvfrom(r0, &(0x7f0000001a80)=""/4081, 0xff1, 0x100, 0x0, 0x0) 1.687588826s ago: executing program 1 (id=5793): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x3, 0xfa02, {{0x6000000, 0x100, 0x0, @mcast2, 0xfffffffc}, {0xa, 0x0, 0x5, @empty, 0x8}, r0}}, 0x48) 1.572057898s ago: executing program 1 (id=5794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x2f, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}}, 0x40000d0) 1.464727512s ago: executing program 1 (id=5796): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000007000008000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 1.26082526s ago: executing program 8 (id=5798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x3, 0x3, 0xffff, 0x0, [{0x6, 0x5, 0xfc, '\x00', 0x7f}, {0xc, 0x35, 0x5, '\x00', 0x3}, {0x1, 0xeb, 0x3, '\x00', 0x7f}, {0xc7, 0x2d, 0x6, '\x00', 0xff}, {0x10, 0x8, 0xf, '\x00', 0x7}, {0x9d, 0x9, 0xc1, '\x00', 0x8}, {0x8, 0x3, 0x0, '\x00', 0x1c}, {0x2, 0x0, 0xab, '\x00', 0x7}, {0x3, 0x0, 0x7, '\x00', 0xff}, {0xf, 0x2, 0x79, '\x00', 0x9}, {0x80, 0x5, 0x3, '\x00', 0x7f}, {0x8, 0xb7, 0x80, '\x00', 0x7}, {0xff, 0x0, 0xe, '\x00', 0x5}, {0x2, 0x9, 0x0, '\x00', 0xfa}, {0xe, 0xe, 0x9, '\x00', 0x5}, {0x6, 0x8, 0x9}, {0xfe, 0x9, 0x80, '\x00', 0x3}, {0x79, 0xf8, 0x81, '\x00', 0x3}, {0x4, 0x5, 0x31, '\x00', 0x1b}, {0xf, 0x1, 0x2, '\x00', 0x1}, {0x69, 0x1, 0xb, '\x00', 0x9}, {0x4, 0x2, 0xa, '\x00', 0x9}, {0x5, 0xa9, 0x2, '\x00', 0x2}, {0x0, 0x8, 0x8, '\x00', 0x2}]}}) 1.260610099s ago: executing program 6 (id=5799): r0 = syz_open_dev$usbfs(0x0, 0xc, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0x0}) 1.260237612s ago: executing program 1 (id=5800): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x28}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, &(0x7f0000000580)=[{0x18, 0x84, 0x0, "7f"}], 0x18}, 0x80c4) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf2501000a000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x50408}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x28}}, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, &(0x7f0000000580)=[{0x18, 0x84, 0x0, "7f"}], 0x18}, 0x80c4) (async) close(r4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf2501000a000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x50408}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async) 1.090035632s ago: executing program 6 (id=5801): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000001c0)={"bc8789b794c15051b5d159b9", &(0x7f00000002c0)="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", 0xfe, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x3b, "ff3067a8", 0x1, 0x2, 0x0, "99dd9c", "3d895500005fae01170c80c91d85dffc937379e5e0988bf6a53669c2c71d3a9b32531b0000000000008600"}, 0x1, 0x73, 0xd5700000, &(0x7f0000000180)}) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000040)={0x3, 0x12}) 1.014396385s ago: executing program 8 (id=5802): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1}, {0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10004}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc60], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x1f000000) 1.014037007s ago: executing program 6 (id=5803): r0 = io_uring_setup(0x74dc, &(0x7f0000000180)={0x0, 0x280e, 0x0, 0x2, 0x200}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f00000000c0)={0x0, 0x0, 0xfff}) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000200)=0x4, 0x4) 875.363759ms ago: executing program 1 (id=5804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@multicast, @random="96c7de0d73dc", @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x1a, 0x4, 0x1, 0x6, 0xc3, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, {[@cipso={0x86, 0x53, 0xffffffffffffffff, [{0x0, 0x6, "90bccbcc"}, {0x2, 0x4, "924e"}, {0x5, 0x5, "51fba3"}, {0x3, 0xb, "444ca40cc84c089823"}, {0x0, 0x4, "b0e1"}, {0x5, 0x12, "23673cff5c2d76395f2759fe5ce9abbf"}, {0x1, 0xb, "b44e9bf019cd862dcc"}, {0x0, 0x12, "748c24755f761538a8235ec4b28d2c86"}]}]}}, "df90c3c149301608985be5dacdc11b0fd055e9b5ef64d4dc4ed426e559a3e1fc4a51795a55fb430da764ff06381d78d6e8376eca41a0747a40b21a73b0782e3eda0900d81298d8ddf98da9d1e2e49bac8c7fca3e5cdaaaa99a53ec"}}}}}, 0xd9) 874.873451ms ago: executing program 2 (id=5805): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x101002, 0x0) lseek(r0, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x4, 0x5, 0x5, 0x7, 0x7, 0x3, 0x4, 0x3}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000480)={@rand_addr, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000026c0)={0x6c8, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x164, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd88e, 0xf, 0x0, 0x89b}, {0x7, 0x1, 0xfc}, {0xb1, 0x5, 0x8, 0x3}, {0x3, 0x8, 0x9, 0x6}, {0x7f, 0x8, 0x2, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfa68}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x53464c08}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeed}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xec9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x98, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x9, 0x2, 0x10001}, {0x42, 0x8, 0x5, 0x3}, {0x8, 0x5, 0x8, 0x7}, {0x1, 0x0, 0x1, 0x9}, {0x100, 0x3, 0x4, 0x6}]}}}]}}, {{0x8, 0x1, r3}, {0x4}}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x40}, 0x0) mknod$loop(&(0x7f00000005c0)='./file0\x00', 0x100, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = dup(r5) write$FUSE_BMAP(r8, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r8, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) cachestat(r8, &(0x7f0000000140)={0x6, 0xd}, &(0x7f0000000180), 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='t=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r9, &(0x7f00000006c0)="53d0531f928202ef73e3434ca9c97ff7680861f521e96e65e2c6b6cfe4c241014cfd9da1a38c09bbb34166e2b144442415e998a2af1fcf3922869e22c3c19d569bc76de3abf80196f80fdb22acfd0dc62ef31b40e005aaaa3fc0d907e7ac1eb9038ccc244c7e19f574d029c4115e80a4c262b201a3dc37a1eccd6df19203dce723561ff642c65da740523f359be3037cadffe92513e6dde723608a3fee2b8a956cbb95a3f602f55c4a2b8e7899618b4edc69fd3164dc0adfa5c91f760c555625b4134e052f1e07fa7c04975f96f4518cc1058eaaee96cff644aa42666a46c846c90878370fcc9b583c5dda84c6d79cd192db5f838ce0c547ba2b948cb8e531027beac149ca3bbda7a3f3f438751240181672084ed6e5d1d524e276303b312298026ce6cee69bced8487dd732946b4590ba240f49c4b53db4b8dcbf8b4a28338ac51d972ce6587e4b36680b75e71b43790b84a0fa47e4bb8ae3b27afecdbdc2d51f3cad034e100c0a549379c39669fa45885feb4f20d74a01ab90c30f4c439fed6b035ee6a0dc71075a9018e53878114785fb4013f132ecb99c6a2d65b67d6da631bb9e194cdd497a497321f7b953632078ebb24d70839c99f45870f469abe04fb3015755a60639095b3ea5398761e851872f167946ac257d9fad6f18a6a36cd6f2ead2418d0508ea5fc9db366f68bd5b759cff92b63c691185163ab3f1880473175f00637834fce9283a9ddd099273d525a08c3e106c79059885e2a141031160d8744b0ce08d11d2d696666e2231bc02ec0eddcb97995bb0b0d3d88bbeddae156162127ea3023793183c02ec4f9b2d0e8aa5e881f4fd23632a4a9a831c028b97495ea4327d4ad42e6d27ff23c74cb42ade8132cfecbd76eed00a635e85d76b464225018edc2992fd43127374549168b4d603a60d057015938df8b2dba6d6cead0ef3dfeb0bf3c8e4c8778dda63c4439b9a4dfc7e1ef787893b237a08a4d70d67ac440ffecb8a79116a1d1c8252e950a3b26503fb32dea726d6c92f383c64480ba8a726593fa45366cfdee20bfba91f19d5db10e5276bed2b4be908c962fafe2a170a3ff695ab99b33c138ed3157cd7e1dc159065408314a1b248b0aa3360b827e974a6bc5c1766f60a30e578959390d266671e39a3af84567c18fdd0b4ea78850a6445ec9733f1980e8b579f625bae40f1c0e59e5f684af1beacc9bbd1819ea9f94befb3bcb1a4c7561f8310955d1aa20951ad7b184e20f811e4583b55e9e4b797c54f196aba96bf6ca83cf8c9cb68266a516fc54319de4bda029dbd9c871b2ed16e2f8d6583bb4cfc996d9af7ea4fda31afee27cfc67dac9743765a98269a63d848504a8f2a01db1cb4e610729e1d95c6979430d6168b25a22d2c68c6f1d7bba7114ca3d7a3e501b6eeaf68b04eabce07e8ba178b2c5defd0fd439988684f51d574f55cc271e5379f6ce1c21dc51a7615c957b07931458d0bad07f87ff5cc8be2336a366b7a8c70df5881380b1bb23f57ffeded68819405a37a488b1b026982bd38a9ac3fab9ae320584f6d397246ed220af7fb29004477af483e482767cec69ff2245ed35b51722b5c8ad34d4456c4498689ff1f35b73d4c38c1c514a7bef317555e8d082a21f68e77527a6c11ecd1c57490e7b2c66b46924533fbd678e0c9887dd012c87aacf787dceeed59ca96a5d4baef238a89e7e697971c8a9c83829939d6e16b71a3f5ebd497673ea64d5078e40b173d080619d1e680126ce8dde460bbc726705a6814ce3715a181f92fa6aebe4e1e5213ed3673fa68c9563f7ffbbac2e7d4c50b531126675dd8a75dcc04ea9fd1f2145449fa205a1a75869a2a2cc7bb25c8233af343afaa282f5ae1cf997ff0e62e9c1513a0623a0f90be9d54275ae77e582d91bce764e3868544343b1b3f5dcd1ed0172cd7e5cd2921b167379d5df862008ca7c2b4818a3e1c54c5ff48aadb2f5765e2e7fd03bbdc06be33066c3f38f042e617862bc16e32b15758a479245b358e013d8c809e0f8b480765e597f7350a61271aa45e79d1eae4965785b8d18a6e1b2f7b126c6ba45197c06ef87390f1c36eacd52f513d061aa8b2e8b7268beae651f9ba919b06cf2cd2bc288b04e83d342481f79ec586792279dc3750034fb12b8d6a8a39b4eed1d4d33e09155d781ceedb84d6cf3a330c6803c1408f5a2d69b00ea38c8800a969deb870cdf82fdc32ef1c823e552517d5412be825b7c0f35f4f569e39c619e5dcd790f54cb98a40903d890640fb155651e978410d48232f42a196e459efabb86127200dad848df1b3532ae042fd647752afeb3e7782aeb3274f127abeec4fc02e92369b49928a2bde4666c3df6f57dd5c3c1512dae546c43f25deab67ac8ccf3bb7bdcd59c226365d04e2cdadd870a1f65ef8817aabd2ba012c068b285f1b0dc210330cfd264b58c3aecdee8bcc8497c82e24e504c4bcbd167bc38ee18c6d9e76c7e0bc59a6ab3de149745a23dc882a7e22a73fce145dca5cce1bd74863e558cbad1e4f55181a8bcc823d55e437303ccbc0c22d089fbb31320c11650ebdb6d1ca29f3a044c22893034b1c7f478274d440d01c5fbd1e7014e8492d258858270c98e8ae14c509177cbb85c0b1074e9550fb7e588a24f267498eae8f9df4776e10bf1b3fb7c10903e5171667a1386b15131639cf7dd9b16e2cc3a6677e2a3c1ebe92c8368569a44a69d9f0734d6e019cfae85ded176be3117b110de27bd77fd292ececfbb267023f2d42985370674f107055c0fbf209750184047bd4fafa85bd3ecb170f60b91708ca1c02b8ad4ddde0a64bde64f80b46d127871b14b0d688d04074cfed57eb7104f5ae5861db150c4ddbd0271e3861d2ca06736f4ab2e7a47a97b6c62a0c24660c92d5bef5367ba6ddb742af4375d40de9a4fae8b2b96750a3d48d628030257b30acf5a1b8e69560fbbcec72dbdb576a4e137a5545d611e3894400138d45eac106ae480ccb25c34ddea02e11c5e564c859c9a748ef4aeabb3c6625cfbc619f826b84376a33666d2eaa7b78c2dc80461b376d9525baf42a38147ff2ceaa9c76088ea11cdf28a6d35054f300bdb05b3d2997a9b82f8ead1487e779d179533ad0f523a1b89b132276ecd5237b652e09fb8a3182cfd87cad601307729876cda8769666b5d82e5c16f75efc10edb65687e367ca301a2f7d779a9d9e0e38827aae8b9571af6deedef31f2e652c7d8ae1c73d3135441b8c04c987a1dc88928ef577fa8809280a553df88a574670f5ae48a4b7f7200ebedb491e9596b49fc875bb409b1f65ad53c8d63d85ece86b03b14885f5e2394628b92f9a7302fe7183cc2f348103a72f5ceeaf69b29a0d0766a7535b5a478c637c64e31388a9a6a94d4d601afe7f54264ce59ed4811af70726e7fcc4015ab39e9049d04223230074a46c6321426eae3ab9b2a501769e0c55500f2d67bae61d76ea4905b0fefa5cecdcaed1756554a5522f78e096fba9d8e3f72904782d383eb25048380799e5fc953fbb1cef12fe6f49993779b41875261dab67f4a75ae5c3295b3fac8653161d8ed8233cbf2b2dd0a3208e7dec793798876c2699e5919c1082bc506ab572f1c05219783c48c97c5f78dc6efd6b18981132488e80feedfc0d0da4df50387d48951188050f01bbc0c23d10778997fb753c007e2c6ec7866c47edc86778adc6562d5d3af00933f6f9d7e79f8a9445a7c0ddcf99a20591074c091b9fa7a1960e2d31c3ce90b378c266da6121729a5fba6560e95990c33428e7234f0efe9e052524ee856aa71721403107a93f492f65a21edfede77f47bb8b91812990fe89b7e400e20c68dd541829c1956583b66ec8fedd9b8bfea294363ebe1e4d9b1fc3ca523710fdb2b38ba3fa98bc761d83aea536446075581c3b630b496c056f532ba4ec2cf419eb55036ab0e886df0984e680d6a8091e4c887e79e9c3d789d2af3b917361b06900c0606adbb53ec91dcf73e1a248153cb7478138d2fbff2e50591b5d7e200aa9a81636f79553b2e53b00f648977a5883c8df8cf36985f0dd6c8eee243499847582f9dbfa5cf81cb4dba75a97db2c83aae71cb846652c3ef274a3541ce68348705d8f1a001910741470dd9f2bee549e277217346b6fe274983c6a9030f56f05285f15d15f548e957717e53c24f20e90f237b22c0c0379772f626fe3a267a09063b916b3c8be33c1dd183f673c51f20849b4bc39ae60b52411ca67caf772a586e8d85ebc92b592e46a3239f445e5493f37e5ae788cfeae364dbfedc6d1c937b904e1bb3d7ed1ba8425b71455a242f981452819bdbe51cd5e71290e34e47a3394e6cc1efee4ce8f160702b345373b4b44a79305388da31a688e1156d70dc69fdd54f7d437943641459865ca0e33d3a53eb6119cbe91dc587d0d24e887495eb50930a7059fb8213a29106bea7a675bcd20f09b1cdf6d966d7ad804465dcd899c7e9c23246481c3c4a41a60710e6db5f8b591fedd8d07fd261e18f3c1151d748366272d8219f02b321f8510c6018ca6326f8455cedc58cc9c7b5ede8f92027a1f6bcae240e62306db6016baf7b48b63456f2a06bfa7ba15c74e6085b9d6756982b5d7d96834fb143a16458465c6855cd38ee0799c93e57ad9e1f368d03f1969d4cfa9defcd0b8bd05577597ef5268f0a924a0842976c90f53e3142340cc3aa22506ea227c31e67fe633e22797d733c116be928861553ca2eddcb126c57e976f4b49f65b1ea833255f908512c0fc0e5127153671323742dda347b4eb916efb60c8be2a0c14066e79623886920a685ef168d355b9267e897bf8c3fcbfa67beec80b3621b0fc87ba22d43798a8772700169fd836e4a45c377dc2f2f5747cce8d8dbfa25ea835d4235aaf0b5919e909ac97cc072e06b97582761c0f8c13feeb36252aa8f27d30c83950e850570539266e2efdc953e69a874b5044cdd4ba0e149b0eacb5cdb920bfc1cb8adbbf3e24e5c4ca07aa28ee0ed3a3de89d353af1495bcf462fbedf54bfbe8730f50f8d8a5f43228fac6065c0b09d4323535bae57a92ba08810ddeb738f234fdd031fb548b7c1d2caa6ebaa65c2b919ca3f8fd49f18e49d848ff97f145f30bcf87570eea1a0a63e1ae832ea5d3aaa7e25cad4f72d891c5450a2bf7f1aeb009fd61c8fec94033b0f4e20de743c9d2573bd8d46295c6efe391864ea074b70a4d189100c6af05deb6390db3c926e98a2ad58a6248ef8084ed9ff4f3cf0a1b389379c25a58bf82afa232cb76b3fa66c6b17cd8bd3042a0336762a0fcae33a57296bd9f2c7a768e664603461b440e5c9d5ea7cbc1559d6307b00aad9aec774b1c4b0ff45f2d46c87bc993c43db3aa4728bce7e9a2ce8153415948302ed7aa08ffffd6fd0ee31ab1a03cee64e751bbd2a4c784ef6d2f886aa76f5194c5a946422f10af934cefb19906f5ff78ab139d5ff307fc4c31b6b42b01e6a0e2814822da5740cbb3e97c620f77eb1c67297933852b6ee4b17ac0df2a347438b058612b768c68ad3ad1443fc540826f6aabb0206777c05ce076ec3f957ad6d5facc2f6374b0523e6ebafbf96cfab1f94f19d701caf4ac3af543268b2e9d4d0283040ee7cf1db08a65107508eb8ed614b42a6502425e1636c07646e92d7d106af1f682c801d44013b45e4f3baafe25cf35f6b6d4b22fee8f819cec21f27c2f523968cb409617c033de646accc4631d4fe2e47e91d4829a0e02ead3aa155508883622e6e97f6a836bf343bcb88a00d9254f5f35911f8b751be58a22e205e7c66696566482840bf5afd5467369aed8d66d1be7ac44ce8d7f557d6806fdc63514a1b44565345d20be91d70b70db9aefcbee4b0a7057f67e35c99f069891f8cc6b4e18551ec42e6e9e7d35a95265d45c5c6effb6b46d344bbf9de2f4b7bfd17f49047c4862e8129c74918edccb77bcb3a78044b4738b8f064df5366c04ed88b6d3faf9e70b1cf5d5c33492042d4196927ffb85b1a9e29276ff0c37b5824d9ab1d4e040ac1b13b24b5b78febf40861dde72f277d8394c9b591018e817f3152a8d8fac1dd56b6dde00477f90474cf2ffa8b63c05038eb5cac0ec4b962753ea51b2021143b1ef9aca67fc5d685aa95659b788d4ffea1c4cb030e75b2823855cecf1627a22fe92db03b64815485f00b0494bea0d81da65c120e2b2c0712ae4d6705fe38407085ff760199c74b4abaece798fc9d8df68f0ad5c1a08a834a68cc41df338fc1c22b47856f55433d783204a3134bacf356a11f069f6f28eeb6532bd0d43aef034a8fdf69c45fa52e9d2a650c5c67ec2af90e6c2db1a98c0c34491f679a25489028cd74ee3cfd200dfb3ce146474d33a23721a904863ba74ae53e358750bca3053e7dc206ffa2339de7bf4478d1d203e8bf0cc838a73a73ceeebfed501f3b46cbea73caefded977fd3e3106010dc87dfc5f5d635628b3b3dc2b6d37a8f4dab394014ea5ed27a4a525b0b303e7927c7b73ba8b331f8e19ebcd3af44d7d46a217aca81b21e21f0449cb9785e305a11c09871d9d2450af146c9b13581f22d789e24754d1bfbd9e1169025dbf7a9398daec569859a347afb279e5e8855c3248218fffbc6526f17df86fbebf05f17c5f619885b51b3d403cc113abdfa652531f89b51269aed95fc5ea5c7d55fcee096e4b0c9d8e0eccc831b9a77bbefd06c86d968330815c444e399ab70cc33202be544909f9372e4cdcd189871067744c7e0d0c3ec8f423749fee7e1ef1e01b8b8b4d27ac9e70854116b2f97062e953ac5c7d7219d87eed8df1fff043618ba62bb89a874f8213232cbb44ae3ceebd7d19916e3d780c6d112cc0a25bfcd41f0f86a0c0e4830eaeaf77cd5d2878207de58caf04e08086357bb667c53599d7b143561b6465c985204ce4d7731082cb3ad8d89beeabdde6ddc46b0455271d611fd27819be3b5a4270403e6bbc52cacb778c5485b3c9ff1775820659b765890f908dfaf7bad5617e91812029fff3baf1f714d4b0828713c86ed2db78b4be15999beabae711c051d2c8b5c0d77ae1f17f2b9363e407968b8d237d74de6208f4f2369be49fc4fb2489bf8c2215eeb41e01659f73d1f1e41adc148ea3ac3224c70f427c176fb9ba0f956a033a03ff175cd5450bec6fb62c2ae72e4fef056668180d8d4e6ff8c4599d12d6eb0b3f9b7c0c77aa9b0db5ddd327685f980169b864bc281baeb360eea1efaf2e1615a2fc49a6d2025486d75d73e9c17c70a6776f80b65fdfc26e6e8118d93f830da46da249048887ae937556ab21a3f8fb2cb3a0eb1db10c30d9e6645ca83d34411a93c808f348de478b6ce461df6b91262d561061788b8e7b73f7023f4da992b8a184639332c3f3ddfb3199c2721999b3633f2e49bf5277ea1a85cc9c0e215583337a9d215928f1bb1d82710417a6a478635ee8e3f44f2e96370ccee3ed13e6c6b52480ebfeed8782de2cb144ead0eed68da00e4e72dd17670bc3439a69cff751ded06d45c0a6b5a4df36e97ecc69343362ffee5b94a2c233155aaac2c9b8e5eb1810cf0de3c70a8416cd9f478a1e7f2b2934da5278dfb9ad59620ee7cc5e869c64d2e33f8523ac582cb06d1d6ad3d2a2a604110b4b86fd9ddfd40efa126a46cd876960eff39fa38c1edbe09ae1481d110f946de5aa802eb3572e0c963d44d725b66161edc9db3e15d24813dc69154e5101ccefb4ed025854f84c5167708e1b18f37a7e8881f6610b2a78d782b58315592066ca0d7af40759f96f97535792567e9ad65fa104ea2b4075f931aa82ebe5c0978891ba92690b69c4cbcddb4687f6e2e42fa1b3af7bdb832bfac6be0b62a5ed107c9a09eb8f6b727a88f222c38c520ef08d93c93069f1ec179e5a5762c8a2c2da839e72ef6c81609be0f74b41951f051adde1efcab04626271ce1365fed266ac97a29c4001a62ef23ebb8c3d1499a913107e8f863ee6f3d8f5b4619c3e0ed3a48a6f7ba4ec79fc3c7e66a6ca2d4e70ca6952b6dd08092e9fd95f039e130ba35d2edc188fd80ee0384e3257dbdb83328509b106a6d552b3c6934f123fe9cdcd88f6ed62e05d589e186b0e9f38b972b64040e068696ff66ef3c45c04b38ecfec180630b34d861b8cf79ab81a0c24880c9b6c2bfce85f2a29adf400ac907409d83324bb17d62011b0536ea55d9d7c73d00546f8184f360b086c6a93d9d36d7be1438f4912a3f2de74f7a3e2a1467ae1b4761841fcccdef6d66a4045b643c5d4fb54e1ec7431ba8441c61d43a5888b85bd63d67b4e7abd1179ef30ce50ef1f60d825403c1d62ee9567d32e600de4a36b3eb8f4a5618a1879d410bd520a3a4b01028414f565bd57b457af0d2e5bfd9bb42bc1aa5fcb850f47c7f0ab15536d5e70849fc94e0b010a2c3a8349868c9e2c72bc24691fba55ff81504c1243abf8c2cd35c5d3afd993a1702749e782ccd82853941bb72ae5b41b23da6a1f3de44d75e39c1781509521d848d36b33b4fe2a58fba762af142fed48bfdd7ab5a4672f8ef69805e24a86a5eb4a5f9c8dbe6481dde7643f4a4298b589026fd5d5ab6beef26284ecd44147e974bc5a8d31810ae2b51e0a19eb77d2310903911c841c0ef978cf73bbe3b818ab0c54956c64b57a30692dbda9badcfcc2d36f8ca15938ebd346e88f35edf124750b74adc6ab0e83b96e8d8f1b205b76141fa6c7267f9a40c30f023d468194441a80cfa07da0df7f42ff6cf10a5e50886c5c7675d195b3a48788c8e1d4fb928ec14d255085ff1fc96cbf4fc2327de74ab7056d8eac525ceb8a71921e53c7055fbbfc2d738e089e80bf926ce146446236177a94491dfd491e0ae6fcf71e8a32ced22e176058d1c608129ce5ad0669382e9e2a06e8accb36521135fb58d53fc7a307fc28f72bad0d7f43b2c17ca2b7e8f05cf79e11f3eca0fe4e4eab705a2dac23f50d281adbe475e32460a8a2c4cd3daab6dfe2af1ee9363499b1a13710499fc5594d96fb2cd59f293282846bdfe7dfa177d636028a6d1146ef394260e264d2b21cd484c2fa46b7d6674716eed62e06415a8013e0175985e1f13450d11e6433fe69f3949e6b0921e0baa4c37955877e612310573ae1c257234517fbc1d3f6d38142f09e3d93143a3b300d452cb74f490d4cd3c7158054500fe8cd9875026e9b49394c6c40bc0c5f418ff6af4b13f8288f7835d03e30e112d8cbc195f0f53baa208dcbd144564b5847b9be12bda27d56b8de19f5070b6d2433678220857655743939ca658a323257d57e84f120c1f5f91ca3884c75096e58064110e8864f52907b92cc1fe7f875b87826a1e3c6278513613e19e8923918c9c25807fdc02314625f83ffb34ee3d3e7608d945803e624798d0d182a11b1d13cceb7291b8a4d2a6d848cc235d29048d29223d79e81aa24fc873c1f445997a5b1a5c8cacb03c21775f0b517dba112996467960f3e69bd963765086d84b02387171a588a187f5c0ea0296d78a6c39f963d878c72d4a47caff29655b27c3f96cb000e81189d7b19a973bf18c0808ec08ed80a7e765cb3965de5af69e01493c0574c23519133f6cca73d431048d54ddf0f6155d838b29f4f45c4167d0441a3d909f0e0cf82a0e6b8350c1806046a7b072b3791f2b64553035da02c3ea65811dc8f1ee24611a245e7c755b519d0fcdb7ea8ef1799aef12ecbb289a7f627153ce54293c35e239901505a53e58f56794063ff20db5f3eb503295b4300898ae85f191a25f99688ed2e43adc88189360f55bebe507f8178a5be41361ac97c2bd329bf304620e1ce47f9ae5748f29464391f3e0c88d606716c8fd000c22ccf98c6fa8b49cdfd1938474eb35c5b90b29f68b185c2b04a9dddf5f7663caf1800a37a3131b0dd2dc1ced3b6094e620f6bd97476854ea26855980673a920eace402ca198e74670c93fce477b18c95c4ea2fd7f809ce13707c8140b897e4a0960546883b7103633a66cd4f9859523c606071b41d5b7144420ee14ae5836024258ebce19ebd0583a1f5e8a2b47c29ea7d979abe6151d3cd1add8f65db63e1056cdeae90f2cbc9080bbd82e9fe76a75d21773c76c6c883e894d8270e03c7fa71232ff855e85ae8833875e80c32b599e957ccaee141a9271efa47e87a8ae233cca6b0ad6ab19c416c4929069fff410d2b2ad969b13cb9e77a86dc2c4946f7ec1b8860c7cf7733807cfe1de033190a4325f462c82e7aacd73a95a92713c2d732ce969a8dcb01982c2916873b8674321d3c13cda36760a7a0342000460507ddb06d69e2eaf330c1c37f36a32219cc98b1f10a0e51bcdb3324cae07d97d3804114f2e64bc27ada207b4fc9091e09367971e7476d8fb2c224e4dbebf184179763488b91bb9845ad8a1b822c6388c8fc801a9c25b186c5cd97aa863b895bb3ec1a5a74e10ba8e3fa76c6a5f223f0cec295e7b536716c036ee3c1de659f38bcdee2c2e8c501bb56a4675781f58cf225799718bbf19366a0166b0e519253ea3d3c789f9cad3232200f1aab15435b621cd907579f2e33c06b12ac1b32e5d408298caa6997aa8d5acd8f80e323b06905bc6e5c9d2a748dd85bd5b7359e22e1f93075bece833e9d014e201c5f36c3fe37fa07fdb3bad729fb8326ed8d34113e11877a9793c9d3d67ad5f353ac12424cf4b59ffd523f96b0368cf7119a50efadc9eb06dc94d4bdf39ac1658fdff49c74020cceb616ddfe00324d83365b8fe996d87d8f9a34637741a532c5dd22b7a7f8eebf883c4979724f52dfbe0264320785f3f0039e8ec780287b9054420ea71a287dd36568b01f6f10d390edc88a37127374a956a7467dca7cf997747246fc4522ded106311f335936b5c8a225aba980d6d7d7b8d9cb4e4abe74f55d2beeb0578b069eb966630d2437f0a381d2d7b5f2d2b13d70ba0cc47ddcd4c326eba416e078bdf69033f79b0ed7041186037977fbe777197458ddc04a7cd3b0b6ce3a6e140aee3be61f98164fdd8e52f7572b497eac78c2ec3bca6a7b7494bd1f7859c65d27de00d877b2cea33d97a79feade32ee6e863bad8c18daa05e7fadb0778e987ecfe0e2f54a0299477622057e3cba65adc397c4d40174ad688bdb43e5bf5f7207252d5cbf9cd648211ab915ea661152b7fe0df69d3899b36c6d4293a17181aae5399fc088b58f88c5e1e556d3790cff24b20bfe147a5b966b318bbdb159085340308cbb22c89e9deb5a2fbbbc694e32fdc93a76345ebcb0eee17c6342bda7d81d19afd467c375e0ffc184329cf7a21a49b33ef2b903eb4418dd1beb1a4888d9e9f39183d3587f3345d9d043a6f8ca09b629259ce9531ccc9cca3db878ed856f04fe1cf0a09d14df53a11cfa1bb51fdcc1fe382aa485ac3548720d8d6d926c6ea4d0b951ca33dae89e3bdfa7593abb3faa65416abb321f5d4bfe0b1738730e9eabf42ae4984aa68d6878ba5554f605a17a67f06691b3cd312658b45211cd638e63e5bd9fb297bc5bd7640ef22162e370a018ac97f45366aa2eabf0ac799678539faca39de3ff78206392fa39a54bd26148af14a69d2d9a4d8c60a34ad6a37da97326becaa43b5859a6ad7f1ef41cd8f1fa28ae0c55673c05ef908ce598ef10f63bec88b2a28dc83f0041c13a75b6e", 0x2000, &(0x7f000000b880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 636.834056ms ago: executing program 8 (id=5806): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fdatasync(r0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0}, 0x7e88}], 0x1, 0x40000021, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00160000f7c8e82bb04a588f0cf4acb22cddb59cb4462e29dab9be3ed127feab88b592b62927d4b8c07ea8b317d57fffffffff000000006478a309c6c2d1f617b6234c731dd1f334fce6269af3b789f86e74ba8559f58a6a", @ANYRES16=r3, @ANYRES16=r3], 0x90}, 0x1, 0x0, 0x0, 0x7f6dc39ec34efba8}, 0x20000010) 523.62788ms ago: executing program 2 (id=5807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd0}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x68}}, 0x40000d0) 417.244084ms ago: executing program 2 (id=5808): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x11, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@can_delroute={0x2c, 0x19, 0x51, 0x0, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x7, 0x2, 0x0, 0x0, "df8e1a41d1025bd5"}, 0x7}}]}, 0x2c}}, 0x0) 417.016781ms ago: executing program 8 (id=5809): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000001c0)={"bc8789b794c15051b5d159b9", 0x0, 0x0, 0x0, 0x0, 0x1, 0x73, 0xd5700000, &(0x7f0000000180)}) 234.765744ms ago: executing program 6 (id=5810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1100}}}}}}}, 0x0) 234.451331ms ago: executing program 2 (id=5811): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0xa0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x505200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x8d0a7000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r5, &(0x7f0000000340)="9096237ad0ccfa6c82dc619dd1ef71dadc836cd24f262fcdba43db329845b139e70623c473a063fbc91e88c3fd4cd20527cec01e0134ce91816d1032b157a075fcd158d63a35b4748ffc4d4d4608fdbd3398ae1702a9e7144c5475e94b669d27e941630430f72b69b22824a6efa61ef4a0203f2a196dfe3b525c547ca5c0596462b966f3c050034b160ffaf1189f9fb86407cdfb1a277910c0741c884df728d434c93b8db428a9ba27dcbb824da4febc364f6409521dfc10e87cba96dd6a81093277412bac682df6cae040cb8aad2e59c4c9685f7aa329dce6f4d84e269666212e3d17bb30ad191229110c787dcee85234405de7", 0xf4, 0x4000, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}, 0x1, 0x0, 0x0, 0x20024080}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001600010000000000010000000a002000", @ANYRES32=0x0], 0x18}}, 0x800) 173.33381ms ago: executing program 6 (id=5812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf2506000000"], 0x14}}, 0x8000) accept4$nfc_llcp(r1, 0x0, 0x0, 0x800) 74.033717ms ago: executing program 8 (id=5813): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x128200}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 73.804292ms ago: executing program 6 (id=5814): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10b6c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x800}, @val={0x0, 0x1, 0x3, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0xd3, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x3c}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "37ef2d", 0x2, 0x0, 0x0, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xd1e0}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}], "52f8e71f59dcd09423162f596b0a8630bce0e5b05e10afc630bce3e0d9c341a2ccbe425e4c211d864601b4672144806765cb8040ea85309aa864ae3c15bc5bc2a51ef0172c90f857f40752e6580a5629faaf2ebb0081ae88e1b72e3707045f3da703d0a75c20d6ba4bf514ea1c6f296b64ec64df6d0a9b691200"/131}}}}}}, 0x109) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0x70}}, 0x20000080) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x11) timer_create(0x7, 0x0, &(0x7f0000000740)) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r3) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r6 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 0s ago: executing program 1 (id=5815): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x100, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, {0xa, 0x440, 0x8, @private1, 0x8}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x2, 0x3, {"9b510f6c76934ae82f5114ef641ff5ce"}, 0xf, 0x7f, 0x4}}}, 0x90) kernel console output (not intermixed with test programs): f94f13c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.436678][T21580] RAX: ffffffffffffffda RBX: 00007f94f0775fa0 RCX: 00007f94f0585d29 [ 465.438982][T21580] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 465.441276][T21580] RBP: 00007f94f13c5090 R08: 0000000000000000 R09: 0000000000000000 [ 465.443446][T21580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.445727][T21580] R13: 0000000000000000 R14: 00007f94f0775fa0 R15: 00007fff795ecbb8 [ 465.448074][T21580] [ 465.449098][ C3] vkms_vblank_simulate: vblank timer overrun [ 465.671863][T21590] FAULT_INJECTION: forcing a failure. [ 465.671863][T21590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.683694][T21590] CPU: 2 UID: 0 PID: 21590 Comm: syz.8.5288 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 465.686826][T21590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.689777][T21590] Call Trace: [ 465.690748][T21590] [ 465.691596][T21590] dump_stack_lvl+0x16c/0x1f0 [ 465.692957][T21590] should_fail_ex+0x497/0x5b0 [ 465.694291][T21590] _copy_from_user+0x2e/0xd0 [ 465.695631][T21590] copy_msghdr_from_user+0x99/0x160 [ 465.697076][T21590] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 465.698745][T21590] ? __pfx___lock_acquire+0x10/0x10 [ 465.700235][T21590] ___sys_recvmsg+0xdc/0x1a0 [ 465.701561][T21590] ? __pfx____sys_recvmsg+0x10/0x10 [ 465.703036][T21590] ? __pfx_lock_release+0x10/0x10 [ 465.704488][T21590] ? trace_lock_acquire+0x14e/0x1f0 [ 465.706001][T21590] do_recvmmsg+0x2f8/0x740 [ 465.707263][T21590] ? __pfx_do_recvmmsg+0x10/0x10 [ 465.708696][T21590] ? vfs_write+0x306/0x1150 [ 465.710013][T21590] ? __mutex_unlock_slowpath+0x164/0x690 [ 465.711635][T21590] ? __fget_files+0x206/0x3a0 [ 465.713013][T21590] __x64_sys_recvmmsg+0x239/0x290 [ 465.714464][T21590] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 465.716059][T21590] do_syscall_64+0xcd/0x250 [ 465.716754][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 465.717385][T21590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.720770][T21590] RIP: 0033:0x7f94f0585d29 [ 465.722068][T21590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.728336][T21590] RSP: 002b:00007f94f13c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 465.730724][T21590] RAX: ffffffffffffffda RBX: 00007f94f0775fa0 RCX: 00007f94f0585d29 [ 465.732986][T21590] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 465.735253][T21590] RBP: 00007f94f13c5090 R08: 0000000000000000 R09: 0000000000000000 [ 465.737547][T21590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.740672][T21590] R13: 0000000000000000 R14: 00007f94f0775fa0 R15: 00007fff795ecbb8 [ 465.743335][T21590] [ 465.979362][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.655842][T21623] dccp_v6_rcv: dropped packet with invalid checksum [ 467.054247][T21634] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5301'. [ 467.063990][T21634] 9pnet_fd: Insufficient options for proto=fd [ 467.085057][ T5942] Bluetooth: hci0: command tx timeout [ 467.090808][T21635] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 467.099478][T21634] 0: reclassify loop, rule prio 0, protocol 800 [ 467.365351][T21647] FAULT_INJECTION: forcing a failure. [ 467.365351][T21647] name failslab, interval 1, probability 0, space 0, times 0 [ 467.369012][T21647] CPU: 0 UID: 0 PID: 21647 Comm: syz.2.5304 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 467.372045][T21647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.375109][T21647] Call Trace: [ 467.376068][T21647] [ 467.376910][T21647] dump_stack_lvl+0x16c/0x1f0 [ 467.378280][T21647] should_fail_ex+0x497/0x5b0 [ 467.379655][T21647] ? fs_reclaim_acquire+0xae/0x150 [ 467.381120][T21647] should_failslab+0xc2/0x120 [ 467.382477][T21647] __kmalloc_noprof+0xcb/0x510 [ 467.383955][T21647] ? unwind_get_return_address+0x59/0xa0 [ 467.385634][T21647] ? arch_stack_walk+0xa7/0x100 [ 467.387067][T21647] constrain_params_by_rules+0x176/0xca0 [ 467.388681][T21647] ? stack_trace_save+0x95/0xd0 [ 467.390101][T21647] ? stack_depot_save_flags+0x28/0x9c0 [ 467.391672][T21647] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 467.393448][T21647] ? __kasan_kmalloc+0xaa/0xb0 [ 467.394828][T21647] ? snd_pcm_oss_change_params_locked+0x242/0x3a60 [ 467.396715][T21647] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 467.398552][T21647] ? snd_pcm_oss_get_formats+0x7f/0x350 [ 467.400146][T21647] ? rcu_is_watching+0x12/0xc0 [ 467.401535][T21647] ? snd_interval_refine+0x2fa/0x580 [ 467.403043][T21647] snd_pcm_hw_refine+0x7e8/0xad0 [ 467.404481][T21647] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 467.406051][T21647] ? __asan_memset+0x23/0x50 [ 467.407382][T21647] ? _snd_pcm_hw_param_min+0x259/0x630 [ 467.408953][T21647] snd_pcm_oss_change_params_locked+0x645/0x3a60 [ 467.410791][T21647] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 467.412727][T21647] ? __pfx___mutex_lock+0x10/0x10 [ 467.414188][T21647] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 467.415984][T21647] snd_pcm_oss_get_formats+0x7f/0x350 [ 467.417538][T21647] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 467.419266][T21647] ? lock_acquire+0x2f/0xb0 [ 467.420590][T21647] ? __might_fault+0xe3/0x190 [ 467.421946][T21647] snd_pcm_oss_ioctl+0x2ee1/0x3780 [ 467.423420][T21647] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 467.425002][T21647] ? selinux_file_ioctl+0x180/0x270 [ 467.426503][T21647] ? selinux_file_ioctl+0xb4/0x270 [ 467.427975][T21647] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 467.429551][T21647] __x64_sys_ioctl+0x190/0x200 [ 467.430931][T21647] do_syscall_64+0xcd/0x250 [ 467.432242][T21647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.433939][T21647] RIP: 0033:0x7f1854b85d29 [ 467.435239][T21647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.440896][T21647] RSP: 002b:00007f1855a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.443276][T21647] RAX: ffffffffffffffda RBX: 00007f1854d75fa0 RCX: 00007f1854b85d29 [ 467.445542][T21647] RDX: 0000000020000080 RSI: 00000000c0045005 RDI: 0000000000000003 [ 467.447791][T21647] RBP: 00007f1855a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 467.450040][T21647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.452296][T21647] R13: 0000000000000000 R14: 00007f1854d75fa0 R15: 00007ffc9fcf9d28 [ 467.454527][T21647] [ 467.616271][T21651] batman_adv: batadv0: Adding interface: dummy0 [ 467.618104][T21651] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.625890][T21651] batman_adv: batadv0: Interface activated: dummy0 [ 467.635804][T21651] batadv0: mtu less than device minimum [ 467.638246][T21651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.642090][T21651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.645719][T21651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.649355][T21651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 468.368058][ T1146] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.379702][ T9653] net_ratelimit: 15 callbacks suppressed [ 468.379718][ T9653] 0: reclassify loop, rule prio 0, protocol 800 [ 468.384671][ T1146] 0: reclassify loop, rule prio 0, protocol 800 [ 468.860202][ T39] kauditd_printk_skb: 1983 callbacks suppressed [ 468.860216][ T39] audit: type=1400 audit(443.318:90264): avc: denied { search } for pid=21656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.870762][ T39] audit: type=1400 audit(443.318:90265): avc: denied { search } for pid=21656 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.881111][ T39] audit: type=1400 audit(443.318:90266): avc: denied { search } for pid=21656 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.887772][ T39] audit: type=1400 audit(443.318:90267): avc: denied { search } for pid=21656 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.894420][ T39] audit: type=1400 audit(443.318:90268): avc: denied { search } for pid=21656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.901187][ T39] audit: type=1400 audit(443.318:90269): avc: denied { read } for pid=21656 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.908539][ T39] audit: type=1400 audit(443.318:90270): avc: denied { read open } for pid=21656 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.916421][ T39] audit: type=1400 audit(443.318:90271): avc: denied { getattr } for pid=21656 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.924285][ T39] audit: type=1400 audit(443.318:90272): avc: denied { search } for pid=21656 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.927694][T21656] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.644458][ T5302] Bluetooth: hci4: command 0x0406 tx timeout [ 473.842055][ T9653] 0: reclassify loop, rule prio 0, protocol 800 [ 474.257731][ T39] kauditd_printk_skb: 1527 callbacks suppressed [ 474.257749][ T39] audit: type=1400 audit(448.350:91798): avc: denied { search } for pid=21678 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.268328][ T39] audit: type=1400 audit(448.350:91799): avc: denied { read } for pid=21678 comm="cmp" name="resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.276447][ T39] audit: type=1400 audit(448.369:91800): avc: denied { read open } for pid=21678 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.284711][ T39] audit: type=1400 audit(448.369:91801): avc: denied { search } for pid=21678 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.292531][ T39] audit: type=1400 audit(448.369:91802): avc: denied { search } for pid=21678 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.300596][ T39] audit: type=1400 audit(448.369:91803): avc: denied { search } for pid=21678 comm="cmp" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.309851][ T39] audit: type=1400 audit(448.369:91804): avc: denied { read } for pid=21678 comm="cmp" name="resolv.conf.lapb14.ipv4ll" dev="tmpfs" ino=11033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.318878][ T39] audit: type=1400 audit(448.369:91805): avc: denied { read open } for pid=21678 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.lapb14.ipv4ll" dev="tmpfs" ino=11033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.328693][ T39] audit: type=1400 audit(448.369:91806): avc: denied { getattr } for pid=21678 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.337171][ T39] audit: type=1400 audit(448.369:91807): avc: denied { getattr } for pid=21678 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.lapb14.ipv4ll" dev="tmpfs" ino=11033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.526241][ T9648] 0: reclassify loop, rule prio 0, protocol 800 [ 479.666335][ T39] kauditd_printk_skb: 1339 callbacks suppressed [ 479.666353][ T39] audit: type=1400 audit(453.411:93147): avc: denied { search } for pid=21701 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.676780][ T39] audit: type=1400 audit(453.411:93148): avc: denied { search } for pid=21701 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.685240][ T39] audit: type=1400 audit(453.411:93149): avc: denied { search } for pid=21701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.693748][ T39] audit: type=1400 audit(453.420:93150): avc: denied { search } for pid=21701 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.703017][ T39] audit: type=1400 audit(453.420:93151): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 479.708998][ T39] audit: type=1400 audit(453.439:93152): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.714914][ T39] audit: type=1400 audit(453.439:93153): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.721062][ T39] audit: type=1400 audit(453.439:93154): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.727449][ T39] audit: type=1400 audit(453.448:93155): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.733721][ T39] audit: type=1400 audit(453.448:93156): avc: denied { search } for pid=21702 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.010784][ T9653] 0: reclassify loop, rule prio 0, protocol 800 [ 480.012908][ T1146] 0: reclassify loop, rule prio 0, protocol 800 [ 482.976842][T21723] 0: reclassify loop, rule prio 0, protocol 800 [ 483.353495][T21737] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 483.488376][T21743] hfsplus: unable to find HFS+ superblock [ 483.754212][T21749] Bluetooth: MGMT ver 1.23 [ 483.937563][T21761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5320'. [ 483.950322][T21755] FAULT_INJECTION: forcing a failure. [ 483.950322][T21755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.954148][T21755] CPU: 3 UID: 0 PID: 21755 Comm: syz.8.5319 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 483.957287][T21755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.960159][T21755] Call Trace: [ 483.961162][T21755] [ 483.962038][T21755] dump_stack_lvl+0x16c/0x1f0 [ 483.963436][T21755] should_fail_ex+0x497/0x5b0 [ 483.964831][T21755] copy_fpstate_to_sigframe+0x894/0xb20 [ 483.966449][T21755] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 483.968227][T21755] ? find_held_lock+0x2d/0x110 [ 483.969648][T21755] get_sigframe+0x4aa/0x9c0 [ 483.970984][T21755] ? __pfx_get_sigframe+0x10/0x10 [ 483.972469][T21755] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.973987][T21755] ? siginfo_layout+0x177/0x290 [ 483.975418][T21755] x64_setup_rt_frame+0x129/0xcf0 [ 483.976919][T21755] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 483.978729][T21755] ? __do_sys_wait4+0xd2/0x170 [ 483.980305][T21755] arch_do_signal_or_restart+0x5e6/0x7e0 [ 483.981955][T21755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.983742][T21755] ? __pfx_ksys_write+0x10/0x10 [ 483.985179][T21755] syscall_exit_to_user_mode+0x150/0x2a0 [ 483.986819][T21755] do_syscall_64+0xda/0x250 [ 483.988165][T21755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.989908][T21755] RIP: 0033:0x7f94f0585d29 [ 483.991220][T21755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.996775][T21755] RSP: 002b:00007f94f13c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 483.999204][T21755] RAX: fffffffffffffff2 RBX: 00007f94f0775fa0 RCX: 00007f94f0585d29 [ 484.001640][T21755] RDX: 0000000000000008 RSI: 9999999999999999 RDI: 0000000000000000 [ 484.003912][T21755] RBP: 00007f94f13c5090 R08: 0000000000000000 R09: 0000000000000000 [ 484.006236][T21755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.008522][T21755] R13: 0000000000000000 R14: 00007f94f0775fa0 R15: 00007fff795ecbb8 [ 484.010805][T21755] [ 484.338718][T21770] FAULT_INJECTION: forcing a failure. [ 484.338718][T21770] name failslab, interval 1, probability 0, space 0, times 0 [ 484.342388][T21770] CPU: 1 UID: 0 PID: 21770 Comm: syz.8.5322 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 484.345430][T21770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.348464][T21770] Call Trace: [ 484.349441][T21770] [ 484.350313][T21770] dump_stack_lvl+0x16c/0x1f0 [ 484.351680][T21770] should_fail_ex+0x497/0x5b0 [ 484.353055][T21770] should_failslab+0xc2/0x120 [ 484.354418][T21770] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 484.355978][T21770] ? skb_clone+0x190/0x3f0 [ 484.357277][T21770] skb_clone+0x190/0x3f0 [ 484.358503][T21770] netlink_deliver_tap+0xabd/0xd30 [ 484.359983][T21770] netlink_unicast+0x5e1/0x7f0 [ 484.361367][T21770] ? __pfx_netlink_unicast+0x10/0x10 [ 484.362876][T21770] netlink_sendmsg+0x8b8/0xd70 [ 484.364257][T21770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.365822][T21770] ____sys_sendmsg+0xaaf/0xc90 [ 484.367252][T21770] ? copy_msghdr_from_user+0x10b/0x160 [ 484.368833][T21770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.370371][T21770] ___sys_sendmsg+0x135/0x1e0 [ 484.371741][T21770] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.373243][T21770] ? __pfx_lock_release+0x10/0x10 [ 484.374686][T21770] ? trace_lock_acquire+0x14e/0x1f0 [ 484.376231][T21770] ? __fget_files+0x206/0x3a0 [ 484.377602][T21770] __sys_sendmsg+0x16e/0x220 [ 484.378945][T21770] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.380440][T21770] do_syscall_64+0xcd/0x250 [ 484.381761][T21770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.383580][T21770] RIP: 0033:0x7f94f0585d29 [ 484.384897][T21770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.390351][T21770] RSP: 002b:00007f94f13c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.392642][T21770] RAX: ffffffffffffffda RBX: 00007f94f0775fa0 RCX: 00007f94f0585d29 [ 484.394864][T21770] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 484.397179][T21770] RBP: 00007f94f13c5090 R08: 0000000000000000 R09: 0000000000000000 [ 484.399443][T21770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.401717][T21770] R13: 0000000000000000 R14: 00007f94f0775fa0 R15: 00007fff795ecbb8 [ 484.403979][T21770] [ 484.505909][T21776] 0: reclassify loop, rule prio 0, protocol 800 [ 484.692704][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5327'. [ 485.069978][ T39] kauditd_printk_skb: 1566 callbacks suppressed [ 485.069989][ T39] audit: type=1400 audit(458.472:94719): avc: denied { read write } for pid=19452 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.092298][ T39] audit: type=1400 audit(458.490:94720): avc: denied { search } for pid=21792 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.116757][ T39] audit: type=1400 audit(458.490:94721): avc: denied { search } for pid=21792 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.125497][ T39] audit: type=1400 audit(458.490:94722): avc: denied { search } for pid=21792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.133952][ T39] audit: type=1400 audit(458.490:94723): avc: denied { search } for pid=21792 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.140638][ T39] audit: type=1400 audit(458.490:94724): avc: denied { read write open } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.150354][ T39] audit: type=1400 audit(458.490:94725): avc: denied { ioctl } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.159084][ T39] audit: type=1400 audit(458.518:94726): avc: denied { search } for pid=21796 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.166888][ T39] audit: type=1400 audit(458.518:94727): avc: denied { search } for pid=21796 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.173160][ T39] audit: type=1400 audit(458.518:94728): avc: denied { search } for pid=21796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.233676][T21798] netfs: Couldn't get user pages (rc=-14) [ 485.235359][T21798] netfs: Zero-sized read [R=e] [ 485.437852][T21800] FAULT_INJECTION: forcing a failure. [ 485.437852][T21800] name failslab, interval 1, probability 0, space 0, times 0 [ 485.451651][T21800] CPU: 2 UID: 0 PID: 21800 Comm: syz.3.5333 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 485.454771][T21800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 485.457878][T21800] Call Trace: [ 485.458847][T21800] [ 485.459720][T21800] dump_stack_lvl+0x16c/0x1f0 [ 485.461095][T21800] should_fail_ex+0x497/0x5b0 [ 485.462543][T21800] ? fs_reclaim_acquire+0xae/0x150 [ 485.463988][T21800] should_failslab+0xc2/0x120 [ 485.465359][T21800] __kmalloc_node_noprof+0xd1/0x510 [ 485.466871][T21800] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 485.468476][T21800] __kvmalloc_node_noprof+0xad/0x1a0 [ 485.469998][T21800] ? __pfx_sl_setup+0x10/0x10 [ 485.471357][T21800] alloc_netdev_mqs+0xbbc/0x1510 [ 485.472795][T21800] ? slip_open+0x31d/0x1140 [ 485.474109][T21800] slip_open+0x35d/0x1140 [ 485.475362][T21800] ? __pfx_lock_release+0x10/0x10 [ 485.476825][T21800] ? lock_acquire+0x2f/0xb0 [ 485.478140][T21800] ? tty_set_ldisc+0x26f/0x720 [ 485.479786][T21800] ? __pfx_slip_open+0x10/0x10 [ 485.481218][T21800] ? down_write+0x14e/0x200 [ 485.482558][T21800] ? __pfx_slip_open+0x10/0x10 [ 485.483948][T21800] tty_ldisc_open+0x9c/0x120 [ 485.485317][T21800] tty_set_ldisc+0x318/0x720 [ 485.486679][T21800] tty_ioctl+0xbd0/0x15d0 [ 485.487943][T21800] ? __pfx_tty_ioctl+0x10/0x10 [ 485.489345][T21800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 485.491309][T21800] ? __pfx_lock_release+0x10/0x10 [ 485.492781][T21800] ? selinux_file_ioctl+0x180/0x270 [ 485.494319][T21800] ? selinux_file_ioctl+0xb4/0x270 [ 485.495803][T21800] ? __pfx_tty_ioctl+0x10/0x10 [ 485.497230][T21800] __x64_sys_ioctl+0x190/0x200 [ 485.498625][T21800] do_syscall_64+0xcd/0x250 [ 485.499969][T21800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.501705][T21800] RIP: 0033:0x7fc278985d29 [ 485.502998][T21800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.508991][T21800] RSP: 002b:00007fc27973d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.511386][T21800] RAX: ffffffffffffffda RBX: 00007fc278b75fa0 RCX: 00007fc278985d29 [ 485.513690][T21800] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 485.516112][T21800] RBP: 00007fc27973d090 R08: 0000000000000000 R09: 0000000000000000 [ 485.518428][T21800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.520731][T21800] R13: 0000000000000000 R14: 00007fc278b75fa0 R15: 00007fffcd88c128 [ 485.523021][T21800] [ 485.900591][ T5302] Bluetooth: hci0: command 0x0c1a tx timeout [ 485.903457][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 485.943660][T21823] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 485.992333][T21824] 0: reclassify loop, rule prio 0, protocol 800 [ 486.160487][ T7365] 0: reclassify loop, rule prio 0, protocol 800 [ 486.163124][ T7365] 0: reclassify loop, rule prio 0, protocol 800 [ 487.587198][T21862] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5348'. [ 487.597735][T21862] input: syz1 as /devices/virtual/input/input39 [ 487.836163][T21867] wg2: entered promiscuous mode [ 487.837844][T21867] wg2: entered allmulticast mode [ 487.870108][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5349'. [ 487.872687][T21866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5349'. [ 488.046569][T21877] CUSE: zero length info key specified [ 488.221064][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 488.434048][T21890] FAULT_INJECTION: forcing a failure. [ 488.434048][T21890] name failslab, interval 1, probability 0, space 0, times 0 [ 488.437923][T21890] CPU: 0 UID: 0 PID: 21890 Comm: syz.5.5357 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 488.440986][T21890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 488.443944][T21890] Call Trace: [ 488.444920][T21890] [ 488.445808][T21890] dump_stack_lvl+0x16c/0x1f0 [ 488.447290][T21890] should_fail_ex+0x497/0x5b0 [ 488.448652][T21890] should_failslab+0xc2/0x120 [ 488.450008][T21890] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 488.451807][T21890] ? sidtab_sid2str_get+0x17a/0x680 [ 488.453303][T21890] kmemdup_noprof+0x29/0x60 [ 488.454608][T21890] sidtab_sid2str_get+0x17a/0x680 [ 488.456093][T21890] sidtab_entry_to_string+0x33/0x110 [ 488.457615][T21890] security_sid_to_context_core+0x35c/0x640 [ 488.459319][T21890] avc_audit_post_callback+0x10b/0x8c0 [ 488.460844][T21890] ? audit_log_format+0xe9/0x130 [ 488.462233][T21890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 488.463916][T21890] ? skb_put+0x138/0x1b0 [ 488.465148][T21890] ? audit_log_n_string+0x253/0x540 [ 488.466676][T21890] ? audit_log_n_untrustedstring+0xf2/0x100 [ 488.468376][T21890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 488.470100][T21890] common_lsm_audit+0x33f/0x2250 [ 488.471529][T21890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 488.473255][T21890] ? __pfx_common_lsm_audit+0x10/0x10 [ 488.474786][T21890] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 488.476499][T21890] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.477982][T21890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 488.479657][T21890] ? avc_denied+0x43b/0x780 [ 488.480972][T21890] ? slow_avc_audit+0x17d/0x210 [ 488.482368][T21890] slow_avc_audit+0x17d/0x210 [ 488.483758][T21890] ? __pfx_slow_avc_audit+0x10/0x10 [ 488.485258][T21890] ? __pfx_mark_lock+0x10/0x10 [ 488.486651][T21890] avc_has_perm+0x18d/0x1c0 [ 488.487953][T21890] ? __pfx_avc_has_perm+0x10/0x10 [ 488.489411][T21890] ? __pfx___lock_acquire+0x10/0x10 [ 488.490920][T21890] sock_has_perm+0x253/0x2f0 [ 488.492241][T21890] ? __pfx_sock_has_perm+0x10/0x10 [ 488.493710][T21890] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 488.495747][T21890] ? import_ubuf+0x1b6/0x220 [ 488.497586][T21890] security_socket_sendmsg+0x9b/0x240 [ 488.499623][T21890] ____sys_sendmsg+0x7ec/0xc90 [ 488.501422][T21890] ? copy_msghdr_from_user+0x10b/0x160 [ 488.503487][T21890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.505522][T21890] ___sys_sendmsg+0x135/0x1e0 [ 488.507310][T21890] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.509267][T21890] ? __pfx_lock_release+0x10/0x10 [ 488.511136][T21890] ? trace_lock_acquire+0x14e/0x1f0 [ 488.513093][T21890] ? __fget_files+0x206/0x3a0 [ 488.514870][T21890] __sys_sendmsg+0x16e/0x220 [ 488.516624][T21890] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.518554][T21890] do_syscall_64+0xcd/0x250 [ 488.520291][T21890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.522538][T21890] RIP: 0033:0x7f5565785d29 [ 488.524262][T21890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.530630][T21890] RSP: 002b:00007f556666a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.533102][T21890] RAX: ffffffffffffffda RBX: 00007f5565975fa0 RCX: 00007f5565785d29 [ 488.535345][T21890] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 488.537624][T21890] RBP: 00007f556666a090 R08: 0000000000000000 R09: 0000000000000000 [ 488.539876][T21890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.542119][T21890] R13: 0000000000000000 R14: 00007f5565975fa0 R15: 00007fff20edf348 [ 488.544346][T21890] [ 488.552152][T21886] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 488.555027][T21890] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5357'. [ 488.821952][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5358'. [ 488.824667][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5358'. [ 488.827900][T21899] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 489.282032][T21920] »»»»»» speed is unknown, defaulting to 1000 [ 489.348021][T21920] »»»»»» speed is unknown, defaulting to 1000 [ 489.350746][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5365'. [ 489.848903][T21929] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 490.326566][T21946] input: syz1 as /devices/virtual/input/input40 [ 490.427475][ T39] kauditd_printk_skb: 1831 callbacks suppressed [ 490.427490][ T39] audit: type=1400 audit(463.485:96560): avc: denied { read write } for pid=21417 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.446539][ T39] audit: type=1400 audit(463.485:96561): avc: denied { read write open } for pid=21417 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.466936][ T39] audit: type=1400 audit(463.485:96562): avc: denied { read write } for pid=17110 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.473282][ T39] audit: type=1400 audit(463.485:96563): avc: denied { ioctl } for pid=21417 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.497814][ T39] audit: type=1400 audit(463.485:96564): avc: denied { read write open } for pid=17110 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.511753][ T39] audit: type=1400 audit(463.485:96565): avc: denied { ioctl } for pid=17110 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.527651][ T39] audit: type=1400 audit(463.495:96566): avc: denied { read } for pid=5336 comm="acpid" name="event3" dev="devtmpfs" ino=3304 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.533870][ T39] audit: type=1400 audit(463.495:96567): avc: denied { read open } for pid=5336 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3304 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.540549][ T39] audit: type=1400 audit(463.560:96568): avc: denied { read write } for pid=21953 comm="syz.8.5374" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.547140][ T39] audit: type=1400 audit(463.560:96569): avc: denied { read write open } for pid=21953 comm="syz.8.5374" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.291176][ T5942] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 491.653572][T21987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 491.684120][T21995] xt_hashlimit: overflow, try lower: 0/0 [ 491.865069][T21999] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5388'. [ 491.958303][T21999] netlink: 'syz.8.5388': attribute type 21 has an invalid length. [ 491.960674][T21999] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5388'. [ 492.054907][T21999] Context (ID=0x0) not attached to queue pair (handle=0x2:0x4) [ 492.066174][T21999] syz.8.5388: attempt to access beyond end of device [ 492.066174][T21999] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 492.072368][T22007] fuse: Bad value for 'fd' [ 492.080561][ T5302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.084316][T21999] (syz.8.5388,21999,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 492.084659][ T5302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.086563][T21999] (syz.8.5388,21999,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 492.094843][T22003] pim6reg1: entered promiscuous mode [ 492.101180][ T5302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.101240][T21999] (syz.8.5388,21999,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 492.106269][ T5302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.110058][ T5302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 492.110917][T21999] (syz.8.5388,21999,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 492.111844][T22003] pim6reg1: entered allmulticast mode [ 492.116060][ T5302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.260566][T22008] »»»»»» speed is unknown, defaulting to 1000 [ 492.513645][T22008] »»»»»» speed is unknown, defaulting to 1000 [ 492.672296][T22028] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 492.754778][T22030] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5398'. [ 492.933440][T22035] fuse: Bad value for 'fd' [ 493.102872][T22008] chnl_net:caif_netlink_parms(): no params data found [ 493.249575][T22008] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.266665][T22008] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.268865][T22008] bridge_slave_0: entered allmulticast mode [ 493.271701][T22008] bridge_slave_0: entered promiscuous mode [ 493.289275][T22008] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.291339][T22008] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.293964][T22008] bridge_slave_1: entered allmulticast mode [ 493.296507][T22008] bridge_slave_1: entered promiscuous mode [ 493.390571][T22008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.408910][T22008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.431849][T22057] FAULT_INJECTION: forcing a failure. [ 493.431849][T22057] name failslab, interval 1, probability 0, space 0, times 0 [ 493.435528][T22057] CPU: 3 UID: 0 PID: 22057 Comm: syz.2.5407 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 493.438592][T22057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.441650][T22057] Call Trace: [ 493.442619][T22057] [ 493.443478][T22057] dump_stack_lvl+0x16c/0x1f0 [ 493.444865][T22057] should_fail_ex+0x497/0x5b0 [ 493.446275][T22057] should_failslab+0xc2/0x120 [ 493.447638][T22057] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 493.449463][T22057] ? sidtab_sid2str_get+0x17a/0x680 [ 493.450958][T22057] kmemdup_noprof+0x29/0x60 [ 493.452271][T22057] sidtab_sid2str_get+0x17a/0x680 [ 493.453725][T22057] sidtab_entry_to_string+0x33/0x110 [ 493.455282][T22057] security_sid_to_context_core+0x35c/0x640 [ 493.456984][T22057] avc_audit_post_callback+0x10b/0x8c0 [ 493.458560][T22057] ? audit_log_format+0xe9/0x130 [ 493.460019][T22057] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 493.461739][T22057] ? skb_put+0x138/0x1b0 [ 493.462959][T22057] ? audit_log_n_string+0x253/0x540 [ 493.464455][T22057] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 493.466193][T22057] common_lsm_audit+0x33f/0x2250 [ 493.467595][T22057] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 493.469334][T22057] ? __pfx_common_lsm_audit+0x10/0x10 [ 493.470877][T22057] ? find_held_lock+0x2d/0x110 [ 493.472268][T22057] ? slow_avc_audit+0x17d/0x210 [ 493.473702][T22057] slow_avc_audit+0x17d/0x210 [ 493.475080][T22057] ? __pfx_slow_avc_audit+0x10/0x10 [ 493.476604][T22057] ? avc_has_extended_perms+0x33f/0x1580 [ 493.478223][T22057] avc_has_extended_perms+0xa34/0x1580 [ 493.479800][T22057] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 493.481507][T22057] ? tomoyo_path_number_perm+0x298/0x590 [ 493.483121][T22057] ? tomoyo_path_number_perm+0x190/0x590 [ 493.484738][T22057] ? __pfx___might_resched+0x10/0x10 [ 493.486286][T22057] ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 493.488124][T22057] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 493.490095][T22057] ? __pfx_lock_release+0x10/0x10 [ 493.491545][T22057] ? selinux_file_ioctl+0x180/0x270 [ 493.493174][T22057] selinux_file_ioctl+0x180/0x270 [ 493.494634][T22057] security_file_ioctl+0xc6/0x240 [ 493.496085][T22057] __x64_sys_ioctl+0xb7/0x200 [ 493.497457][T22057] do_syscall_64+0xcd/0x250 [ 493.498766][T22057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.500479][T22057] RIP: 0033:0x7f1854b85d29 [ 493.501764][T22057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.507234][T22057] RSP: 002b:00007f1855a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.509609][T22057] RAX: ffffffffffffffda RBX: 00007f1854d75fa0 RCX: 00007f1854b85d29 [ 493.511866][T22057] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 493.514191][T22057] RBP: 00007f1855a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 493.516478][T22057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.518715][T22057] R13: 0000000000000000 R14: 00007f1854d75fa0 R15: 00007ffc9fcf9d28 [ 493.520987][T22057] [ 493.539667][T22057] input: syz1 as /devices/virtual/input/input41 [ 493.580529][T22008] team0: Port device team_slave_0 added [ 493.589384][T22008] team0: Port device team_slave_1 added [ 493.624845][T22008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.626903][T22008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.640355][T22008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.664783][T22008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.666844][T22008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.682894][T22008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.690023][T22065] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 493.922642][T22068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 493.965434][T22068] FAULT_INJECTION: forcing a failure. [ 493.965434][T22068] name failslab, interval 1, probability 0, space 0, times 0 [ 493.969326][T22068] CPU: 0 UID: 0 PID: 22068 Comm: syz.2.5410 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 493.972185][T22068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.973784][T22008] hsr_slave_0: entered promiscuous mode [ 493.975085][T22068] Call Trace: [ 493.975092][T22068] [ 493.978462][T22068] dump_stack_lvl+0x16c/0x1f0 [ 493.979943][T22068] should_fail_ex+0x497/0x5b0 [ 493.981698][T22068] ? fs_reclaim_acquire+0xae/0x150 [ 493.983442][T22068] should_failslab+0xc2/0x120 [ 493.984958][T22068] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 493.986630][T22068] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 493.988443][T22068] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 493.990377][T22068] mmu_topup_memory_caches+0x22/0xd0 [ 493.992125][T22068] kvm_mmu_load+0xda/0x21f0 [ 493.993596][T22068] ? kvm_apic_has_interrupt+0xb6/0x190 [ 493.995439][T22068] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 493.997341][T22068] ? vmx_get_rflags+0x100/0x420 [ 493.999035][T22068] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 494.000614][T22068] ? __pfx_kvm_mmu_load+0x10/0x10 [ 494.002001][T22068] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 494.003626][T22068] ? kvm_check_and_inject_events+0x725/0x12e0 [ 494.005464][T22068] ? kvm_setup_guest_pvclock+0x721/0x730 [ 494.007338][T22068] vcpu_run+0x33a4/0x4f50 [ 494.008722][T22068] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 494.010548][T22068] ? __pfx_vcpu_run+0x10/0x10 [ 494.011905][T22068] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 494.013516][T22068] ? rcu_is_watching+0x12/0xc0 [ 494.014842][T22068] ? trace_lock_acquire+0x14e/0x1f0 [ 494.016640][T22068] ? __local_bh_enable_ip+0xa4/0x120 [ 494.018526][T22068] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.020373][T22068] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 494.022319][T22068] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 494.023915][T22068] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 494.025518][T22068] kvm_vcpu_ioctl+0x6ce/0x1520 [ 494.027024][T22068] ? do_vfs_ioctl+0x513/0x1990 [ 494.028724][T22068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 494.030488][T22068] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 494.032421][T22068] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 494.034901][T22068] ? __pfx_lock_release+0x10/0x10 [ 494.036467][T22068] ? selinux_file_ioctl+0x180/0x270 [ 494.038357][T22068] ? selinux_file_ioctl+0xb4/0x270 [ 494.040121][T22068] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 494.041648][T22068] __x64_sys_ioctl+0x190/0x200 [ 494.043408][T22068] do_syscall_64+0xcd/0x250 [ 494.045051][T22068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.046749][T22068] RIP: 0033:0x7f1854b85d29 [ 494.048259][T22068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.054737][T22068] RSP: 002b:00007f1855a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.057834][T22068] RAX: ffffffffffffffda RBX: 00007f1854d75fa0 RCX: 00007f1854b85d29 [ 494.060685][T22068] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 494.063510][T22068] RBP: 00007f1855a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 494.066133][T22068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.068479][T22068] R13: 0000000000000000 R14: 00007f1854d75fa0 R15: 00007ffc9fcf9d28 [ 494.070769][T22068] [ 494.100558][T22008] hsr_slave_1: entered promiscuous mode [ 494.154328][T22008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.156710][T22008] Cannot create hsr debugfs directory [ 494.282104][ T5302] Bluetooth: hci0: command tx timeout [ 494.458278][T22008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.605546][T22008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.746924][T22008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.999032][T22008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.255330][T22008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.259047][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5416'. [ 495.261713][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5416'. [ 495.295128][T22008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.311922][T22008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.318225][T22008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.529309][T22008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.574002][T22008] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.593580][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.595738][ T9648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.611431][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.613720][ T9648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.680024][T22008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.682982][T22008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.690572][ T5302] Bluetooth: hci3: ISO packet for unknown connection handle 2 [ 495.778619][ T39] kauditd_printk_skb: 16637 callbacks suppressed [ 495.778630][ T39] audit: type=1326 audit(468.480:113153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94f05847df code=0x50000 [ 495.786678][ T39] audit: type=1326 audit(468.499:113154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.797211][ T39] audit: type=1326 audit(468.499:113155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.805250][ T39] audit: type=1326 audit(468.499:113156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.812993][ T39] audit: type=1326 audit(468.499:113157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.818817][ T39] audit: type=1326 audit(468.499:113158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.827188][ T39] audit: type=1326 audit(468.499:113159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.834459][ T39] audit: type=1326 audit(468.499:113160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.841814][ T39] audit: type=1326 audit(468.499:113161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 495.851607][ T39] audit: type=1326 audit(468.499:113162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22082 comm="syz.8.5412" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f0585d29 code=0x50000 [ 496.505739][ T5302] Bluetooth: hci0: command tx timeout [ 496.788906][T22122] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 496.918027][T22008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.047648][T22008] veth0_vlan: entered promiscuous mode [ 497.074204][T22008] veth1_vlan: entered promiscuous mode [ 497.127478][T22008] veth0_macvtap: entered promiscuous mode [ 497.139367][T22008] veth1_macvtap: entered promiscuous mode [ 497.165195][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.168767][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.171266][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.174481][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.176997][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.187244][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.192363][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.195039][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.197540][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.209563][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.214653][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.217308][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.219790][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.223950][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.226442][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.229773][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.239532][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.242209][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.247937][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.250545][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.253786][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.263156][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.270086][T22008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.285580][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.292133][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.294692][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.299280][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.301810][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.304453][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.307256][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.325331][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.327878][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.330586][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.333102][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.335873][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.339009][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.351488][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.354770][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.358205][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.363670][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.371000][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.378308][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.381076][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.387199][T22008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.389872][T22008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.393102][T22008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.416355][T22008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.419300][T22008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.422181][T22008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.425232][T22008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.630521][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.649558][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.690140][T12779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.695098][T12779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.862980][T22141] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5426'. [ 498.600238][T22157] fuse: Bad value for 'fd' [ 498.729709][ T5302] Bluetooth: hci0: command tx timeout [ 498.982874][T22170] mqueue: Unknown parameter 'nbd' [ 499.098132][T22172] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 499.276996][T22178] netlink: 576 bytes leftover after parsing attributes in process `syz.1.5435'. [ 499.501307][T22186] fuse: Bad value for 'fd' [ 500.225780][T22211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 500.839191][T22233] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 500.953062][ T5302] Bluetooth: hci0: command tx timeout [ 501.117784][T22246] random: crng reseeded on system resumption [ 501.151466][ T39] kauditd_printk_skb: 25863 callbacks suppressed [ 501.151483][ T39] audit: type=1400 audit(473.513:138750): avc: denied { read write } for pid=22244 comm="syz.8.5459" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.164084][ T39] audit: type=1400 audit(473.513:138751): avc: denied { read write open } for pid=22244 comm="syz.8.5459" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.175366][ T39] audit: type=1400 audit(473.531:138752): avc: denied { sqpoll } for pid=22244 comm="syz.8.5459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 501.181010][ T39] audit: type=1400 audit(473.541:138753): avc: denied { create } for pid=22244 comm="syz.8.5459" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.186705][ T39] audit: type=1400 audit(473.541:138754): avc: denied { map } for pid=22244 comm="syz.8.5459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.193470][ T39] audit: type=1400 audit(473.541:138755): avc: denied { read write } for pid=22244 comm="syz.8.5459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.200394][ T39] audit: type=1400 audit(473.541:138756): avc: denied { map } for pid=22244 comm="syz.8.5459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.206926][ T39] audit: type=1400 audit(473.541:138757): avc: denied { read write } for pid=22244 comm="syz.8.5459" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.213938][ T39] audit: type=1400 audit(473.550:138758): avc: denied { read } for pid=22244 comm="syz.8.5459" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 501.220227][ T39] audit: type=1400 audit(473.550:138759): avc: denied { read open } for pid=22244 comm="syz.8.5459" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 501.233026][T22245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 501.240399][T22245] FAULT_INJECTION: forcing a failure. [ 501.240399][T22245] name failslab, interval 1, probability 0, space 0, times 0 [ 501.249988][T22245] CPU: 0 UID: 0 PID: 22245 Comm: syz.1.5458 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 501.254055][T22245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.258115][T22245] Call Trace: [ 501.259345][T22245] [ 501.260453][T22245] dump_stack_lvl+0x16c/0x1f0 [ 501.262209][T22245] should_fail_ex+0x497/0x5b0 [ 501.263970][T22245] ? fs_reclaim_acquire+0xae/0x150 [ 501.265973][T22245] should_failslab+0xc2/0x120 [ 501.267755][T22245] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 501.269826][T22245] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 501.272141][T22245] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 501.274379][T22245] mmu_topup_memory_caches+0x22/0xd0 [ 501.276404][T22245] kvm_mmu_load+0xda/0x21f0 [ 501.278153][T22245] ? kvm_apic_has_interrupt+0xb6/0x190 [ 501.280273][T22245] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 501.282532][T22245] ? vmx_get_rflags+0x100/0x420 [ 501.284414][T22245] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 501.286454][T22245] ? __pfx_kvm_mmu_load+0x10/0x10 [ 501.288321][T22245] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 501.290509][T22245] ? kvm_check_and_inject_events+0x725/0x12e0 [ 501.292751][T22245] ? kvm_setup_guest_pvclock+0x721/0x730 [ 501.294805][T22245] vcpu_run+0x33a4/0x4f50 [ 501.296456][T22245] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 501.298565][T22245] ? __pfx_vcpu_run+0x10/0x10 [ 501.300394][T22245] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 501.302512][T22245] ? rcu_is_watching+0x12/0xc0 [ 501.302537][T22245] ? trace_lock_acquire+0x14e/0x1f0 [ 501.306192][T22245] ? __local_bh_enable_ip+0xa4/0x120 [ 501.308234][T22245] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.310238][T22245] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 501.312440][T22245] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 501.314598][T22245] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 501.316733][T22245] kvm_vcpu_ioctl+0x6ce/0x1520 [ 501.318569][T22245] ? do_vfs_ioctl+0x513/0x1990 [ 501.320419][T22245] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 501.322412][T22245] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 501.324870][T22245] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 501.327447][T22245] ? __pfx_lock_release+0x10/0x10 [ 501.329395][T22245] ? selinux_file_ioctl+0x180/0x270 [ 501.331374][T22245] ? selinux_file_ioctl+0xb4/0x270 [ 501.333329][T22245] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 501.335297][T22245] __x64_sys_ioctl+0x190/0x200 [ 501.337253][T22245] do_syscall_64+0xcd/0x250 [ 501.338991][T22245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.341171][T22245] RIP: 0033:0x7f47f2f85d29 [ 501.342940][T22245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.350250][T22245] RSP: 002b:00007f47f3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.353442][T22245] RAX: ffffffffffffffda RBX: 00007f47f3175fa0 RCX: 00007f47f2f85d29 [ 501.356474][T22245] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 501.359441][T22245] RBP: 00007f47f3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 501.362447][T22245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.365470][T22245] R13: 0000000000000000 R14: 00007f47f3175fa0 R15: 00007fff8131f968 [ 501.368461][T22245] [ 501.547439][T22256] dccp_invalid_packet: P.Data Offset(59) too large [ 501.642249][T22259] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5461'. [ 501.991441][T22271] netlink: 1256 bytes leftover after parsing attributes in process `syz.5.5466'. [ 501.994285][T22271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.446708][T22294] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 502.579048][ T9661] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 502.631491][T22304] FAULT_INJECTION: forcing a failure. [ 502.631491][T22304] name failslab, interval 1, probability 0, space 0, times 0 [ 502.635117][T22304] CPU: 3 UID: 0 PID: 22304 Comm: syz.1.5476 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 502.638209][T22304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 502.641293][T22304] Call Trace: [ 502.642264][T22304] [ 502.643125][T22304] dump_stack_lvl+0x16c/0x1f0 [ 502.644512][T22304] should_fail_ex+0x497/0x5b0 [ 502.645901][T22304] ? fs_reclaim_acquire+0xae/0x150 [ 502.647379][T22304] should_failslab+0xc2/0x120 [ 502.648769][T22304] __kmalloc_cache_noprof+0x68/0x410 [ 502.650302][T22304] slip_open+0x889/0x1140 [ 502.651561][T22304] ? lock_acquire+0x2f/0xb0 [ 502.652895][T22304] ? tty_set_ldisc+0x26f/0x720 [ 502.654282][T22304] ? __pfx_slip_open+0x10/0x10 [ 502.655665][T22304] ? down_write+0x14e/0x200 [ 502.657151][T22304] ? __pfx_slip_open+0x10/0x10 [ 502.658532][T22304] tty_ldisc_open+0x9c/0x120 [ 502.659882][T22304] tty_set_ldisc+0x318/0x720 [ 502.661252][T22304] tty_ioctl+0xbd0/0x15d0 [ 502.662527][T22304] ? __pfx_tty_ioctl+0x10/0x10 [ 502.663922][T22304] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 502.665935][T22304] ? __pfx_lock_release+0x10/0x10 [ 502.667414][T22304] ? selinux_file_ioctl+0x180/0x270 [ 502.668940][T22304] ? selinux_file_ioctl+0xb4/0x270 [ 502.670430][T22304] ? __pfx_tty_ioctl+0x10/0x10 [ 502.671820][T22304] __x64_sys_ioctl+0x190/0x200 [ 502.673240][T22304] do_syscall_64+0xcd/0x250 [ 502.674563][T22304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.676601][T22304] RIP: 0033:0x7f47f2f85d29 [ 502.677908][T22304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.683424][T22304] RSP: 002b:00007f47f3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.685843][T22304] RAX: ffffffffffffffda RBX: 00007f47f3175fa0 RCX: 00007f47f2f85d29 [ 502.688684][T22304] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 502.691169][T22304] RBP: 00007f47f3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 502.693825][T22304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.696117][T22304] R13: 0000000000000000 R14: 00007f47f3175fa0 R15: 00007fff8131f968 [ 502.698436][T22304] [ 502.862945][T22308] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5478'. [ 502.955057][T22315] xt_hashlimit: size too large, truncated to 1048576 [ 503.247164][T22327] netlink: 'syz.8.5483': attribute type 1 has an invalid length. [ 503.247178][T22327] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5483'. [ 503.610380][T22338] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 503.992722][T22343] cgroup: No subsys list or none specified [ 504.083607][T22349] kvm: pic: non byte write [ 504.317796][T22357] netlink: 'syz.2.5493': attribute type 4 has an invalid length. [ 504.320044][T22357] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5493'. [ 504.335769][T22356] »»»»»» speed is unknown, defaulting to 1000 [ 504.404769][T22356] »»»»»» speed is unknown, defaulting to 1000 [ 505.449794][T22393] No such timeout policy "syz1" [ 505.825300][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.833508][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.837513][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.851751][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.854186][ T5942] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 505.856390][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.568614][ T39] kauditd_printk_skb: 659 callbacks suppressed [ 506.568625][ T39] audit: type=1400 audit(478.583:139419): avc: denied { read write } for pid=22008 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.579590][ T39] audit: type=1400 audit(478.583:139420): avc: denied { read write open } for pid=22008 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.586680][ T39] audit: type=1400 audit(478.583:139421): avc: denied { ioctl } for pid=22008 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.599910][ T39] audit: type=1400 audit(478.592:139422): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 506.609371][ T39] audit: type=1400 audit(478.611:139423): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.617197][ T39] audit: type=1400 audit(478.611:139424): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 506.625056][T22399] »»»»»» speed is unknown, defaulting to 1000 [ 506.627628][ T39] audit: type=1400 audit(478.611:139425): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 506.627681][ T39] audit: type=1400 audit(478.611:139426): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 506.653746][ T39] audit: type=1400 audit(478.648:139427): avc: denied { read write } for pid=19452 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.666970][ T39] audit: type=1400 audit(478.648:139428): avc: denied { read write open } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.712071][T22399] »»»»»» speed is unknown, defaulting to 1000 [ 506.795289][T22412] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 507.054277][T22399] chnl_net:caif_netlink_parms(): no params data found [ 507.222325][T22399] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.224457][T22399] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.226611][T22399] bridge_slave_0: entered allmulticast mode [ 507.234852][T22399] bridge_slave_0: entered promiscuous mode [ 507.241412][T22399] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.243484][T22399] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.245610][T22399] bridge_slave_1: entered allmulticast mode [ 507.247816][T22399] bridge_slave_1: entered promiscuous mode [ 507.309817][T22399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.324373][T22399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.396575][T22399] team0: Port device team_slave_0 added [ 507.405620][T22399] team0: Port device team_slave_1 added [ 507.424316][T22433] input: syz1 as /devices/virtual/input/input44 [ 507.455859][T22399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.458495][T22399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.468395][T22399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.480144][T22399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.482178][T22399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.490720][T22399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.590919][T22399] hsr_slave_0: entered promiscuous mode [ 507.634627][ T5302] Bluetooth: hci0: command tx timeout [ 507.646522][T22399] hsr_slave_1: entered promiscuous mode [ 507.694224][T22399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.696480][T22399] Cannot create hsr debugfs directory [ 507.709440][T22443] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 507.748336][T22438] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5522'. [ 507.997830][T22458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22458 comm=syz.2.5528 [ 508.053272][ T5302] Bluetooth: hci1: command tx timeout [ 508.055133][T22399] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.111253][T22461] FAULT_INJECTION: forcing a failure. [ 508.111253][T22461] name failslab, interval 1, probability 0, space 0, times 0 [ 508.114958][T22461] CPU: 0 UID: 0 PID: 22461 Comm: syz.8.5529 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 508.118043][T22461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 508.121114][T22461] Call Trace: [ 508.122084][T22461] [ 508.122940][T22461] dump_stack_lvl+0x16c/0x1f0 [ 508.124331][T22461] should_fail_ex+0x497/0x5b0 [ 508.125698][T22461] ? fs_reclaim_acquire+0xae/0x150 [ 508.127195][T22461] should_failslab+0xc2/0x120 [ 508.128572][T22461] __kmalloc_cache_noprof+0x68/0x410 [ 508.130105][T22461] slhc_init+0x7d/0x570 [ 508.131310][T22461] ? kasan_save_track+0x14/0x30 [ 508.132726][T22461] slip_open+0x8ed/0x1140 [ 508.133982][T22461] ? lock_acquire+0x2f/0xb0 [ 508.135294][T22461] ? __pfx_slip_open+0x10/0x10 [ 508.136699][T22461] ? down_write+0x14e/0x200 [ 508.138047][T22461] ? __pfx_slip_open+0x10/0x10 [ 508.139479][T22461] tty_ldisc_open+0x9c/0x120 [ 508.140831][T22461] tty_set_ldisc+0x318/0x720 [ 508.142170][T22461] tty_ioctl+0xbd0/0x15d0 [ 508.143417][T22461] ? __pfx_tty_ioctl+0x10/0x10 [ 508.144802][T22461] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 508.146755][T22461] ? __pfx_lock_release+0x10/0x10 [ 508.148223][T22461] ? selinux_file_ioctl+0x180/0x270 [ 508.149722][T22461] ? selinux_file_ioctl+0xb4/0x270 [ 508.151209][T22461] ? __pfx_tty_ioctl+0x10/0x10 [ 508.152606][T22461] __x64_sys_ioctl+0x190/0x200 [ 508.153989][T22461] do_syscall_64+0xcd/0x250 [ 508.155299][T22461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.157023][T22461] RIP: 0033:0x7f94f0585d29 [ 508.158313][T22461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.163936][T22461] RSP: 002b:00007f94f13c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.166364][T22461] RAX: ffffffffffffffda RBX: 00007f94f0775fa0 RCX: 00007f94f0585d29 [ 508.168644][T22461] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 508.170912][T22461] RBP: 00007f94f13c5090 R08: 0000000000000000 R09: 0000000000000000 [ 508.173160][T22461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.175423][T22461] R13: 0000000000000000 R14: 00007f94f0775fa0 R15: 00007fff795ecbb8 [ 508.177688][T22461] [ 508.200596][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5531'. [ 508.203577][T22465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5531'. [ 508.256003][T22465] netlink: 372 bytes leftover after parsing attributes in process `syz.2.5531'. [ 508.258576][T22399] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.281135][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5531'. [ 508.330374][T22399] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.394603][T22468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 508.397072][T22471] netlink: 'syz.1.5533': attribute type 10 has an invalid length. [ 508.424410][T22471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 508.433852][T22471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5533'. [ 508.450846][T22399] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.456950][T22470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.580589][T22399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 508.588978][T22399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 508.600383][T22399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 508.610992][T22399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 508.759202][T22399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.794486][T22399] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.805110][T12773] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.807752][T12773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.819984][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.822925][ T9650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.069281][T22465] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 509.071475][T22465] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 509.086239][T22465] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.089954][T22465] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 509.105131][T22465] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 509.116387][T22465] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 509.118152][T22465] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 509.143351][T22465] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 509.146476][T22465] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.148801][T22465] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 509.164457][T22465] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 509.536068][T22489] libceph: resolve '40' (ret=-3): failed [ 509.866002][T22399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.542443][ T5302] Bluetooth: hci4: command 0x0406 tx timeout [ 510.684293][T22513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5543'. [ 510.910909][T22522] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 511.301494][ T5302] Bluetooth: hci1: command 0x040f tx timeout [ 511.301854][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 511.305465][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 511.448179][T22399] veth0_vlan: entered promiscuous mode [ 511.462876][T22399] veth1_vlan: entered promiscuous mode [ 511.509920][T22399] veth0_macvtap: entered promiscuous mode [ 511.522617][T22399] veth1_macvtap: entered promiscuous mode [ 511.551932][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.554966][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.558255][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.561476][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.564322][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.567397][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.571857][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.575084][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.578690][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.581708][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.590178][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.594153][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.610382][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.622201][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.625926][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.629888][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.634172][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.638093][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.641778][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.646083][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.649748][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.653515][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.656983][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.660908][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.665701][T22399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.683435][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.689252][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.693051][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.697287][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.701140][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.705277][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.709631][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.713599][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.717198][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.721438][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.725268][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.729935][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.733778][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.737810][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.742206][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.746279][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.750145][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.754072][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.757934][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.762118][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.765983][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.770077][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.773784][T22399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.777426][T22399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.782111][T22399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.799109][T22399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.802491][T22399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.806163][T22399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.809576][T22399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.837362][T13469] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 511.922950][ T39] kauditd_printk_skb: 478 callbacks suppressed [ 511.922961][ T39] audit: type=1400 audit(483.596:139907): avc: denied { ioctl } for pid=22534 comm="syz.2.5552" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 511.937316][ T39] audit: type=1400 audit(483.596:139908): avc: denied { write } for pid=22399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.943441][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.952121][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.958869][ T39] audit: type=1400 audit(483.596:139909): avc: denied { read } for pid=22534 comm="syz.2.5552" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 511.979144][ T39] audit: type=1400 audit(483.596:139910): avc: denied { read open } for pid=22534 comm="syz.2.5552" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 511.988945][ T39] audit: type=1400 audit(483.596:139911): avc: denied { read } for pid=22399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.996557][T13469] usb 6-1: Using ep0 maxpacket: 8 [ 512.004354][ T39] audit: type=1400 audit(483.596:139912): avc: denied { map } for pid=22534 comm="syz.2.5552" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.016244][ T39] audit: type=1400 audit(483.596:139913): avc: denied { write } for pid=22399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 512.018370][T12779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.023423][ T39] audit: type=1400 audit(483.596:139914): avc: denied { read } for pid=22534 comm="syz.2.5552" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.025933][T12779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.036068][ T39] audit: type=1400 audit(483.596:139915): avc: denied { ioctl } for pid=22534 comm="syz.2.5552" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.046097][ T39] audit: type=1400 audit(483.596:139916): avc: denied { set_context_mgr } for pid=22534 comm="syz.2.5552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 512.051181][T13469] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 512.056083][T13469] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 512.071232][T13469] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.074805][T13469] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.078680][T13469] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 512.081375][T13469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.342160][T13469] usb 6-1: GET_CAPABILITIES returned 0 [ 512.343816][T13469] usbtmc 6-1:16.0: can't read capabilities [ 512.513843][T22550] netlink: zone id is out of range [ 512.515380][T22550] netlink: del zone limit has 4 unknown bytes [ 512.567342][T13469] usb 6-1: USB disconnect, device number 24 [ 512.764566][ T5939] Bluetooth: hci4: command 0x0406 tx timeout [ 512.792447][T22556] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 513.213789][T22571] fuse: Bad value for 'group_id' [ 513.216646][T22571] fuse: Bad value for 'group_id' [ 513.525577][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.527536][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 513.529341][ T5939] Bluetooth: hci1: command 0x040f tx timeout [ 514.569260][T22590] bridge_slave_0: default FDB implementation only supports local addresses [ 514.806129][T22604] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5575'. [ 515.137161][T22626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 515.439158][T22637] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 515.661847][T22648] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5590'. [ 515.669720][T22648] netlink: 27 bytes leftover after parsing attributes in process `syz.8.5590'. [ 515.672482][T22648] netlink: 'syz.8.5590': attribute type 6 has an invalid length. [ 515.680482][T22648] netlink: 'syz.8.5590': attribute type 5 has an invalid length. [ 515.683293][T22648] netlink: 27 bytes leftover after parsing attributes in process `syz.8.5590'. [ 515.727850][ T834] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 515.759553][T22527] Bluetooth: hci1: command 0x040f tx timeout [ 515.761346][T22527] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.763087][T22527] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.769367][T22651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5592'. [ 515.772383][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5592'. [ 515.775072][T22651] netlink: 'syz.1.5592': attribute type 13 has an invalid length. [ 515.888131][ T834] usb 11-1: Using ep0 maxpacket: 8 [ 515.897113][ T834] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.900781][ T834] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 515.903520][ T834] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.910531][ T834] usb 11-1: config 0 descriptor?? [ 516.141531][ T834] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 516.607913][ T1331] usb 11-1: USB disconnect, device number 3 [ 517.009560][T22660] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 517.279031][ T39] kauditd_printk_skb: 870 callbacks suppressed [ 517.279041][ T39] audit: type=1400 audit(488.601:140787): avc: denied { unmount } for pid=20318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 517.287466][ T39] audit: type=1400 audit(488.601:140788): avc: denied { prog_load } for pid=22670 comm="syz.8.5599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.295024][ T39] audit: type=1400 audit(488.610:140789): avc: denied { bpf } for pid=22670 comm="syz.8.5599" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.302516][ T39] audit: type=1400 audit(488.610:140790): avc: denied { perfmon } for pid=22670 comm="syz.8.5599" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.311305][ T39] audit: type=1400 audit(488.610:140791): avc: denied { perfmon } for pid=22670 comm="syz.8.5599" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.319756][ T39] audit: type=1400 audit(488.610:140792): avc: denied { perfmon } for pid=22670 comm="syz.8.5599" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.335893][ T39] audit: type=1400 audit(488.610:140793): avc: denied { read write } for pid=22008 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.346305][ T39] audit: type=1400 audit(488.610:140794): avc: denied { perfmon } for pid=22670 comm="syz.8.5599" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.355309][ T39] audit: type=1400 audit(488.610:140795): avc: denied { read write open } for pid=22008 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.365718][ T39] audit: type=1400 audit(488.610:140796): avc: denied { ioctl } for pid=22008 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.424640][T22675] netlink: zone id is out of range [ 517.426827][T22675] netlink: del zone limit has 4 unknown bytes [ 517.972437][ T5939] Bluetooth: hci1: command 0x040f tx timeout [ 518.339989][T22686] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5605'. [ 518.343542][T22686] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5605'. [ 518.380962][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5605'. [ 518.554317][T22690] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 518.642255][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5606'. [ 519.612589][T22734] input: syz1 as /devices/virtual/input/input45 [ 519.706439][T22733] cgroup: subsys name conflicts with all [ 520.196344][ T5939] Bluetooth: hci1: command 0x040f tx timeout [ 520.731409][ T1325] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 520.955204][ T1325] usb 11-1: Using ep0 maxpacket: 8 [ 520.963059][ T1325] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 520.965450][ T1325] usb 11-1: config 179 has no interface number 0 [ 520.969296][ T1325] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 520.972545][ T1325] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 520.980824][ T1325] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.983994][ T1325] usb 11-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 520.988128][ T1325] usb 11-1: config 179 interface 65 has no altsetting 0 [ 520.990124][ T1325] usb 11-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 520.992700][ T1325] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.009679][T22782] loop9: detected capacity change from 0 to 8 [ 521.015081][T22782] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 521.016720][T22782] loop9: partition table partially beyond EOD, truncated [ 521.018873][T22782] loop9: p1 size 81768186 extends beyond EOD, truncated [ 521.031731][T22772] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 521.043782][ T1325] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input46 [ 521.063251][T22782] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 521.094684][ T5336] input input46: unable to receive magic message: -110 [ 521.204857][ T5336] input input46: unable to receive magic message: -32 [ 521.263299][T22793] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 521.340859][T22794] __nla_validate_parse: 1 callbacks suppressed [ 521.340870][T22794] netlink: 292 bytes leftover after parsing attributes in process `syz.6.5634'. [ 521.347074][ T5336] input input46: unable to receive magic message: -32 [ 521.378402][ T5997] usb 11-1: USB disconnect, device number 4 [ 521.378461][ C3] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 521.382832][ T5997] xpad 11-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 521.383997][ C3] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 521.510149][T21846] udevd[21846]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 522.157219][T22814] syz.6.5648: attempt to access beyond end of device [ 522.157219][T22814] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 522.160981][T22814] (syz.6.5648,22814,2):ocfs2_get_sector:1769 ERROR: status = -5 [ 522.170112][T22814] (syz.6.5648,22814,2):ocfs2_sb_probe:749 ERROR: status = -5 [ 522.172497][T22814] (syz.6.5648,22814,2):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 522.184660][T22814] (syz.6.5648,22814,2):ocfs2_fill_super:1178 ERROR: status = -5 [ 522.234582][T22818] fuse: Unknown parameter 'grou00000000000000000000' [ 522.351790][T22821] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 522.634179][ T39] kauditd_printk_skb: 837 callbacks suppressed [ 522.634190][ T39] audit: type=1400 audit(493.614:141634): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.644340][ T39] audit: type=1400 audit(493.614:141635): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.651239][ T39] audit: type=1400 audit(493.614:141636): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.676350][ T39] audit: type=1400 audit(493.614:141637): avc: denied { read write } for pid=19452 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.682979][ T39] audit: type=1400 audit(493.624:141638): avc: denied { read write open } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.692433][ T39] audit: type=1400 audit(493.624:141639): avc: denied { ioctl } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 522.701277][ T39] audit: type=1400 audit(493.633:141640): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.706967][ T39] audit: type=1400 audit(493.633:141641): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.712387][ T39] audit: type=1400 audit(493.633:141642): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.718078][ T39] audit: type=1400 audit(493.633:141643): avc: denied { write } for pid=22828 comm="syz.6.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.863975][T22836] netlink: zone id is out of range [ 522.865637][T22836] netlink: del zone limit has 4 unknown bytes [ 523.421677][T22855] fuse: Unknown parameter 'grou00000000000000000000' [ 523.445968][T22527] Bluetooth: hci1: command 0x040f tx timeout [ 523.588007][T22860] »»»»»» speed is unknown, defaulting to 1000 [ 523.684012][T22860] »»»»»» speed is unknown, defaulting to 1000 [ 523.888761][T22868] random: crng reseeded on system resumption [ 523.902126][T22874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 524.337455][T22892] 9pnet_fd: Insufficient options for proto=fd [ 524.436320][T22898] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 524.886871][T22915] netlink: 'syz.2.5681': attribute type 10 has an invalid length. [ 525.392602][T22918] openvswitch: netlink: Key type 15620 is out of range max 32 [ 525.669666][T22527] Bluetooth: hci1: command 0x040f tx timeout [ 525.984801][T22929] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 526.106161][T22935] Bluetooth: MGMT ver 1.23 [ 526.218840][T22938] FAULT_INJECTION: forcing a failure. [ 526.218840][T22938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.222660][T22938] CPU: 3 UID: 0 PID: 22938 Comm: syz.2.5690 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 526.226599][T22938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 526.229878][T22938] Call Trace: [ 526.230844][T22938] [ 526.231707][T22938] dump_stack_lvl+0x16c/0x1f0 [ 526.233106][T22938] should_fail_ex+0x497/0x5b0 [ 526.234468][T22938] _copy_from_user+0x2e/0xd0 [ 526.235833][T22938] ucma_set_option+0xa6/0x530 [ 526.237201][T22938] ? __pfx_ucma_set_option+0x10/0x10 [ 526.238715][T22938] ? __might_fault+0xe3/0x190 [ 526.240080][T22938] ? __might_fault+0xe3/0x190 [ 526.241441][T22938] ? __pfx_ucma_set_option+0x10/0x10 [ 526.243169][T22938] ucma_write+0x1f9/0x330 [ 526.244404][T22938] ? __pfx_ucma_write+0x10/0x10 [ 526.245825][T22938] ? bpf_lsm_file_permission+0x9/0x10 [ 526.247776][T22938] ? security_file_permission+0x71/0x210 [ 526.249855][T22938] ? __pfx_ucma_write+0x10/0x10 [ 526.251600][T22938] vfs_write+0x24c/0x1150 [ 526.253156][T22938] ? __fget_files+0x1fc/0x3a0 [ 526.254871][T22938] ? __pfx_lock_release+0x10/0x10 [ 526.256556][T22938] ? __pfx_vfs_write+0x10/0x10 [ 526.257926][T22938] ? lock_acquire+0x2f/0xb0 [ 526.259238][T22938] ? __fget_files+0x40/0x3a0 [ 526.260571][T22938] ? __fget_files+0x206/0x3a0 [ 526.261922][T22938] ksys_write+0x207/0x250 [ 526.263164][T22938] ? __pfx_ksys_write+0x10/0x10 [ 526.264827][T22938] do_syscall_64+0xcd/0x250 [ 526.266382][T22938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.268520][T22938] RIP: 0033:0x7f1854b85d29 [ 526.269826][T22938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.275276][T22938] RSP: 002b:00007f1855a4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 526.277675][T22938] RAX: ffffffffffffffda RBX: 00007f1854d75fa0 RCX: 00007f1854b85d29 [ 526.279936][T22938] RDX: 000000000000ff90 RSI: 0000000020000180 RDI: 0000000000000003 [ 526.282199][T22938] RBP: 00007f1855a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 526.284490][T22938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.286752][T22938] R13: 0000000000000000 R14: 00007f1854d75fa0 R15: 00007ffc9fcf9d28 [ 526.289011][T22938] [ 526.578814][ T834] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 526.756142][ T834] usb 11-1: config 0 has an invalid interface number: 237 but max is 0 [ 526.758571][ T834] usb 11-1: config 0 has no interface number 0 [ 526.775936][ T834] usb 11-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=85.52 [ 526.778624][ T834] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.780972][ T834] usb 11-1: Product: syz [ 526.792094][ T834] usb 11-1: Manufacturer: syz [ 526.793546][ T834] usb 11-1: SerialNumber: syz [ 526.799693][ T834] usb 11-1: config 0 descriptor?? [ 527.169606][T22960] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 527.442338][T22966] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 527.462198][T22966] FAULT_INJECTION: forcing a failure. [ 527.462198][T22966] name failslab, interval 1, probability 0, space 0, times 0 [ 527.470934][T22966] CPU: 0 UID: 0 PID: 22966 Comm: syz.1.5701 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 527.473908][T22966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 527.476897][T22966] Call Trace: [ 527.477892][T22966] [ 527.478731][T22966] dump_stack_lvl+0x16c/0x1f0 [ 527.480165][T22966] should_fail_ex+0x497/0x5b0 [ 527.481544][T22966] ? fs_reclaim_acquire+0xae/0x150 [ 527.483042][T22966] should_failslab+0xc2/0x120 [ 527.484434][T22966] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 527.485991][T22966] ? __kvm_mmu_topup_memory_cache+0x227/0x600 [ 527.487704][T22966] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 527.489405][T22966] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 527.491127][T22966] mmu_topup_memory_caches+0x22/0xd0 [ 527.492674][T22966] kvm_mmu_load+0xda/0x21f0 [ 527.494006][T22966] ? kvm_apic_has_interrupt+0xb6/0x190 [ 527.495595][T22966] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 527.497322][T22966] ? vmx_get_rflags+0x100/0x420 [ 527.498757][T22966] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 527.500403][T22966] ? __pfx_kvm_mmu_load+0x10/0x10 [ 527.501879][T22966] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 527.503603][T22966] ? kvm_check_and_inject_events+0x725/0x12e0 [ 527.505386][T22966] ? kvm_setup_guest_pvclock+0x721/0x730 [ 527.507057][T22966] vcpu_run+0x33a4/0x4f50 [ 527.508335][T22966] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 527.509958][T22966] ? __pfx_vcpu_run+0x10/0x10 [ 527.511336][T22966] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 527.512982][T22966] ? rcu_is_watching+0x12/0xc0 [ 527.514369][T22966] ? trace_lock_acquire+0x14e/0x1f0 [ 527.515894][T22966] ? __local_bh_enable_ip+0xa4/0x120 [ 527.517454][T22966] ? lockdep_hardirqs_on+0x7c/0x110 [ 527.518990][T22966] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 527.520697][T22966] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 527.522326][T22966] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 527.523898][T22966] kvm_vcpu_ioctl+0x6ce/0x1520 [ 527.525292][T22966] ? do_vfs_ioctl+0x513/0x1990 [ 527.526658][T22966] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 527.528134][T22966] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 527.529963][T22966] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 527.531888][T22966] ? __pfx_lock_release+0x10/0x10 [ 527.533327][T22966] ? selinux_file_ioctl+0x180/0x270 [ 527.534819][T22966] ? selinux_file_ioctl+0xb4/0x270 [ 527.536322][T22966] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 527.537965][T22966] __x64_sys_ioctl+0x190/0x200 [ 527.539409][T22966] do_syscall_64+0xcd/0x250 [ 527.540785][T22966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.542705][T22966] RIP: 0033:0x7f47f2f85d29 [ 527.544409][T22966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.544556][T22973] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5703'. [ 527.549892][T22966] RSP: 002b:00007f47f3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.549914][T22966] RAX: ffffffffffffffda RBX: 00007f47f3175fa0 RCX: 00007f47f2f85d29 [ 527.558605][T22966] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 527.561587][T22966] RBP: 00007f47f3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.564579][T22966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.567576][T22966] R13: 0000000000000000 R14: 00007f47f3175fa0 R15: 00007fff8131f968 [ 527.570606][T22966] [ 527.588095][T22966] kvm: pic: non byte read [ 527.591209][T22966] kvm: pic: non byte read [ 527.598635][T22966] kvm: pic: non byte read [ 527.636813][T22527] Bluetooth: hci4: command 0x0406 tx timeout [ 527.990125][ T39] kauditd_printk_skb: 1426 callbacks suppressed [ 527.990137][ T39] audit: type=1400 audit(498.628:143070): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 527.998045][ T39] audit: type=1400 audit(498.628:143071): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.005808][ T39] audit: type=1400 audit(498.628:143072): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.016757][ T39] audit: type=1400 audit(498.628:143073): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.024387][ T39] audit: type=1400 audit(498.628:143074): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.032386][ T39] audit: type=1400 audit(498.628:143075): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.042147][ T39] audit: type=1400 audit(498.628:143076): avc: denied { write } for pid=22940 comm="syz.6.5691" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.079307][T22941] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.081863][T22941] audit: audit_lost=257 audit_rate_limit=0 audit_backlog_limit=64 [ 528.084830][T22941] audit: backlog limit exceeded [ 528.241811][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5706'. [ 528.523480][ T834] usb 11-1: USB disconnect, device number 5 [ 529.083862][T23002] fuse: Bad value for 'fd' [ 529.090688][T22527] Bluetooth: hci1: command 0x040f tx timeout [ 529.404371][T23011] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 529.496262][T23015] syz.2.5718[23015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.496339][T23015] syz.2.5718[23015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.540090][T23015] syz.2.5718[23015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.683617][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5720'. [ 529.708383][T23019] ./file0: Can't lookup blockdev [ 529.867404][T23036] fuse: Bad value for 'fd' [ 530.009837][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5725'. [ 530.032651][T23038] input: syz1 as /devices/virtual/input/input48 [ 530.268735][T23045] SET target dimension over the limit! [ 530.354140][T23047] netlink: 'syz.1.5729': attribute type 4 has an invalid length. [ 530.356584][T23047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5729'. [ 530.445766][T23051] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 530.593462][T23053] binder: Unknown parameter 'fd' [ 530.631592][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.633367][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.769809][T23059] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 530.827694][T23070] FAULT_INJECTION: forcing a failure. [ 530.827694][T23070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.832766][T23070] CPU: 2 UID: 0 PID: 23070 Comm: syz.8.5736 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 530.836214][T23070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 530.839228][T23070] Call Trace: [ 530.840228][T23070] [ 530.841390][T23070] dump_stack_lvl+0x16c/0x1f0 [ 530.842795][T23070] should_fail_ex+0x497/0x5b0 [ 530.844090][T23070] _copy_from_user+0x2e/0xd0 [ 530.845359][T23070] move_addr_to_kernel+0x68/0x160 [ 530.846754][T23070] __sys_connect+0xb0/0x170 [ 530.848096][T23070] ? __pfx___sys_connect+0x10/0x10 [ 530.849609][T23070] ? __pfx_ksys_write+0x10/0x10 [ 530.851110][T23070] __x64_sys_connect+0x72/0xb0 [ 530.852528][T23070] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.854023][T23070] do_syscall_64+0xcd/0x250 [ 530.855354][T23070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.857030][T23070] RIP: 0033:0x7f94f0585d29 [ 530.858385][T23070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.864562][T23070] RSP: 002b:00007f94f13c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 530.866962][T23070] RAX: ffffffffffffffda RBX: 00007f94f0775fa0 RCX: 00007f94f0585d29 [ 530.869276][T23070] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000004 [ 530.871646][T23070] RBP: 00007f94f13c5090 R08: 0000000000000000 R09: 0000000000000000 [ 530.873972][T23070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.876286][T23070] R13: 0000000000000000 R14: 00007f94f0775fa0 R15: 00007fff795ecbb8 [ 530.878580][T23070] [ 531.033955][T23076] netlink: 165 bytes leftover after parsing attributes in process `syz.8.5739'. [ 531.224518][T23088] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 531.512969][T23085] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 531.630922][T23095] fuse: Bad value for 'fd' [ 531.685343][T23097] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 531.690871][T23097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 531.734830][T23097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5745'. [ 532.633847][T23126] fuse: Bad value for 'fd' [ 532.700486][T23128] tmpfs: Bad value for 'mpol' [ 532.781560][T23132] FAULT_INJECTION: forcing a failure. [ 532.781560][T23132] name failslab, interval 1, probability 0, space 0, times 0 [ 532.786060][T23132] CPU: 0 UID: 0 PID: 23132 Comm: syz.6.5758 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 532.789204][T23132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 532.792304][T23132] Call Trace: [ 532.793282][T23132] [ 532.794143][T23132] dump_stack_lvl+0x16c/0x1f0 [ 532.795556][T23132] should_fail_ex+0x497/0x5b0 [ 532.797095][T23132] ? fs_reclaim_acquire+0xae/0x150 [ 532.798591][T23132] should_failslab+0xc2/0x120 [ 532.799987][T23132] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 532.801534][T23132] ? __lock_acquire+0x15a9/0x3c40 [ 532.803017][T23132] ? __kernfs_new_node+0xd3/0x890 [ 532.804487][T23132] __kernfs_new_node+0xd3/0x890 [ 532.805938][T23132] ? __pfx___kernfs_new_node+0x10/0x10 [ 532.807516][T23132] ? __pfx___lock_acquire+0x10/0x10 [ 532.809062][T23132] kernfs_new_node+0x186/0x240 [ 532.810454][T23132] ? find_held_lock+0x2d/0x110 [ 532.811848][T23132] __kernfs_create_file+0x53/0x350 [ 532.813337][T23132] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 532.814848][T23132] internal_create_group+0x56c/0xf10 [ 532.816420][T23132] ? __pfx_internal_create_group+0x10/0x10 [ 532.818120][T23132] ? kernfs_create_link+0x1bd/0x240 [ 532.819643][T23132] internal_create_groups+0x9d/0x150 [ 532.821182][T23132] device_add+0x733/0x1a70 [ 532.822489][T23132] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.824057][T23132] ? __pfx_device_add+0x10/0x10 [ 532.825486][T23132] ? kfree+0x14f/0x4b0 [ 532.826658][T23132] ? mark_held_locks+0x9f/0xe0 [ 532.828146][T23132] ? input_register_device+0xbfe/0x1110 [ 532.829752][T23132] input_register_device+0x7e8/0x1110 [ 532.831294][T23132] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 532.833029][T23132] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 532.834847][T23132] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 532.836829][T23132] ? __pfx_lock_release+0x10/0x10 [ 532.838322][T23132] ? selinux_file_ioctl+0x180/0x270 [ 532.839848][T23132] ? selinux_file_ioctl+0xb4/0x270 [ 532.841341][T23132] ? __pfx_uinput_ioctl+0x10/0x10 [ 532.842804][T23132] __x64_sys_ioctl+0x190/0x200 [ 532.844201][T23132] do_syscall_64+0xcd/0x250 [ 532.845562][T23132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.847297][T23132] RIP: 0033:0x7f4e4d585d29 [ 532.848632][T23132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.854246][T23132] RSP: 002b:00007f4e4e36d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.856669][T23132] RAX: ffffffffffffffda RBX: 00007f4e4d775fa0 RCX: 00007f4e4d585d29 [ 532.858992][T23132] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 532.861232][T23132] RBP: 00007f4e4e36d090 R08: 0000000000000000 R09: 0000000000000000 [ 532.863433][T23132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.865739][T23132] R13: 0000000000000000 R14: 00007f4e4d775fa0 R15: 00007ffea58563b8 [ 532.868322][T23132] [ 532.939221][T22527] Bluetooth: hci1: command 0x040f tx timeout [ 533.157084][T23146] FAULT_INJECTION: forcing a failure. [ 533.157084][T23146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.160850][T23146] CPU: 1 UID: 0 PID: 23146 Comm: syz.2.5763 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 533.164028][T23146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.167520][T23146] Call Trace: [ 533.168490][T23146] [ 533.169406][T23146] dump_stack_lvl+0x16c/0x1f0 [ 533.171014][T23146] should_fail_ex+0x497/0x5b0 [ 533.172425][T23146] _copy_to_user+0x32/0xd0 [ 533.173927][T23146] simple_read_from_buffer+0xd0/0x160 [ 533.175441][T23146] proc_fail_nth_read+0x198/0x270 [ 533.177242][T23146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.179100][T23146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.180983][T23146] vfs_read+0x1df/0xbe0 [ 533.182499][T23146] ? __fget_files+0x1fc/0x3a0 [ 533.184057][T23146] ? __pfx___mutex_lock+0x10/0x10 [ 533.185717][T23146] ? __pfx_vfs_read+0x10/0x10 [ 533.187284][T23146] ? __fget_files+0x206/0x3a0 [ 533.188942][T23146] ksys_read+0x12b/0x250 [ 533.190191][T23146] ? __pfx_ksys_read+0x10/0x10 [ 533.191672][T23146] do_syscall_64+0xcd/0x250 [ 533.192968][T23146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.194588][T23146] RIP: 0033:0x7f1854b8473c [ 533.195882][T23146] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 533.201420][T23146] RSP: 002b:00007f1855a4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.203802][T23146] RAX: ffffffffffffffda RBX: 00007f1854d75fa0 RCX: 00007f1854b8473c [ 533.206527][T23146] RDX: 000000000000000f RSI: 00007f1855a4d0a0 RDI: 0000000000000004 [ 533.209021][T23146] RBP: 00007f1855a4d090 R08: 0000000000000000 R09: 0000000000000000 [ 533.211294][T23146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.213578][T23146] R13: 0000000000000000 R14: 00007f1854d75fa0 R15: 00007ffc9fcf9d28 [ 533.215879][T23146] [ 533.298298][T23152] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 533.300989][T23152] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 533.308425][T23152] vhci_hcd vhci_hcd.0: Device attached [ 533.338869][T23148] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 533.341566][T23148] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 533.353323][ T39] kauditd_printk_skb: 1864 callbacks suppressed [ 533.353333][ T39] audit: type=1400 audit(503.633:144941): avc: denied { read write } for pid=19452 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.362965][ T39] audit: type=1400 audit(503.651:144942): avc: denied { read write open } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.366878][T23148] vhci_hcd vhci_hcd.0: Device attached [ 533.385501][ T39] audit: type=1400 audit(503.651:144943): avc: denied { read write } for pid=22008 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.396276][ T39] audit: type=1400 audit(503.651:144944): avc: denied { read write open } for pid=22008 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.396543][T23148] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 533.405030][T23148] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 533.410566][ T39] audit: type=1400 audit(503.651:144945): avc: denied { ioctl } for pid=22008 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.429261][ T39] audit: type=1400 audit(503.661:144946): avc: denied { ioctl } for pid=19452 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.450229][T23148] vhci_hcd vhci_hcd.0: Device attached [ 533.452596][ T39] audit: type=1400 audit(503.679:144947): avc: denied { read write } for pid=23147 comm="syz.6.5764" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 533.459048][ T39] audit: type=1400 audit(503.679:144948): avc: denied { read write open } for pid=23147 comm="syz.6.5764" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 533.465884][ T39] audit: type=1400 audit(503.698:144949): avc: denied { ioctl } for pid=23147 comm="syz.6.5764" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 533.473361][ T39] audit: type=1400 audit(503.717:144950): avc: denied { read } for pid=23161 comm="syz.2.5767" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 533.476360][T23162] vhci_hcd: connection closed [ 533.480787][T23159] vhci_hcd: connection closed [ 533.480886][T23154] vhci_hcd: connection closed [ 533.486515][ T9650] vhci_hcd: stop threads [ 533.489135][ T9650] vhci_hcd: release socket [ 533.490418][ T9650] vhci_hcd: disconnect device [ 533.492971][ T9650] vhci_hcd: stop threads [ 533.494219][ T9650] vhci_hcd: release socket [ 533.503294][ T9650] vhci_hcd: disconnect device [ 533.508191][ T9650] vhci_hcd: stop threads [ 533.509405][ T9650] vhci_hcd: release socket [ 533.513241][ T9650] vhci_hcd: disconnect device [ 533.516552][ T5997] vhci_hcd: vhci_device speed not set [ 533.528486][T23169] netfs: Couldn't get user pages (rc=-14) [ 533.530129][T23169] netfs: Zero-sized read [R=f] [ 533.857554][T23183] netlink: 'syz.8.5775': attribute type 1 has an invalid length. [ 533.869344][ T5939] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 533.882853][T23183] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5775'. [ 533.964987][ T5939] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 534.191424][T23193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5778'. [ 534.215257][T23195] sctp: [Deprecated]: syz.2.5779 (pid 23195) Use of int in maxseg socket option. [ 534.215257][T23195] Use struct sctp_assoc_value instead [ 534.595043][T23210] overlay: ./file0 is not a directory [ 534.631669][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5782'. [ 534.648848][T23210] bridge_slave_1: left allmulticast mode [ 534.651018][T23210] bridge_slave_1: left promiscuous mode [ 534.652761][T23210] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.656744][T23210] bridge1: port 1(bridge_slave_1) entered blocking state [ 534.658965][T23210] bridge1: port 1(bridge_slave_1) entered disabled state [ 534.661899][T23210] bridge_slave_1: entered allmulticast mode [ 534.664294][T23210] bridge_slave_1: entered promiscuous mode [ 534.821081][ T5996] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 535.002892][ T5996] usb 13-1: config 0 has an invalid interface number: 120 but max is 0 [ 535.005362][ T5996] usb 13-1: config 0 has no interface number 0 [ 535.008041][ T5996] usb 13-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 535.011302][ T5996] usb 13-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 535.015548][ T5996] usb 13-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 535.019175][ T5996] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.029934][ T5996] usb 13-1: config 0 descriptor?? [ 535.039645][T23209] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 535.050250][ T5996] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.120/input/input50 [ 535.390408][ T5997] usb 13-1: USB disconnect, device number 8 [ 536.068068][T23253] veth0: entered promiscuous mode [ 536.276078][T23253] veth0: left promiscuous mode [ 536.332696][T23265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 536.789041][ T1146] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 537.094780][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5811'. [ 537.097575][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5811'. [ 537.260287][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5811'. [ 537.262898][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5811'. [ 537.344680][ C1] ------------[ cut here ]------------ [ 537.347074][ C1] WARNING: CPU: 1 PID: 23306 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xba8/0x1020 [ 537.349944][ C1] Modules linked in: [ 537.351176][ C1] CPU: 1 UID: 0 PID: 23306 Comm: syz.6.5814 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 537.356037][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.359052][ C1] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 537.360908][ C1] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 537.366243][ C1] RSP: 0018:ffffc900006b0d50 EFLAGS: 00010046 [ 537.367946][ C1] RAX: 0000000080010003 RBX: ffff888025b70d20 RCX: 1ffff11004b6e1a7 [ 537.370117][ C1] RDX: ffff888024258000 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 537.372322][ C1] RBP: ffff888024258000 R08: 0000000000000001 R09: 0000000000000000 [ 537.374495][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff888025b70dc4 [ 537.376736][ C1] R13: 1ffff920000d61af R14: ffff888025b70df8 R15: ffff888025b70de0 [ 537.378940][ C1] FS: 00007f4e4e34c6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 537.381579][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.383431][ C1] CR2: 0000000020044000 CR3: 0000000048dc4000 CR4: 0000000000352ef0 [ 537.385682][ C1] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.388037][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.390277][ C1] Call Trace: [ 537.391213][ C1] [ 537.392034][ C1] ? __warn+0xea/0x3c0 [ 537.393191][ C1] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 537.394841][ C1] ? report_bug+0x3c0/0x580 [ 537.396185][ C1] ? handle_bug+0x54/0xa0 [ 537.397424][ C1] ? exc_invalid_op+0x17/0x50 [ 537.398835][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 537.400348][ C1] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 537.401988][ C1] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 537.403620][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.405137][ C1] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 537.406891][ C1] ? __pfx_posix_timer_fn+0x10/0x10 [ 537.408364][ C1] posix_timer_fn+0x31/0x60 [ 537.409642][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 537.411487][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 537.413698][ C1] ? read_tsc+0x9/0x20 [ 537.415302][ C1] hrtimer_interrupt+0x392/0x8e0 [ 537.416932][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 537.418699][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 537.420357][ C1] [ 537.421513][ C1] [ 537.422343][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.424045][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 537.425825][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 32 4a f6 48 89 df e8 ce b1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 96 3b f6 65 8b 05 86 40 d7 74 85 c0 74 16 5b [ 537.431227][ C1] RSP: 0018:ffffc9000d557d58 EFLAGS: 00000246 [ 537.432942][ C1] RAX: 0000000000000006 RBX: ffff888025b70d50 RCX: 1ffffffff20be0c9 [ 537.435138][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ef20 [ 537.437796][ C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 537.440839][ C1] R10: ffffffff905f4997 R11: 0000000000000002 R12: ffffc9000d557e50 [ 537.443043][ C1] R13: 0000000000000000 R14: 1ffff92001aaafb1 R15: dffffc0000000000 [ 537.445203][ C1] do_timer_settime+0x315/0x400 [ 537.446610][ C1] ? __pfx_common_timer_set+0x10/0x10 [ 537.448139][ C1] ? __pfx_do_timer_settime+0x10/0x10 [ 537.449621][ C1] ? __pfx_do_futex+0x10/0x10 [ 537.451062][ C1] __x64_sys_timer_settime+0x26a/0x2c0 [ 537.452583][ C1] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 537.454245][ C1] ? xfd_validate_state+0x5d/0x180 [ 537.455685][ C1] do_syscall_64+0xcd/0x250 [ 537.457119][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.458972][ C1] RIP: 0033:0x7f4e4d585d29 [ 537.460287][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.467551][ C1] RSP: 002b:00007f4e4e34c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 537.470588][ C1] RAX: ffffffffffffffda RBX: 00007f4e4d776080 RCX: 00007f4e4d585d29 [ 537.472749][ C1] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 537.474908][ C1] RBP: 00007f4e4d601b08 R08: 0000000000000000 R09: 0000000000000000 [ 537.477153][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.479360][ C1] R13: 0000000000000000 R14: 00007f4e4d776080 R15: 00007ffea58563b8 [ 537.482120][ C1] [ 537.483329][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 537.486074][ C1] CPU: 1 UID: 0 PID: 23306 Comm: syz.6.5814 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 537.490108][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.494170][ C1] Call Trace: [ 537.495473][ C1] [ 537.496608][ C1] dump_stack_lvl+0x3d/0x1f0 [ 537.498417][ C1] panic+0x71d/0x800 [ 537.499848][ C1] ? __pfx_panic+0x10/0x10 [ 537.501586][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 537.503605][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 537.505705][ C1] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 537.507952][ C1] check_panic_on_warn+0xab/0xb0 [ 537.509827][ C1] __warn+0xf6/0x3c0 [ 537.511328][ C1] ? posixtimer_send_sigqueue+0xba8/0x1020 [ 537.513503][ C1] report_bug+0x3c0/0x580 [ 537.515129][ C1] handle_bug+0x54/0xa0 [ 537.516709][ C1] exc_invalid_op+0x17/0x50 [ 537.518479][ C1] asm_exc_invalid_op+0x1a/0x20 [ 537.520368][ C1] RIP: 0010:posixtimer_send_sigqueue+0xba8/0x1020 [ 537.522818][ C1] Code: ff ff 4c 89 e7 e8 98 fd 9d 00 e9 7e f8 ff ff 41 bf 02 00 00 00 e9 87 f8 ff ff 48 89 54 24 10 48 89 44 24 08 e8 c9 50 3b 00 90 <0f> 0b 90 48 8d 7b 10 48 8b 44 24 08 48 b9 00 00 00 00 00 fc ff df [ 537.530116][ C1] RSP: 0018:ffffc900006b0d50 EFLAGS: 00010046 [ 537.532453][ C1] RAX: 0000000080010003 RBX: ffff888025b70d20 RCX: 1ffff11004b6e1a7 [ 537.535492][ C1] RDX: ffff888024258000 RSI: ffffffff815ed3d7 RDI: 0000000000000001 [ 537.538526][ C1] RBP: ffff888024258000 R08: 0000000000000001 R09: 0000000000000000 [ 537.541541][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff888025b70dc4 [ 537.544543][ C1] R13: 1ffff920000d61af R14: ffff888025b70df8 R15: ffff888025b70de0 [ 537.547574][ C1] ? posixtimer_send_sigqueue+0xba7/0x1020 [ 537.549819][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.551884][ C1] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 537.554235][ C1] ? __pfx_posix_timer_fn+0x10/0x10 [ 537.556247][ C1] posix_timer_fn+0x31/0x60 [ 537.557988][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 537.560006][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 537.562193][ C1] ? read_tsc+0x9/0x20 [ 537.563781][ C1] hrtimer_interrupt+0x392/0x8e0 [ 537.565698][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 537.568007][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 537.570152][ C1] [ 537.571300][ C1] [ 537.572464][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.574785][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 537.577232][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 32 4a f6 48 89 df e8 ce b1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 96 3b f6 65 8b 05 86 40 d7 74 85 c0 74 16 5b [ 537.584527][ C1] RSP: 0018:ffffc9000d557d58 EFLAGS: 00000246 [ 537.586857][ C1] RAX: 0000000000000006 RBX: ffff888025b70d50 RCX: 1ffffffff20be0c9 [ 537.589876][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ef20 [ 537.592895][ C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000001 [ 537.595914][ C1] R10: ffffffff905f4997 R11: 0000000000000002 R12: ffffc9000d557e50 [ 537.598874][ C1] R13: 0000000000000000 R14: 1ffff92001aaafb1 R15: dffffc0000000000 [ 537.601354][ C1] do_timer_settime+0x315/0x400 [ 537.602729][ C1] ? __pfx_common_timer_set+0x10/0x10 [ 537.604148][ C1] ? __pfx_do_timer_settime+0x10/0x10 [ 537.605554][ C1] ? __pfx_do_futex+0x10/0x10 [ 537.606783][ C1] __x64_sys_timer_settime+0x26a/0x2c0 [ 537.608188][ C1] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 537.609732][ C1] ? xfd_validate_state+0x5d/0x180 [ 537.611064][ C1] do_syscall_64+0xcd/0x250 [ 537.612256][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.613793][ C1] RIP: 0033:0x7f4e4d585d29 [ 537.614957][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.619890][ C1] RSP: 002b:00007f4e4e34c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 537.622041][ C1] RAX: ffffffffffffffda RBX: 00007f4e4d776080 RCX: 00007f4e4d585d29 [ 537.624069][ C1] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 537.626107][ C1] RBP: 00007f4e4d601b08 R08: 0000000000000000 R09: 0000000000000000 [ 537.628140][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.630161][ C1] R13: 0000000000000000 R14: 00007f4e4d776080 R15: 00007ffea58563b8 [ 537.632193][ C1] [ 538.695640][ C1] Shutting down cpus with NMI [ 538.697423][ C1] Kernel Offset: disabled [ 538.698871][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:23:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802345f01e RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffff88802a9ec620 RBP=dffffc0000000000 RSP=ffffc9000d79f7b8 R8 =0000000000000005 R9 =0000000000000300 R10=0000000000000300 R11=0000000000000004 R12=ffff88802a47c880 R13=00000000ffffffff R14=ffff88802a9ec620 R15=0000000000000300 RIP=ffffffff8b2a0945 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4e4e36d6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002022e000 CR3=0000000048dc4000 CR4=00352ef0 DR0=0000000000000008 DR1=00000000000000ff DR2=fffffffffffffffb DR3=3e00000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9fcfa0c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1854c02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1854c02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1854c02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1854c02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1854c02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1854c02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0d65 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc900006b06b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000020 R14=ffffffff851c0d00 R15=0000000000000000 RIP=ffffffff851c0d8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4e4e34c6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020044000 CR3=0000000048dc4000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d74b488 00007f4e4d74b480 00007f4e4d74b478 00007f4e4d74b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4e2ad100 00007f4e4d74b440 00007f4e4d74b458 00007f4e4d74b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4e4d74b498 00007f4e4d74b490 00007f4e4d74b488 00007f4e4d74b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67cb7db58b6d1275 59751ae94c53eee8 aaa6a7d7474dbbd4 bdad72090bcb57e7 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d588c1c2b54b8205 c2e4616288689cc4 95946b9a19a3ef4c b95c790aecf29083 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d72e57e4ebef8268 2e33c80c4257587c dfd101dc100b384f 79646d223e3f9120 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24cf7823404527fc 566e0244eb9e2113 8b6b0617a00b730d 6ecd3665441696c3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e67cb7db58b6d12 7559751ae94c53ee e8aaa6a7d7474dbb d4bdad72090bcb57 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffffffff3509d14 RDX=1ffff11004929ba9 RSI=ffffffff8bd1eea0 RDI=ffff88802494dd48 RBP=ffff88802494c880 RSP=ffffc9000698f858 R8 =0000000000000000 R9 =fffffbfff20be932 R10=ffffffff905f4997 R11=0000000000000002 R12=000000000000009f R13=0000000000000200 R14=dffffc0000000000 R15=0000000000000206 RIP=ffffffff8168805e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd51e7a6280 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4e4e36d9c8 CR3=0000000029ebc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000e0fcc0 Opmask01=0000000000000001 Opmask02=00000000ffffffef Opmask03=0104100080810010 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a49244f390 000055a49244d870 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcddfeb900 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcddfeaea0 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000ff000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326d7e135faeb 737326d7e134ae03 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 737326d77317161f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6575712f36706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7ea9f212e2270d3 000000055a492447 00000000000002e1 000065756575712f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000313431 2f3636312f333431 0000000000000021 003032312e303a31 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 000055a40064656c 00305f656b697200 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=1ffffffff2dda228 RDX=0000000000000002 RSI=ffff888020ee2f20 RDI=ffff888020ee2f42 RBP=0000000000000006 RSP=ffffc9000d4ff610 R8 =0000000000000000 R9 =fffffbfff2dca7c0 R10=ffffffff96e53e07 R11=0000000000000002 R12=ffff888020ee2440 R13=dffffc0000000000 R14=ffff888020ee2f20 R15=0000000000000202 RIP=ffffffff8176850a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f94f13c56c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000046a2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f0602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f0602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f0602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f0602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f0602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f0602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f074b488 00007f94f074b480 00007f94f074b478 00007f94f074b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f12ad100 00007f94f074b440 00007f94f0740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94f074b498 00007f94f074b490 00007f94f074b488 00007f94f074b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000