last executing test programs: 45.544161415s ago: executing program 0 (id=98): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x10, @private=0xa0100fd}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@cswp={0x58, 0x114, 0x7, {{0xa03a, 0x7}, 0x0, 0x0, 0x1, 0x7, 0x3, 0x9ea6, 0x9, 0x5}}], 0x58}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000000001018510", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3c, 0x5a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x19, 0x1ff, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 45.460310194s ago: executing program 0 (id=101): r0 = syz_io_uring_setup(0x11e4, &(0x7f0000000000)={0x0, 0x6ec6, 0x0, 0x0, 0x22a}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_enter(r0, 0x2eff, 0x8cc5, 0x2a, &(0x7f0000000240)={[0x4]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x470, 0xffffffff, 0xffffffff, 0x470, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x3a, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x7}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'virt_wifi0\x00', {0x3ff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000100001040000000000e7000000000000", @ANYRES32=0x0, @ANYBLOB="40090000000000003c0012800b00010062726964676500002c0002800800010002000000060027000600000008001d0000010000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x104}, 0x0) 45.220310867s ago: executing program 0 (id=106): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x34000) 45.219954407s ago: executing program 0 (id=107): syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$FUSE_INIT(r4, &(0x7f0000003100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x24152, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x20, 0x1}}, 0x50) tee(r3, r2, 0x8, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r9, 0x101, 0x5, &(0x7f0000001580)=0x6, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="f8000000010000000000000000000080000000000000000000000000ecd3c2529544ac19b89903c7399fce26b5b852ea9b33fcf403343c8a24cd72fc641e31fab039a74347d30f0e42b4ab284f00000001000000019ee872d0a43aa81b209a2e1141dcaf2af96b9416c77abb2d9f409660563a92d89537b4af7ca563434a150066a198a78d6e2348bbc8e363335c1f060a6607e2350ebb9b55a94ae1727b29abd0b6d5f7ff8fb2235685e792d2661c8e77c4752271c8090a222f599695447021b0660792f58f10dac316efa2338ccd7c59d34703d29df5c0161dd6cb39424477260abd82"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r11}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c40)="af", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r12, 0x8, 0x8, 0x80, 0x3ff, {{0xe, 0x4, 0x0, 0x3a, 0x38, 0x65, 0x0, 0x4, 0x29, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x17, 0x6b, [@multicast1, @multicast2, @local, @empty, @empty]}, @timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x1, [{@local, 0x5}]}, @end]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @broadcast}}, [0x1, 0x88, 0x4, 0x8, 0xc077, 0x6, 0x8000, 0x5, 0x8, 0x4, 0x4, 0xb03, 0x2, 0x40, 0x9]}, &(0x7f0000000280)=0x100) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) memfd_secret(0x80000) splice(r7, 0x0, r6, 0x0, 0x80, 0x0) 44.363760646s ago: executing program 0 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x78e) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x2e4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 44.14917928s ago: executing program 0 (id=129): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001740)=[{0x10, 0x10e}], 0x10}}, {{&(0x7f0000002a40)=@ethernet={0x1}, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)=[{0x30, 0x10e, 0x6, "6cd99932353683e0de6d2f80102581b727a80809e0ab6dcb81c8"}], 0x30}}], 0x2, 0x54) 44.057458652s ago: executing program 32 (id=129): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001740)=[{0x10, 0x10e}], 0x10}}, {{&(0x7f0000002a40)=@ethernet={0x1}, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)=[{0x30, 0x10e, 0x6, "6cd99932353683e0de6d2f80102581b727a80809e0ab6dcb81c8"}], 0x30}}], 0x2, 0x54) 38.008602486s ago: executing program 4 (id=233): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x6, 0x7, 0xf, 0x7f}, {0x7f, 0xfd, 0x81, 0xffff}, {0xaf, 0x10, 0x5, 0x5f4}, {0x4, 0xfe, 0x7, 0x2}, {0x4000, 0x6, 0xd5, 0x7}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 37.953682485s ago: executing program 4 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0xffffffff, 0x100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b702000000000d008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7e118d35d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000000000ff0f"], 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x41000, 0x22, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800455b97d52d38372a9621907800000000ffffffff000000003b019078040937c800513b94"], 0x0) 37.74967394s ago: executing program 4 (id=243): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000101851000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3c, 0x5a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x9) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000008e099b8b81cfd0cd9c25c3291d84046a7ec458c9156d5b1092f8f28d63e2795a9f11069bf86116ab302a3c2d6206cbc91725ffc1c5d8b8d19f688ba9", @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 37.747451374s ago: executing program 4 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sysinfo(&(0x7f0000000000)=""/196) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x13, 0x0, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010b0000f1811d16664a0c"], 0x14}}, 0x0) syz_emit_ethernet(0x44, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}, {"b485c43dc2d3e83ab2597f0d86dd"}}}}}}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x580, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="460a000101a1bbbbbbbbbb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 37.430368242s ago: executing program 4 (id=258): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, 0x0, 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3c, 0x5a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 36.910574111s ago: executing program 4 (id=266): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x419}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd3}, "d9d48e8532d38464099fdb773f0b31df67e18ddeeb0b6b4e73015babedfcde9bb081e877c5c5f3898318176af107d5f68c49c049cc45a6e5c76c148584b2a84859db697c6e7af7a6c38d4202926832c023a3ba54f7c0ea77863c353997bf03c5ebfd234734975f66e6488b2c1272122e9ea5d633de6e21a117f86321eb824253d36d7ffc72b17479e931025f1c3b7889b535645bc817cb4942f977b75783758df3d30978da538fbe78167281e0bcee58f635d2b7482a329f8d967ce43a85e4060a6596f4d8ddf75b8cf7d07ac2bdeb7a068964"}, 0xd7) 36.856568348s ago: executing program 33 (id=266): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x419}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd3}, "d9d48e8532d38464099fdb773f0b31df67e18ddeeb0b6b4e73015babedfcde9bb081e877c5c5f3898318176af107d5f68c49c049cc45a6e5c76c148584b2a84859db697c6e7af7a6c38d4202926832c023a3ba54f7c0ea77863c353997bf03c5ebfd234734975f66e6488b2c1272122e9ea5d633de6e21a117f86321eb824253d36d7ffc72b17479e931025f1c3b7889b535645bc817cb4942f977b75783758df3d30978da538fbe78167281e0bcee58f635d2b7482a329f8d967ce43a85e4060a6596f4d8ddf75b8cf7d07ac2bdeb7a068964"}, 0xd7) 4.364819159s ago: executing program 1 (id=861): r0 = msgget(0x0, 0x228) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000054c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000140)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x31}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) write$sequencer(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="810408"], 0x20) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r9 = socket(0x1, 0x2, 0x0) getsockopt$sock_timeval(r9, 0x1, 0x49, 0x0, &(0x7f0000000280)) r10 = eventfd2(0x0, 0x80000) io_submit(r3, 0x2, &(0x7f00000012c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0xb, r4, &(0x7f00000001c0)="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", 0x1000, 0xf, 0x0, 0x0, r8}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1c, r9, &(0x7f00000011c0)="56f61e033b569461118a8592028f05ee01e0db627ad8b4f84140bdcc9e6056b679fb2428b19b890cec66c68693d3bffc561e6e6674ad616624f70187a85128e1a0159da0dc80e31fe745b6e6077f20798248e0e109a382d2c992f25b03fee5a729359b5bc2302630d5384c20777a0dedea51d4c1f42efa0217ea8197395f4c13fdec1b22af3650482f1b3033971142f1debc90ad94485fb2ecc4a3d70db948e4299597c668d3b8915b1955ee5196acd9fdb31026028b260abc6158b7ccdea9a3eccdd1", 0xc3, 0x2, 0x0, 0x1, r10}]) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f00000000c0)=""/226) mount(&(0x7f0000001300)=@sr0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='v7\x00', 0x1000000, &(0x7f00000013c0)='!-%!\x00') 3.349665089s ago: executing program 1 (id=877): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="000000000000010185", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001400)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYBLOB="eebc405418b573affa93a07b771386aeabc68ac69b31c0ea8ab8c6d23ea5", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="8fac13f03abd8299588eaeb0f0cd49c6b3acd6c5630667fbca1209df27198bbf98b299afc75bf574868b3893cd9a3a10797b1e72b869abd6fedac82ca4dc98e9db3dc3ef4cfb95cc381e42100edd2c2feafc8fd1a098d840c499e05a7cb3fa0dd690abe3f5cbe32e413b78789306327e867f9703e760b6efaee8dc33952682d3f20fced9cbe830a095d686b90a36eba4c9ee968b8dd66e4a21353014594e50bf0b64e4d5caf22ae2654e6f0f3e908ff3316e6d2e4a71de1ad694cd", @ANYRESDEC=r1, @ANYRES16=r10], 0x6f4}}, 0x0) 3.345752069s ago: executing program 1 (id=878): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x1c, 0x4}, {0x1, 0x14}}}}, 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, 0x0, 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="76c7b5bca8032e", @ANYRES16=0x0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e80080007006f000000080005005b0000000800060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3c, 0x5a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x101, @remote, 0xffffffff}, 0x1c) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.479468175s ago: executing program 3 (id=894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$dupfd(r3, 0x406, r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400c861) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.478287798s ago: executing program 1 (id=895): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$char_usb(r2, &(0x7f0000000080)=""/139, 0x8b) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f000085c000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000200)=0x5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="12040500", 0x4, 0x4, &(0x7f0000000140)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000c00)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [{0x8, 0x5}], {0x10, 0x2}}, 0x2c, 0x1) r8 = mmap$IORING_OFF_SQES(&(0x7f00007ee000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 1.477381245s ago: executing program 5 (id=902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x20}}], 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fe8000000000000000000000000000bbe000000100000000000000000000000000000000000000000000000000000000114e69291ab4de478d2e4f2bf9f24f1d36fb465fbf2e60d461532347a14b5f9ebbf228551bd4e1b0716cc27736590e39dced009e6c6bd17b2ccf5ec8c0e9e785843e696add430b35ea12ec87936d5ef70b350bfacc192295ddfc5c02725bb3e49deb81ea61b8f42a543754a90262088f1c"], 0xd8}}, 0x2000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000480)=[{}], 0x1, 0x10000200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x9d32f4b220c65367}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000bfb000/0x6000)=nil, 0x6000, 0x1000, 0x3, &(0x7f000055b000/0x1000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 1.47591648s ago: executing program 1 (id=904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000002900)={0x6, 0x8}) r5 = fanotify_init(0x200, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c96325017a449620148b6f72ca6ae2a44829bfa79ec13499f8be3977d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x1}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r6, &(0x7f00000003c0)=""/146, 0x92) fanotify_mark(r5, 0x201, 0x4800003e, r1, 0x0) fanotify_mark(r5, 0x441, 0x48000001, r1, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) (async) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000002900)={0x6, 0x8}) (async) fanotify_init(0x200, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c96325017a449620148b6f72ca6ae2a44829bfa79ec13499f8be3977d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x1}, 0x48, 0xffffffffffffffff) (async) keyctl$describe(0x6, r6, &(0x7f00000003c0)=""/146, 0x92) (async) fanotify_mark(r5, 0x201, 0x4800003e, r1, 0x0) (async) fanotify_mark(r5, 0x441, 0x48000001, r1, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) (async) 1.475563695s ago: executing program 3 (id=906): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x180000}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x331, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfff9}, 0x92f5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 1.320266589s ago: executing program 1 (id=907): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.320044644s ago: executing program 3 (id=908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) ioprio_set$uid(0x3, 0x0, 0x2007) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '#'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) 1.319488702s ago: executing program 3 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7010fddbdf251a0000000c0022800400008004b92a8007002100"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) 1.23546249s ago: executing program 3 (id=912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fcntl$dupfd(r3, 0x406, r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400c861) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x40000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.15904819s ago: executing program 5 (id=915): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000000c0)={0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe8000000b00000000000000000000aa00"/63, @ANYRES32=0x0, @ANYRES32], 0x140}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42302) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x80000001, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @remote, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x20, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) pidfd_getfd(r4, r2, 0x0) sendmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x93, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x20}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)="7f72659f9ab88a5d1adcef4a08fe908b235b4fc2f91eb81a9cb958475d7ca63e4133d449c757b5baa64c730d2140102ea8d5a1f70640028eeb457addd2182536"}, {&(0x7f0000000100)="ecc6c81b75e1e139737ea73d5566d450fb02d10b101b7143a4592af3d69af66c23d205c61efee479c721e92d3dd541ad7afedbb0feeeaadf7626277604ca56035201b5eb88f928dff1c920016bbab54e5b731abebeac0f23008da312f57bec"}, {&(0x7f0000000180)="718204649b25dcc3639dd6cc8991a13c8c64ed092762a2c9990f9c9d8ff2d0f7cebcbdae0feaa47f356e45502a664446a4ff80ea01bfdd903968431f5a94d21a3bfa16bdc11ed64b8f34937e58"}, {&(0x7f0000000200)="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"}, {&(0x7f0000001200)="60661625ee5c5bca0854d689fef3b00967da52d34a30ea0d2f2336b091296449b17811f5513549ddfd14de09cb0c57884e0031028a204623f6fb0e11e914d64da60dd211fcbdd0"}, {&(0x7f0000000080)="a9b5bdbb0ee4b668c696fc4a2eb86c31c47431330187d399da49bd21dba004"}, {&(0x7f0000001280)="b7306a326258424018dbf7c23bbea574e7c137a411cd836da6d00231d17ac962ece1356dd21749fd18736dca8117857f387af19663483e55ddb7516aae57ebec6898cb5bd4fd3c1a1fd324650421d087d8b821d5ea8a2492eb6b43d3da1b7930feb971ef91d776bc866d20fb2e5c11ad5e3b3c9836ebbec573b592f3af5899ca22b15f4c8ef8ec6bf73124f07de89db8e394d1ba3e93a8ca6b163f6d3e856d84e1a6b897cd6c01dc68e26b68f0a01269a239c62e32"}, {&(0x7f0000001340)="73fe177389bd9b784eadf0c7d78e5efb0918dfded5acb93f7bb638584e6a739bba94905315079c07e304325a3280ace19641f38dd407e9e381e7b3880b44e2ca4cf1b84339ad9871d296892d67753e734baa3ff751b3d02d8aae4ceafacdd31bd162e234bd3ae6f81acd74936b95bdf861dd788fd63d4b07fe2ffa8280fd9639d0bfa06a939470ea605e5d481fc8083600297959bf0ac9058541833128f204febd73d95f02e581441c080885"}, {&(0x7f0000001400)="618eef1fc56ba9dd1e597b5f4c6144676a2d9f20885bd42c04e884113b6b560504593d383b4f55f78bd7f2191377872a0e4fb5319e0077ea3e78e2823d03a9ef257538b762fc908a811b424eb8fa986da4a0cd00e3bbaf73e3e7481484423ddf24f04b1eb15ab415160d5b6cfacf9bbb79b633d755c6c640af38fea19835a01d9668a9c1f63e858796c7db4b93c149a69a3df10cfce2aa90e8d731f01b625d182dfa37ffe8676f5d2a9b37e03ba5796a8fa894883c0b2fbc"}], 0x0, &(0x7f00000018c0)=[{0x0, 0x112, 0x40, "4ccf0df11b1aa13da7b9b5328fdbae7ff308c30c14b1ea47939284ff770c9c5808a11e61e630e1f911c558dcca7dd2acc08035f073e6896b321dd9b535141ea75a680554ac1a5354a55e329120f140340cc9008ee93264ab417fdd9a6aa1a0e053647fd91a7584a9abe3bbaba8e6933a415f23a24dee10b3a14ae1741b36c0d1fec2f699b76cc8273cda90b90b917d76c1883b8c32df907154f311c0c92f3fcc5cd11e24e14a70000353da823ece0af37f38c76da7faf3bc06b2abdb24553e647e23440ab9df2cde6b88ad"}, {0x0, 0x29, 0x7, "75b7148d5de214328c15f3d0f2c576aa1c6f771872dd4adebb5beaa1bfac472495a9edcd3d3e6577b71cfdd3e90557d0511e70a5e4f64c5ac00839f951c86560a1f978d091d2cb841339f6caeb9890bd331be4c4f6949acdf68789528f69"}, {0x0, 0x113, 0xfffffffe, "9e60237de70a8b2c11ab88a602e7acd78bfeb7c9047474a788735de8c46e385372"}, {0x0, 0x111, 0x4, "e0ccd32fd4404b4e9b4d1f3dfaa9bf63e2986375f077951ff5cd11e0843d42b1b935cadb38a88f4ea6206c5d7097d31b31a3d94b2f82db6eb45c860480bce9f34f059f75357ae717af104d063caa20f72f8b3c0af9fb116a2ffae4123f7e05fe3510cbb4c3dd21393d8ce0ac0d340568f15c40c7a0a7d376e115b25fbdbbd41d1c41161bcafe1f88a48089cacab07e773a5b951a049bd99323f7db"}, {0x0, 0x111, 0x7fffffff, "4ca076045c9013be8d23017e562ae1801f821dca5668dd7924cc28a2f705c647bc881b03e1c164091391062e25ac8b386db16d66c6dc7e8c15ab10d8fb7c3522a3605c0cfbd74ac3053dbb19f5074486ce53857e2ba87fdd39232873a736f40a"}, {0x0, 0x110, 0x80000000, "9a0a20d30c9741e85d2f06a6a10e73803aa7e192f77d0dfb0b188425a920175f651219e335c710af15f1f8d4de4aed3f132d661dc69a84bac11c069419bf9bd4ad665095895556ca0339cb86cf76239400170eacfbb1c38c6911b78aa1563eb1ea15"}]}}], 0x1, 0x54) 1.157323203s ago: executing program 5 (id=917): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3f0, 0x460, 0x460, 0x3f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x288, 0x2b0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x7f800000000000, 0x0, 0x0, 0x80, 0x5, 0x9}}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, @remote, [], [], [], 0x0, 0x7863}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@unspec=@realm={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x181b40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 87.855569ms ago: executing program 5 (id=920): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 87.653571ms ago: executing program 5 (id=921): syz_open_dev$usbfs(0x0, 0x77, 0x101301) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='autogroup\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0xfb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x8008af26, &(0x7f0000000240)) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xffffffff, 0x2, 0x2, 0x5, {0xa, 0x4e04, 0xfffffff6, @mcast1, 0x103}}}, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000840)=""/244, &(0x7f0000000940)=0xf4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x88e40, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80000000000725) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x120480, &(0x7f0000000080)="35aabe876fd4a1fd915cff805edce37b06f71287ce4bde30669ec65c8f7be176b03b887d8d92945f4c6ff881bd1cf071f039b8d5d46d1690c64b69d94ceefd677de45953dc0e38481ba1108ff2214e825148d26bce935a95c59110bf2dcf355fa52c7015fc69876174a2506a55938f3dcc3384d3738887", 0x77, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="4ed0b8e8e4978cb5fea84c61e395cdeb9335e52516e8ac12217baac0c1ac45c9f3abbd5a80960bb22383ccf08ba0998d8b3699492809ade748f487c3f8f6f042fa379f63804d9e2cbb260a94dfdf5f0a7d3792e46f4411635d49dd2713ec21495b569948a44c9ec1cff644561123312f5385409ec2dc6dbf54c57384bcfd44908c9556fbacf34fbdeec81bac9c63d471bbefd47e0bd36cc9dfe2a65abf27db367e25bcdd70bb") bind$bt_hci(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = add_key(&(0x7f0000000180)='trusted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r9) 87.257237ms ago: executing program 2 (id=923): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x7880, 0x8000, 0x4, 0xffff, {{0x17, 0x4, 0x3, 0x34, 0x5c, 0x66, 0x0, 0xb, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x86, 0xa, "eb2607d3d5a9a8b5"}, @timestamp={0x44, 0x18, 0xad, 0x0, 0x0, [0x4a7aecd3, 0xfffffeff, 0xd, 0x81, 0x8]}, @lsrr={0x83, 0x7, 0xd6, [@multicast1]}, @end, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x9, [0x8, 0x3, 0x3306, 0xa3, 0x3]}, @noop, @generic={0x86, 0x4, "2d8b"}]}}}}}) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f00000001c0)={0x0, "535951da1852e4318362f557e3ed265f5ebe6c2a50fb08440913a7df9352c3f8", 0x20, 0xc, 0x581e, 0x1, 0x3}) (async) r5 = accept4$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c, 0x400) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x7, 0xa, 0x0, 0x0, 0x3a, r1, r6}, {0xfffffffffffff1cd, 0x10, 0x8, 0x4, 0xcbb, 0x9, 0x19f7, 0x8}, {0xb35, 0xcf3, 0x8}, 0x9, 0x6e6bb7, 0x1, 0x1, 0x2, 0x3}, {{@in=@private=0xa010101, 0x4d3, 0x2b}, 0xa, @in=@multicast2, 0x3502, 0x2, 0x2, 0x3, 0x2, 0x9, 0x1e}}, 0xe8) (async) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close_range(r4, r8, 0x0) (async) r9 = getpid() r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x1}, {0x10, 0x581}, {0x0, 0x8}, {0x4, 0xe}]}, @var={0x7, 0x0, 0x0, 0xe, 0x4}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x30, 0x61, 0x61, 0x30, 0x0]}}, &(0x7f0000001880)=""/13, 0x8b, 0xd, 0x0, 0x8, 0x0, @void, @value}, 0x28) sendmsg$netlink(r4, &(0x7f0000001980)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f0000001780)=[{&(0x7f0000000500)={0x220, 0x1f, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xd, 0x9d, 0x0, 0x0, @str='\xb2{$!+[){\x00'}, @generic="11f33e8f23cecdabe4ab8f4e0c3a90b4291c196337bb874597a401c1c2ced364718dc562d0b9301637ffe9e083cd544a41cb6196618ad25afd7f71ab6e3ca64ec0bed1f7dc8212b4395edc9f5ef601bff4eb325d3738e3478decbe72a24fff", @typed={0x8, 0x15, 0x0, 0x0, @uid=r6}, @generic="e9730bd03e0ef04c070606aa1b13869bdde00aea5cf8c15419a64d8a8713e49b508eead052d32f71ec20b58a75570bbd8c29710d79bbd4398f313765c0d8d58a6d1c866762d73151c8e2927046d45e38eae35dcbe0d3d2ad10737e1b134ec177cfef695d422d4102af7374995c44c13dab53c5852a7cac6e40558d8a1b84bede84c6dfe132de7cf2e7182600487ca312daa901d2746384bf", @generic="c48a2eaff7155b28a8aff88587d4072b70c46b6a37dd545678c0d5df2f9094a3c80a4cf6bed803e8d65ec94ac72e7698882ea04a8e1f22fa1122", @nested={0x85, 0x11c, 0x0, 0x1, [@generic="97da63d4cc8dae68dc05fb6dc701b3920ddd2208d6963f214226afbe5f35b33c92ecd8fad5cef15173023d2c5b3d2a3c6d31e37aa5307c2da6f0ef3dafbc55f8b83c30f35195b4bfc72ff643300b443fed649db2456361066d470da810a31ebde7316ad8af371b0b1c31fa03dc6bee5f8c13a6cb9079dfabe1", @nested={0x4, 0x5b}, @nested={0x4, 0x95}]}, @nested={0x36, 0xbd, 0x0, 0x1, [@generic, @generic="ada390b4161e443e0fa80d4e02b162a8f0934bedabbb96cfcc12d1991ee2724a7360e525ad6735d1291d", @typed={0x8, 0x2d, 0x0, 0x0, @u32=0x2}]}, @generic="c2508861"]}, 0x220}, {&(0x7f0000000740)={0x101c, 0x30, 0x100, 0x70bd27, 0x25dfdbfd, "", [@nested={0xc, 0x75, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @pid=r9}]}, @generic="a74f70387a26989ee2030886d3b739903759c4ac7182aed7c97ad18a2eefb57281b38ee1e04fcbdd0eb257b8ac27635188ce9806541bb5b5d25b4429ce2f914ef132083f04f3f9526764c7a44287df577f8d89d3275d93ed4f77bf9d9a04f3d3977f8ac6f5859e6924e346b8c27a5b626c1f7cb6672eda7767c81e2ecbb8c66f1de1732e97c734ef1a7288a46977c9434756a9ffe87d97bc1f37ca0ac8c59db58e4e0716a1700a84023f3e2b4732923521e550e478de62e1a2c2e834b443f7f3283cd1b01850a0512222bdb5816ebec9b779c154e068dea02e70fbf1e09b86083ecd73366d93ae6b3add0b0fbda7d5b3e40a77d96c86a2eb8a99400326477e513f2fbafa19dfe0da83e04946cc5e9a78ff4a187a8470e471a2cbd966501e7f6807d0e1f24dbc10cefac38cf377229c99f415a58e27bfb328a08749311b81f4f1fff0aa9d01c2e2b6696568214bd705278e13752fefc2522e06a3f6b47c3c5dae49d1018c1053b8d1188ce5f18014a9234fc5267bb633345abf1d9b83e9b6ccf1172be7acacab5ee6bba6b582cc7efd29d0234ebb3c3fd8d70dd859ba0f4227015e5373dbfaeb5a03ab7ec4ddb1945517953a3006192eb4e3e05e09f73290f865274f3a9a249eb8402f7eba7189374123dce27c8e267a41a0cc4dd060453585dd0df68969622f6b8f03d6618e3dcd46419e0e9a850707b191de84506cf4e2543ce9b63394c47f39fb757c2042f86afc46899304495dbfae3e120ee50b9755c086af38a6c37aa0d8768b61cdf7fa714426dbf5c0d18fdd4cec07951daf09a3a76c4c43537c39fded24bff4b50b2998b9f83a359e1f47fef16c87ef5ce78c3343ad77ff4cef55886035310e2aca6cb6cc94070e7d730ebf2b824be91613e036872ad7dea606ca8110420c16d548ab4c0754c0af313bc76261304100cf84b15dccef5cd86353ae35913f3cd57c9b42ee9aa78fe8269a388dd9a97b6a1c5ee1a468ed961f00258bb898d9c62716cc728ef36484a406a1c8fe1520084dad852950a65e044f1013555a6a5c1254f139d80f79cd34b7f571e7faeb8ac7cde12a53db83d58fa5243bf6118bb3d01cb0989e86177622399aac732661dcbd5db0d586f05d25825b431c99fd11d061cfc3667a561e7700718d872c594106e68752ad93807983f34e2c2e643e4887c912a4da56de578b76c31cc002dce877be00f8dc52a7e9f928f42fb7fe28d8754cd036294626ab43f89079d1603afa03010a747ae9eb1ed464e800ca2f1f8e2645d7dd8d367dcf7b3f7c6ccec67daab1ca5648f1ca9f3d06456a4d33feaa18ca96aa211b5cb7855b02d1075315016397e33389f8d79f9ce378907437eef15ff136605b9d738ac8b8b2bd9bb758c01357f762aaff823e7f0a906c51b24d27e5d1c7becf790327797682530b4c532d3277346c0f017c0010d820a792ef5d41fe96098bab92bea9f2180fc0ac3e69abf56c11da14e22897eb3fc65cd4be4b2c66905a78ce3a0cc7143907ffea6a97db9edd1e3130099c00332b6d89daf0b697e845dd4816907ad9c118918dd4343516cf270c1a7e98bdab1a4042aa58e1403bd75ef4de42f1474eed738c2c3d8c76ac66ea8331dccd7e06ad5b7c9f54f47238b08664ce026eeb2d11f9ca25ba90a77c0b95bc6387e630ddea1cbf93f8a6ccb3a26aa67f6271898497783be38a9531f0169fbaf291ad4ea065fd5a4fc15cdb763795a60dfef6aea433a4f1f50482f71a73abdb4c743cd3fab59f9659c365396803206dccab554c89923fbac2a71914ae5827d2974381d7d016d54fe5a6ba82e46d6f4db00851ef16a79fc04642cb7c36eb790125ea8c362697893810e537f60185bb9327a786701bfc70e4ccfe9cbd604c6edd08fef88ab225198917133fc40137b032106b091815cd68e362fbc2eba222b013be726a6bfdaf51bdb5c9cb46c1c9a044bcb21d1fd5213d7add57cc07a11895bba4b3c8e2a47370cfd048d789887dc7b9479857249c7eadcc0926804db43f970db77b95ee65b00548f6531fcff003d5a8603dddc5886961dfdc54fa82b42b606a9e5cb519737dbf6d6a9a88bd09656370f01bd7d4fae35e8dd4202197d57938a01b87e7e2cd79988df2bf33a28541b983b8daaab9a375f51b032789e2e319cd77b6bd75f4898fd8aa08f5a6c32d79eed1f3b2a0395c2c19a75639bcbbe57c50a2d7a9dff08cfa1f30357e30bcdc2821da5cc25d17ffde4946d3c73df70a597c1e3d2729c4f0258cdc357e4bc3a332132dad81021f0429a76c9464666df7796c1d4211e70928eeed1075525803e9392b3cbe5131135d16be1169f332763b2ddb7b589edbb50b14e7994e9ba2f86e31720e8adfc090f6de7b6fb93adfb328659cf9ea51345758c8eb37a7fadd1836f91cdf2347f66fb07d41921d2b89359f180ff027f9fa88e0c8ab0b38bd94365a131f3eac8fa30307e70aebabf6113524f3e9954cbe9ade82565ffde1c89259475bde07a2897315f4c743be478367b0ad1afd1c0a9e0b88a3bf358914a9f33d854ebf4cd92847f98c02cabc349d2696dacd33e063a101409f5a876869b31433f37b225da0cd58842430ec1535b8754b2f87036e4e999557cd9e75a2093900a6fb2ac749c99373b35730e04e844e93fa1bca04aa702e59d236da788d134ee64bdb66c61d259301fdb1c8ae345240ce8fef623a50264b8857aae74fcef7a1ea34fbf7c00322de0ff6b17cf9b397eb590244dd0e7b0c826a73b60f679382f9ffe1ebd998ac64f4694a24c0ab4e3269e5803be60ddb528db2f31e023bf75ce8714aff3f5ccba34519cfaa1d42886204c5364ef0cec4f27571477777b7da3482809ab3ecad312da3e2375c2f22692462154799df6995833778d8c5f90f3911675258b383c35e59e76393f1059f11dd0f2ba869e5b85ea88e41bb774b6f3557bd5b30fb3d3d24fc3b76fc23fde75b898a4aeaad2b1b3de588af26fdbdbeded5685afa8ce90abb48f95338cdc2ba78ca931ce4bfc8a17d073e88fd4330dbe8432b12c0730a9bf85d1068b5ff5081cfc6d00accc72b099dc705848ef7d1f9e4b283fdabb8113c971383628736f42d23963499f48d7815fe2b4ba3ff1c3e592f32e2affc35570abcfc0ea26e9c5d7cfcf7e967f75a57f6dabd4cfe923812d021a08b6dceb96622cb2c83a1100adc14a5eb8e5ead77dbbab46a7efa24e491b6912404fc3367c1fe59a4b3066826f3e771151436a8ff4fe6988262fa3aff4866ca63027b4c40b5bf8cdc79a62956078c2d659b9df170c373ea575470445c9c10d7ce724685bb892465ed4b9248a381371a2b69f27f24e5d289e39619f85282fac9241ce492468c33bdc7599da3ed417b05623d1908158a05145a5481f7f8024bce21bed0a1327f147ba54e3814ff0eec10856ac1ec8da7eaff9a5e50081086b8ea83db04fd48ea89a96b1f8aa9bfe3e62e9d28cf2d32bb7f8b30a8db3025ac96375c96da941e55c1de929efffb30fd8cde7ec5dccbc73a027aeb55e1d94815eb904bde34425d21751b6ebf4aaf5be74623626f1b5d31f4b74916b4db4cf75aab0c46d5c35aa437dedc937975aca0de454d7c7e074011763c0adc0e26bc778e866a6b15f5218198fb4b8cecad1ffbab9799334982b6324e90111a8f6dc52c91ffe815d6e59d31cd8f172f70241b619f2573dc94a895758a4d17db5f930abf5a5b6c9dab03a56cd116002cc6ce762775ec1f2b3a637d71af21b6f54032639dfd7b8d6db595cd8cd8e85ffcbee772fc971329de4c673986ebddbd0ae70aaf606f4343cde19bbd2acbcbe73a105b7405f7e24275cec5b22963286f311b4588677dc2bb97f8235b163c77c78484e1a8f2e02461cb787b9a5cc0d2c81d1a9c422b0be5d009908550d562335f8b530be029cae4b26055aafb6e66bf3c21f24d428054ccf9a65f1ad36e6e8ccacc793b1240257d4140e0c951d2b9360928377992eafa0d77302c7a3d981b3239197e7cc21af48a7d53d20c4f797772b9978a7ee631cccd3825a1173c1d5519bd95bb9f77a24136ea7774835d78ec81fa96299508ac17304978d8c8105774e4f2cae1c7bafda7cc7180d35403f5526998622701cebf8e3f4f21a686a433313cfe2f9b6a886b292ae0280aa7069000c240b36d02430f0d6fe29c24d223c2ab50cb099c2fad3098896eacbf61bfa2fc54af7e5408adf700c1065e59610c3e5c21f0c8cfbf33c9e28325f8b00038e61b51d11b057bd9ab3eae46209c1aad1a713c7817552f9c50171b6b3bcb7d13f7c062cdbedc5b1b67e1b5688e6553f2e6f8102a5bab9c0c2566836922768c4d8fedf9bc73a7aa61bed75dd9d81b74e8a69498c8a82732a98f76d88b3c0df741789b961d8ffa58c5d70584d65b87156971ee93e078e13adace78ef2fa840fe4931d59f3071700797d14d4d7dbf3acf289557c815730bd536e7f265adc88019d986947ec000f09d3f488411378675f4d59bf09df6841047fc7957287399a45db8f2c442568d9c61971a6a1140b60ea7d8d32017f2b1d78863e235814b7745b948ae10c22b2a9da7ef088c04261ab065cd91b9fd81754ccb3023e31fed40c1d7d2bb5f121631fb325c304470f0da8e7e8c11ce7b4d9003787771be688d9387d6a099f82f465f21058f0b935be84cd689a7dec3a79cdd1950611349242b3654177c560f674246a1330389e8221a6245d1a38a06b57d4054509d41e338285254b6d1a9795cb6e245695eb47547e11cc25dcca4abfa21719adb8190bcb8e52c068384d0302ab4d3c623ba2f9a71968ec3136cb7bd9f6baaad8347bd4f8f8e5d898ca1e2cb60f14cec9ec030f46995d942beb2f4b9cd983f7db3b733d301640a92c56d4d0daa358003f678c8468f4d15b1e17a0e0b81d7112d1403d8505488b43a6b20c4551aad1b46e0347b137ff9243f5510bc92028c0df257a596d4fd84f96eb35a20fa515fa9761a8abf63334194c6650a03f75d42b29b849d865b2498fa81950f8dd40f2eba92478884e1a105b165aa994ce9c438e38ecf3527950208a8ad962ba4337226f0e6c74762d5508285986055d977ff301105d4fce60c0d1acb637eb8bedbd8d183bc2efbdbf02958c46c02d143e5f1740b11e2ba76d0e182ad99d5558c0679b8fdcdb642634625474a7ff9697ce05b865f6fd24921b204940c1b10a35ab07a1313540f411e1a2968a9d27233367a9309187f962e360980a5a2d184374d8ad65d9297438bbdb7a95deb20fc365be1ee2317bbddc4f1b775388d14fa124fad3cf34819c4e65026ce14c3846300778d6a8eb9f17dc827e0c1477a3e18dca43b53037caa319f29a70b84faee444e4bbef1d66ff07294e1e8d7cce6f17f57cf464eebdf13329e07979bdba7a25a682fa4c6c10642f62abd052c184a6bad59a90e15eed68b7ed7c22cbb1db80e7b27e5a1b5e772bb17ea2b82c290435c6a1cb4ec8d302b4362054056fce8a949f08f873a2969d4fc339fba447dbce09a0d9bc9722c519611a1ed4ed1b82d593641b41934a356d24e2eca8c87715b9b61fb4f79e423a12893735b3243cd66d9debe9aaa0f2ebb6764f1502557437bbc60a31bac9230764f82dd4ba47eea9d68009d29e247ac47f86e19d347769dd6646ea4cc668695c1e93b750c5f624d04fba180b1d0ef19e6a1cc618235e0b42b9e502545ccd87eb77b58b1aebd90759a8a39f00c9572d39381306264732b0b1516bf5b915cf6f472d966693bdb7135ec7dc76b8e63501e6018f3160bef5c20501612c21fbe4a52e108e777713d3cff"]}, 0x101c}], 0x2, &(0x7f0000001900)=[@rights={{0x24, 0x1, 0x1, [r10, 0xffffffffffffffff, r3, r7, r3]}}, @rights={{0x1c, 0x1, 0x1, [r7, r5, r0]}}], 0x48, 0x40854}, 0x11) r11 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendfile(r4, r3, &(0x7f00000019c0)=0x4, 0x6) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x28b, 0x0, 0x9, 0x25010, r4, 0x10, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0xc, @void, @value, @void, @value}, 0x50) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000001a80)={"44b4c7d444980296b9f3ed66dadf5c3e", 0x0, 0x0, {0x10000, 0x7e87}, {0x10}, 0x8001, [0x3, 0x400, 0x8a4, 0x7, 0x1, 0x578, 0x7, 0x1, 0x7fffffffffffffff, 0xc1, 0x0, 0x323e, 0x9, 0x2, 0x7fffffffffffffff]}) (rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001c00)={{r3}, r12, 0x2, @inherit={0x50, &(0x7f0000001b80)={0x1, 0x1, 0xfffffffffffffffd, 0xfffffffffffff3b6, {0x0, 0x21, 0x5, 0x8, 0x80}, [0x8]}}, @subvolid}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x11, r3, 0x561c6000) r13 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r11) sendmsg$DEVLINK_CMD_RATE_NEW(r13, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x5c, r14, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x80b7}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x80) (async) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x50, 0xb, 0x6, 0x305, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) (async, rerun: 64) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000030c0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003080)={&(0x7f0000002f40)={0x124, r14, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8014}, 0x4000880) (rerun: 64) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, r16, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x7cf83867d91adab3) 87.045479ms ago: executing program 2 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x6, 0xb}}, 0x0, @random=0x40, 0xc0, @val, @void, @void, @val={0x4, 0x6, {0x80, 0xfa, 0x6, 0x7f}}, @void, @void, @val={0x25, 0x3, {0x0, 0x3c, 0x3}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x8}}, @val={0x76, 0x6, {0x6, 0x13, 0x25, 0xe}}}}]}, 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x1006, 0x3}, 0x18, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r11, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) landlock_restrict_self(r8, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3c, 0x5a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) renameat2(r15, &(0x7f0000000240)='./file0\x00', r16, &(0x7f0000000340)='./file0\x00', 0x1) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) prctl$PR_GET_KEEPCAPS(0x7) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="120300bd7000fc0000000600b500710300"/34], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 81.799313ms ago: executing program 2 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd2(0x10000, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x6, 0x2, r2}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0xb8e}) r4 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x1, 0x80000) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r6, 0x3, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r4}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x180000}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfff9}, 0x92f5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 81.080894ms ago: executing program 2 (id=926): mkdir(&(0x7f0000000380)='./file0\x00', 0x1b3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) 80.849881ms ago: executing program 3 (id=927): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) write$binfmt_aout(r3, 0x0, 0xffffffdb) syz_open_dev$swradio(&(0x7f0000003200), 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 80.760918ms ago: executing program 5 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd25}, 0x14}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 143.667µs ago: executing program 2 (id=929): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) 0s ago: executing program 2 (id=930): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x174, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x174}, 0x1, 0x0, 0x0, 0x44844}, 0x4000800) sendmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x20}}], 0x1, 0x54) kernel console output (not intermixed with test programs): ][ T6826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.908428][ T40] audit: type=1400 audit(1745530157.992:377): avc: denied { setrlimit } for pid=6914 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 63.917364][ T6826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.929647][ T6826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.952082][ T5948] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 63.984485][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.993171][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.998483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.000760][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.005684][ T6922] overlayfs: failed to resolve './file0': -2 [ 64.010416][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.012710][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.028017][ T6928] capability: warning: `syz.2.300' uses 32-bit capabilities (legacy support in use) [ 64.082499][ T5948] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 64.119332][ T6942] ======================================================= [ 64.119332][ T6942] WARNING: The mand mount option has been deprecated and [ 64.119332][ T6942] and is ignored by this kernel. Remove the mand [ 64.119332][ T6942] option from the mount to silence this warning. [ 64.119332][ T6942] ======================================================= [ 64.133341][ T40] audit: type=1400 audit(1745530158.222:378): avc: denied { mount } for pid=6941 comm="syz.3.303" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.141153][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.145324][ T6942] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.157240][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 64.160612][ T40] audit: type=1400 audit(1745530158.242:379): avc: denied { write } for pid=6941 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.174396][ T40] audit: type=1400 audit(1745530158.262:380): avc: denied { read } for pid=6941 comm="syz.3.303" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.186022][ T40] audit: type=1400 audit(1745530158.272:381): avc: denied { create } for pid=6941 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.195747][ T40] audit: type=1400 audit(1745530158.272:382): avc: denied { setattr } for pid=6941 comm="syz.3.303" name="PF_CAIF" dev="sockfs" ino=16802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.264855][ T6957] process 'syz.1.305' launched '/dev/fd/5' with NULL argv: empty string added [ 64.295765][ T6826] veth0_vlan: entered promiscuous mode [ 64.302352][ T6826] veth1_vlan: entered promiscuous mode [ 64.319168][ T6966] overlayfs: failed to resolve './file0': -2 [ 64.343892][ T6826] veth0_macvtap: entered promiscuous mode [ 64.349536][ T6826] veth1_macvtap: entered promiscuous mode [ 64.358567][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.362965][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.366699][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.370621][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.375715][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.379791][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.384674][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.391429][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.396290][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.399335][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.403132][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.406182][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.409478][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.413580][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.418840][ T6826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.421586][ T6826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.424798][ T6826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.427445][ T6826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.473573][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.476288][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.497383][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.499881][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.606678][ T6997] overlayfs: failed to resolve './file1': -2 [ 64.680247][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.689145][ T7006] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.828707][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 64.944977][ T7022] FAULT_INJECTION: forcing a failure. [ 64.944977][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 64.950263][ T7022] CPU: 3 UID: 0 PID: 7022 Comm: syz.1.321 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 64.950286][ T7022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.950296][ T7022] Call Trace: [ 64.950302][ T7022] [ 64.950308][ T7022] dump_stack_lvl+0x16c/0x1f0 [ 64.950355][ T7022] should_fail_ex+0x512/0x640 [ 64.950377][ T7022] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 64.950396][ T7022] should_failslab+0xc2/0x120 [ 64.950415][ T7022] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 64.950430][ T7022] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 64.950450][ T7022] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 64.950473][ T7022] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 64.950497][ T7022] mmu_topup_memory_caches+0x25/0x170 [ 64.950515][ T7022] kvm_mmu_load+0xd9/0x22a0 [ 64.950546][ T7022] ? vmx_get_rflags+0x100/0x420 [ 64.950569][ T7022] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 64.950594][ T7022] ? __pfx_kvm_mmu_load+0x10/0x10 [ 64.950617][ T7022] ? vmx_enable_irq_window+0xa9/0x190 [ 64.950639][ T7022] ? kvm_check_and_inject_events+0x71c/0x1310 [ 64.950669][ T7022] vcpu_run+0x33d9/0x52d0 [ 64.950691][ T7022] ? kvm_mmu_post_init_vm+0x269/0x370 [ 64.950709][ T7022] ? __lock_acquire+0xaa4/0x1ba0 [ 64.950732][ T7022] ? __pfx_vcpu_run+0x10/0x10 [ 64.950760][ T7022] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 64.950784][ T7022] ? __local_bh_enable_ip+0xa4/0x120 [ 64.950812][ T7022] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.950842][ T7022] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 64.950874][ T7022] kvm_vcpu_ioctl+0x5e9/0x1680 [ 64.950893][ T7022] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.950926][ T7022] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 64.950955][ T7022] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.950988][ T7022] ? hook_file_ioctl_common+0x145/0x410 [ 64.951012][ T7022] ? selinux_file_ioctl+0x180/0x270 [ 64.951036][ T7022] ? selinux_file_ioctl+0xb4/0x270 [ 64.951062][ T7022] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 64.951089][ T7022] __x64_sys_ioctl+0x190/0x200 [ 64.951114][ T7022] do_syscall_64+0xcd/0x260 [ 64.951139][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.951156][ T7022] RIP: 0033:0x7f6f54f8e969 [ 64.951170][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.951185][ T7022] RSP: 002b:00007f6f55d7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.951201][ T7022] RAX: ffffffffffffffda RBX: 00007f6f551b5fa0 RCX: 00007f6f54f8e969 [ 64.951212][ T7022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 64.951221][ T7022] RBP: 00007f6f55d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 64.951231][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.951240][ T7022] R13: 0000000000000000 R14: 00007f6f551b5fa0 R15: 00007ffdaefd9c18 [ 64.951280][ T7022] [ 65.043743][ T5958] Bluetooth: hci1: command 0x0419 tx timeout [ 65.043763][ T67] Bluetooth: hci3: command 0x0419 tx timeout [ 65.184046][ T67] Bluetooth: hci3: Unable to find connection with handle 0x00c9 [ 65.256729][ T7048] overlayfs: failed to resolve './file1': -2 [ 65.440892][ T7059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3603611205 (7207222410 ns) > initial count (2966303272 ns). Using initial count to start timer. [ 65.468400][ T7059] netlink: 208 bytes leftover after parsing attributes in process `syz.3.330'. [ 65.574278][ T7074] overlayfs: failed to resolve './file1': -2 [ 65.599404][ T67] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 65.841746][ T67] Bluetooth: hci0: command tx timeout [ 65.981862][ T834] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 66.133275][ T834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.136415][ T834] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 66.139644][ T834] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 66.142706][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.146599][ T834] usb 7-1: config 0 descriptor?? [ 66.152439][ T834] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 66.154815][ T834] dvb-usb: bulk message failed: -22 (3/0) [ 66.160692][ T834] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 66.167426][ T834] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 66.170408][ T834] usb 7-1: media controller created [ 66.174342][ T834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.181430][ T834] dvb-usb: bulk message failed: -22 (6/0) [ 66.183648][ T834] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 66.188777][ T834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 66.195012][ T834] dvb-usb: schedule remote query interval to 150 msecs. [ 66.197228][ T834] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 66.357193][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.360127][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.364217][ T834] dvb-usb: bulk message failed: -22 (1/0) [ 66.366161][ T834] dvb-usb: error while querying for an remote control event. [ 66.519011][ T7109] xt_hashlimit: size too large, truncated to 1048576 [ 66.521905][ T834] dvb-usb: bulk message failed: -22 (1/0) [ 66.523922][ T834] dvb-usb: error while querying for an remote control event. [ 66.571638][ T834] usb 7-1: USB disconnect, device number 2 [ 66.593114][ T834] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 66.721958][ T67] Bluetooth: hci4: command 0xfc11 tx timeout [ 66.724119][ T5948] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 66.863368][ T7120] netlink: 'syz.5.356': attribute type 2 has an invalid length. [ 66.867872][ T7120] xt_hashlimit: size too large, truncated to 1048576 [ 66.981739][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.356'. [ 67.131836][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 67.159628][ T7139] overlayfs: failed to resolve './file0': -2 [ 67.264802][ T7153] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 67.269433][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'. [ 67.298409][ T7155] Bluetooth: MGMT ver 1.23 [ 67.303651][ T7155] Invalid source name [ 67.304969][ T7155] UBIFS error (pid: 7155): cannot open "./file0", error -22 [ 67.370981][ T7164] xt_hashlimit: size too large, truncated to 1048576 [ 67.422689][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 67.425537][ T7168] overlayfs: failed to resolve './file0': -2 [ 67.473988][ T7172] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 67.476073][ T7172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.479083][ T7172] vhci_hcd vhci_hcd.0: Device attached [ 67.485442][ T7173] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 0 [ 67.488561][ T1145] vhci_hcd: stop threads [ 67.489971][ T1145] vhci_hcd: release socket [ 67.491398][ T1145] vhci_hcd: disconnect device [ 67.537839][ T7178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7178 comm=syz.5.380 [ 67.541912][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.380'. [ 67.658512][ T7186] overlayfs: failed to resolve './file0': -2 [ 67.664690][ T7188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 67.670003][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.384'. [ 67.725865][ T7193] hfsplus: unable to find HFS+ superblock [ 67.843596][ T7205] FAULT_INJECTION: forcing a failure. [ 67.843596][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 67.843616][ T7205] CPU: 2 UID: 0 PID: 7205 Comm: syz.5.393 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 67.843629][ T7205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.843636][ T7205] Call Trace: [ 67.843639][ T7205] [ 67.843643][ T7205] dump_stack_lvl+0x16c/0x1f0 [ 67.843676][ T7205] should_fail_ex+0x512/0x640 [ 67.843692][ T7205] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 67.843710][ T7205] should_failslab+0xc2/0x120 [ 67.843722][ T7205] __kmalloc_cache_noprof+0x6a/0x3e0 [ 67.843738][ T7205] ? drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 67.843756][ T7205] drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 67.843776][ T7205] drm_atomic_helper_commit+0xa9/0x380 [ 67.843791][ T7205] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 67.843806][ T7205] drm_atomic_commit+0x231/0x300 [ 67.843817][ T7205] ? __pfx_drm_atomic_commit+0x10/0x10 [ 67.843827][ T7205] ? __pfx___drm_printfn_info+0x10/0x10 [ 67.843840][ T7205] ? drm_client_rotation+0x4d9/0x6a0 [ 67.843858][ T7205] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 67.843878][ T7205] ? trace_contention_end+0xdd/0x130 [ 67.843889][ T7205] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 67.843910][ T7205] ? __mutex_lock+0x1ca/0xb90 [ 67.843924][ T7205] ? __mutex_lock+0x1ca/0xb90 [ 67.843946][ T7205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.843965][ T7205] drm_client_modeset_commit_locked+0x14d/0x580 [ 67.843984][ T7205] drm_fb_helper_pan_display+0x32d/0xa40 [ 67.843999][ T7205] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 67.844014][ T7205] fb_pan_display+0x479/0x7d0 [ 67.844029][ T7205] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 67.844044][ T7205] bit_update_start+0x49/0x1f0 [ 67.844055][ T7205] fbcon_switch+0xbf5/0x14c0 [ 67.844074][ T7205] ? __pfx_fbcon_switch+0x10/0x10 [ 67.844097][ T7205] ? __pfx_bit_cursor+0x10/0x10 [ 67.844105][ T7205] ? fbcon_cursor+0x409/0x5f0 [ 67.844121][ T7205] ? is_console_locked+0x9/0x20 [ 67.844136][ T7205] ? con_is_visible+0x65/0x150 [ 67.844152][ T7205] redraw_screen+0x2be/0x760 [ 67.844168][ T7205] ? __pfx_redraw_screen+0x10/0x10 [ 67.844186][ T7205] fbcon_do_set_font+0x60d/0x940 [ 67.844206][ T7205] fbcon_set_font+0x9ed/0xb80 [ 67.844225][ T7205] ? __pfx_fbcon_set_font+0x10/0x10 [ 67.844239][ T7205] con_font_op+0x7fb/0xf50 [ 67.844258][ T7205] ? __pfx_con_font_op+0x10/0x10 [ 67.844274][ T7205] ? __might_fault+0xe3/0x190 [ 67.844284][ T7205] ? __might_fault+0xe3/0x190 [ 67.844293][ T7205] ? __might_fault+0x13b/0x190 [ 67.844309][ T7205] vt_ioctl+0x48f/0x2f50 [ 67.844320][ T7205] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.844335][ T7205] ? __pfx_vt_ioctl+0x10/0x10 [ 67.844350][ T7205] ? tomoyo_path_number_perm+0x18d/0x580 [ 67.844366][ T7205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.844379][ T7205] ? do_vfs_ioctl+0x512/0x1990 [ 67.844392][ T7205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.844404][ T7205] ? tty_jobctrl_ioctl+0x152/0xe00 [ 67.844417][ T7205] ? __pfx_vt_ioctl+0x10/0x10 [ 67.844428][ T7205] tty_ioctl+0x65a/0x1610 [ 67.844444][ T7205] ? __pfx_tty_ioctl+0x10/0x10 [ 67.844485][ T7205] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.844508][ T7205] ? hook_file_ioctl_common+0x145/0x410 [ 67.844523][ T7205] ? selinux_file_ioctl+0x180/0x270 [ 67.844538][ T7205] ? selinux_file_ioctl+0xb4/0x270 [ 67.844554][ T7205] ? __pfx_tty_ioctl+0x10/0x10 [ 67.844569][ T7205] __x64_sys_ioctl+0x190/0x200 [ 67.844585][ T7205] do_syscall_64+0xcd/0x260 [ 67.844601][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.844611][ T7205] RIP: 0033:0x7f91a298e969 [ 67.844620][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.844629][ T7205] RSP: 002b:00007f91a37e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.844639][ T7205] RAX: ffffffffffffffda RBX: 00007f91a2bb5fa0 RCX: 00007f91a298e969 [ 67.844646][ T7205] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 67.844652][ T7205] RBP: 00007f91a37e0090 R08: 0000000000000000 R09: 0000000000000000 [ 67.844658][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.844663][ T7205] R13: 0000000000000000 R14: 00007f91a2bb5fa0 R15: 00007ffeb2e48bb8 [ 67.844677][ T7205] [ 67.921716][ T67] Bluetooth: hci0: command tx timeout [ 67.936303][ T5948] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 68.012950][ T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 68.017905][ T67] Bluetooth: hci2: Injecting HCI hardware error event [ 68.018461][ T67] Bluetooth: hci2: hardware error 0x00 [ 68.047484][ T7216] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.053688][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 68.084344][ T7219] FAULT_INJECTION: forcing a failure. [ 68.084344][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 68.087406][ T5948] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 68.089506][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.1.400 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 68.089529][ T7219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.089540][ T7219] Call Trace: [ 68.089546][ T7219] [ 68.089553][ T7219] dump_stack_lvl+0x16c/0x1f0 [ 68.089580][ T7219] should_fail_ex+0x512/0x640 [ 68.089597][ T7219] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 68.089618][ T7219] should_failslab+0xc2/0x120 [ 68.089638][ T7219] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 68.089653][ T7219] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 68.089672][ T7219] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 68.089697][ T7219] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 68.089720][ T7219] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 68.089746][ T7219] mmu_topup_memory_caches+0x25/0x170 [ 68.089764][ T7219] kvm_mmu_load+0xd9/0x22a0 [ 68.089790][ T7219] ? kvm_apic_has_interrupt+0xb5/0x190 [ 68.089812][ T7219] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.089835][ T7219] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 68.089850][ T7219] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 68.089873][ T7219] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.089898][ T7219] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.089918][ T7219] ? kvm_check_and_inject_events+0x71c/0x1310 [ 68.089949][ T7219] vcpu_run+0x33d9/0x52d0 [ 68.089971][ T7219] ? kvm_mmu_post_init_vm+0x269/0x370 [ 68.089989][ T7219] ? __lock_acquire+0xaa4/0x1ba0 [ 68.090012][ T7219] ? __pfx_vcpu_run+0x10/0x10 [ 68.090045][ T7219] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 68.090068][ T7219] ? __local_bh_enable_ip+0xa4/0x120 [ 68.090095][ T7219] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 68.090120][ T7219] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 68.090152][ T7219] kvm_vcpu_ioctl+0x5e9/0x1680 [ 68.090171][ T7219] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.090205][ T7219] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 68.090249][ T7219] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.090284][ T7219] ? hook_file_ioctl_common+0x145/0x410 [ 68.090308][ T7219] ? selinux_file_ioctl+0x180/0x270 [ 68.090331][ T7219] ? selinux_file_ioctl+0xb4/0x270 [ 68.090357][ T7219] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.090384][ T7219] __x64_sys_ioctl+0x190/0x200 [ 68.090409][ T7219] do_syscall_64+0xcd/0x260 [ 68.090434][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.090450][ T7219] RIP: 0033:0x7f6f54f8e969 [ 68.090464][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.090480][ T7219] RSP: 002b:00007f6f55d7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.090497][ T7219] RAX: ffffffffffffffda RBX: 00007f6f551b5fa0 RCX: 00007f6f54f8e969 [ 68.090507][ T7219] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 68.090517][ T7219] RBP: 00007f6f55d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 68.090527][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.090536][ T7219] R13: 0000000000000000 R14: 00007f6f551b5fa0 R15: 00007ffdaefd9c18 [ 68.090559][ T7219] [ 68.106650][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.401'. [ 68.124419][ T7230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 68.131467][ T7227] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.132532][ T7230] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.134782][ T7230] vhci_hcd vhci_hcd.0: Device attached [ 68.135982][ T7227] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.209416][ T7227] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.212067][ T7227] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.215551][ T7227] vxlan0: entered promiscuous mode [ 68.401847][ T10] usb 42-1: SetAddress Request (2) to port 0 [ 68.404729][ T10] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.798691][ T7258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 68.800881][ T7258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.803675][ T7258] vhci_hcd vhci_hcd.0: Device attached [ 68.897206][ T7231] vhci_hcd: connection reset by peer [ 68.899091][ T84] vhci_hcd: stop threads [ 68.900941][ T84] vhci_hcd: release socket [ 68.904084][ T84] vhci_hcd: disconnect device [ 69.051754][ T834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 69.052606][ T34] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 69.140341][ T7270] FAULT_INJECTION: forcing a failure. [ 69.140341][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 69.144534][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.3.420 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 69.144549][ T7270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.144556][ T7270] Call Trace: [ 69.144559][ T7270] [ 69.144563][ T7270] dump_stack_lvl+0x16c/0x1f0 [ 69.144582][ T7270] should_fail_ex+0x512/0x640 [ 69.144593][ T7270] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 69.144606][ T7270] should_failslab+0xc2/0x120 [ 69.144618][ T7270] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 69.144629][ T7270] ? sock_alloc_inode+0x25/0x1c0 [ 69.144646][ T7270] ? __pfx_sock_alloc_inode+0x10/0x10 [ 69.144660][ T7270] sock_alloc_inode+0x25/0x1c0 [ 69.144674][ T7270] alloc_inode+0x61/0x240 [ 69.144688][ T7270] sock_alloc+0x40/0x280 [ 69.144702][ T7270] __sock_create+0xc1/0x8d0 [ 69.144720][ T7270] __sys_socket+0x14d/0x260 [ 69.144728][ T7270] ? fput+0x70/0xf0 [ 69.144739][ T7270] ? __pfx___sys_socket+0x10/0x10 [ 69.144748][ T7270] ? ksys_write+0x1b9/0x240 [ 69.144756][ T7270] ? __pfx_ksys_write+0x10/0x10 [ 69.144764][ T7270] ? rcu_is_watching+0x12/0xc0 [ 69.144780][ T7270] __x64_sys_socket+0x72/0xb0 [ 69.144789][ T7270] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.144802][ T7270] do_syscall_64+0xcd/0x260 [ 69.144817][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.144828][ T7270] RIP: 0033:0x7f5b8ef90887 [ 69.144836][ T7270] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.144847][ T7270] RSP: 002b:00007f5b8fd50f48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 69.144857][ T7270] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef90887 [ 69.144863][ T7270] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 69.144869][ T7270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.144875][ T7270] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 69.144881][ T7270] R13: 0000000000000000 R14: 0000200000000040 R15: 0000200000000080 [ 69.144893][ T7270] [ 69.144998][ T7270] socket: no more sockets [ 69.234775][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.238161][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.241146][ T834] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.243985][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.248677][ T834] usb 6-1: config 0 descriptor?? [ 69.302213][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 69.397456][ T7282] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 69.434040][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 69.461098][ T834] usbhid 6-1:0.0: can't add hid device: -71 [ 69.468222][ T834] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 69.473786][ T834] usb 6-1: USB disconnect, device number 2 [ 69.479091][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 69.479103][ T40] audit: type=1400 audit(1745530163.562:409): avc: denied { append } for pid=7291 comm="syz.5.431" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.489580][ T7292] SELinux: ebitmap start bit (1836477231) is not a multiple of the map unit size (64) [ 69.490855][ T40] audit: type=1400 audit(1745530163.572:410): avc: denied { load_policy } for pid=7291 comm="syz.5.431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.493346][ T7292] SELinux: failed to load policy [ 69.535319][ T5948] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 69.575321][ T7306] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.580909][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 69.628370][ T7310] kvm: pic: non byte read [ 69.631434][ T7310] kvm: pic: level sensitive irq not supported [ 69.632103][ T7310] kvm: pic: non byte read [ 69.636904][ T7310] kvm: pic: level sensitive irq not supported [ 69.637138][ T7310] kvm: pic: non byte read [ 69.642965][ T7310] kvm: pic: level sensitive irq not supported [ 69.643220][ T7310] kvm: pic: non byte read [ 69.646983][ T40] audit: type=1400 audit(1745530163.732:411): avc: denied { create } for pid=7314 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.733931][ T5948] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 69.735808][ T7329] xt_hashlimit: size too large, truncated to 1048576 [ 69.762623][ T7334] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.766276][ T40] audit: type=1400 audit(1745530163.852:412): avc: denied { setopt } for pid=7332 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.797342][ T7340] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.867183][ T7259] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 1 [ 69.870327][ T1143] vhci_hcd: stop threads [ 69.875380][ T1143] vhci_hcd: release socket [ 69.877476][ T1143] vhci_hcd: disconnect device [ 69.882089][ T5948] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 69.902256][ T7358] xt_hashlimit: size too large, truncated to 1048576 [ 69.964100][ T7371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.001980][ T5948] Bluetooth: hci0: command tx timeout [ 70.021055][ T40] audit: type=1400 audit(1745530164.102:413): avc: denied { write } for pid=7367 comm="syz.3.462" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.081902][ T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 70.445801][ T7385] xt_hashlimit: size too large, truncated to 1048576 [ 70.883263][ T7387] FAULT_INJECTION: forcing a failure. [ 70.883263][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 70.887843][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.1.467 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 70.887858][ T7387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.887865][ T7387] Call Trace: [ 70.887869][ T7387] [ 70.887872][ T7387] dump_stack_lvl+0x16c/0x1f0 [ 70.887891][ T7387] should_fail_ex+0x512/0x640 [ 70.887904][ T7387] ? dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 70.887942][ T7387] should_failslab+0xc2/0x120 [ 70.887955][ T7387] __kmalloc_noprof+0xd2/0x510 [ 70.887970][ T7387] dev_prep_valid_name.constprop.0+0x16a/0x6c0 [ 70.887984][ T7387] ? __pfx_dev_prep_valid_name.constprop.0+0x10/0x10 [ 70.887999][ T7387] ? lockdep_init_map_type+0x5c/0x280 [ 70.888018][ T7387] register_netdevice+0x49d/0x2270 [ 70.888035][ T7387] ? __pfx_validate_linkmsg+0x10/0x10 [ 70.888048][ T7387] ? __pfx_register_netdevice+0x10/0x10 [ 70.888066][ T7387] br_dev_newlink+0x6a/0x170 [ 70.888081][ T7387] ? __pfx_br_dev_newlink+0x10/0x10 [ 70.888097][ T7387] rtnl_newlink+0xc42/0x2000 [ 70.888114][ T7387] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.888126][ T7387] ? find_held_lock+0x2b/0x80 [ 70.888140][ T7387] ? avc_has_perm_noaudit+0x117/0x3b0 [ 70.888153][ T7387] ? avc_has_perm_noaudit+0x149/0x3b0 [ 70.888174][ T7387] ? find_held_lock+0x2b/0x80 [ 70.888186][ T7387] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.888198][ T7387] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.888210][ T7387] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 70.888224][ T7387] ? __pfx_rtnl_newlink+0x10/0x10 [ 70.888237][ T7387] rtnetlink_rcv_msg+0x95b/0xe90 [ 70.888251][ T7387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.888271][ T7387] netlink_rcv_skb+0x16a/0x440 [ 70.888286][ T7387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.888300][ T7387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 70.888322][ T7387] ? netlink_deliver_tap+0x1ae/0xd30 [ 70.888338][ T7387] netlink_unicast+0x53a/0x7f0 [ 70.888353][ T7387] ? __pfx_netlink_unicast+0x10/0x10 [ 70.888371][ T7387] netlink_sendmsg+0x8d1/0xdd0 [ 70.888388][ T7387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.888407][ T7387] ____sys_sendmsg+0xa95/0xc70 [ 70.888423][ T7387] ? copy_msghdr_from_user+0x10a/0x160 [ 70.888460][ T7387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.888484][ T7387] ___sys_sendmsg+0x134/0x1d0 [ 70.888497][ T7387] ? __pfx____sys_sendmsg+0x10/0x10 [ 70.888526][ T7387] __sys_sendmsg+0x16d/0x220 [ 70.888538][ T7387] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.888555][ T7387] ? rcu_is_watching+0x12/0xc0 [ 70.888572][ T7387] do_syscall_64+0xcd/0x260 [ 70.888587][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.888598][ T7387] RIP: 0033:0x7f6f54f8e969 [ 70.888607][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.888617][ T7387] RSP: 002b:00007f6f55d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.888627][ T7387] RAX: ffffffffffffffda RBX: 00007f6f551b6080 RCX: 00007f6f54f8e969 [ 70.888634][ T7387] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 70.888640][ T7387] RBP: 00007f6f55d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 70.888646][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.888652][ T7387] R13: 0000000000000000 R14: 00007f6f551b6080 R15: 00007ffdaefd9c18 [ 70.888665][ T7387] [ 70.973289][ T7390] sctp: [Deprecated]: syz.1.468 (pid 7390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.973289][ T7390] Use struct sctp_sack_info instead [ 71.004556][ T67] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 71.006207][ T7389] sctp: [Deprecated]: syz.1.468 (pid 7389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.006207][ T7389] Use struct sctp_sack_info instead [ 71.137571][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.139618][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.253832][ T40] audit: type=1400 audit(1745530165.342:414): avc: denied { ioctl } for pid=7415 comm="syz.3.478" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.319841][ T67] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 71.461862][ T7450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.473161][ T40] audit: type=1400 audit(1745530165.562:415): avc: denied { ioctl } for pid=7428 comm="syz.1.484" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.530720][ T40] audit: type=1400 audit(1745530165.612:416): avc: denied { ioctl } for pid=7428 comm="syz.1.484" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.561733][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.451957][ T10] usb 42-1: device descriptor read/8, error -110 [ 73.522122][ T7429] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 73.532144][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 73.843173][ T10] usb usb42-port1: attempt power cycle [ 74.161806][ T34] vhci_hcd: vhci_device speed not set [ 74.306156][ T7429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.308528][ T7429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 74.312761][ T7429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.315404][ T7429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.320119][ T7429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.398729][ T7473] __nla_validate_parse: 7 callbacks suppressed [ 74.398740][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 74.414022][ T10] usb usb42-port1: unable to enumerate USB device [ 74.430806][ T7478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.478129][ T7483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.480871][ T7483] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.528109][ T40] audit: type=1400 audit(1745530168.612:417): avc: denied { read } for pid=7490 comm="syz.1.511" name="file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.537742][ T40] audit: type=1400 audit(1745530168.612:418): avc: denied { open } for pid=7490 comm="syz.1.511" path="/143/file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.574412][ T7501] FAULT_INJECTION: forcing a failure. [ 74.574412][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 74.574441][ T7501] CPU: 3 UID: 0 PID: 7501 Comm: syz.1.514 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 74.574455][ T7501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.574462][ T7501] Call Trace: [ 74.574468][ T7501] [ 74.574475][ T7501] dump_stack_lvl+0x16c/0x1f0 [ 74.574520][ T7501] should_fail_ex+0x512/0x640 [ 74.574542][ T7501] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 74.574563][ T7501] should_failslab+0xc2/0x120 [ 74.574582][ T7501] __kmalloc_cache_noprof+0x6a/0x3e0 [ 74.574605][ T7501] ? drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 74.574632][ T7501] drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 74.574659][ T7501] drm_atomic_helper_commit+0xa9/0x380 [ 74.574680][ T7501] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 74.574702][ T7501] drm_atomic_commit+0x231/0x300 [ 74.574718][ T7501] ? __pfx_drm_atomic_commit+0x10/0x10 [ 74.574732][ T7501] ? __pfx___drm_printfn_info+0x10/0x10 [ 74.574750][ T7501] ? drm_client_rotation+0x4d9/0x6a0 [ 74.574775][ T7501] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 74.574805][ T7501] ? trace_contention_end+0xdd/0x130 [ 74.574826][ T7501] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 74.574847][ T7501] ? __mutex_lock+0x1ca/0xb90 [ 74.574865][ T7501] ? __mutex_lock+0x1ca/0xb90 [ 74.574898][ T7501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.574927][ T7501] drm_client_modeset_commit_locked+0x14d/0x580 [ 74.574949][ T7501] drm_fb_helper_pan_display+0x32d/0xa40 [ 74.574970][ T7501] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 74.574994][ T7501] fb_pan_display+0x479/0x7d0 [ 74.575015][ T7501] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 74.575037][ T7501] bit_update_start+0x49/0x1f0 [ 74.575053][ T7501] fbcon_switch+0xbf5/0x14c0 [ 74.575079][ T7501] ? __pfx_fbcon_switch+0x10/0x10 [ 74.575114][ T7501] ? __pfx_bit_cursor+0x10/0x10 [ 74.575126][ T7501] ? fbcon_cursor+0x409/0x5f0 [ 74.575149][ T7501] ? is_console_locked+0x9/0x20 [ 74.575167][ T7501] ? con_is_visible+0x65/0x150 [ 74.575187][ T7501] redraw_screen+0x2be/0x760 [ 74.575209][ T7501] ? __pfx_redraw_screen+0x10/0x10 [ 74.575237][ T7501] fbcon_do_set_font+0x60d/0x940 [ 74.575262][ T7501] fbcon_set_font+0x9ed/0xb80 [ 74.575290][ T7501] ? __pfx_fbcon_set_font+0x10/0x10 [ 74.575311][ T7501] con_font_op+0x7fb/0xf50 [ 74.575338][ T7501] ? __pfx_con_font_op+0x10/0x10 [ 74.575359][ T7501] ? __might_fault+0xe3/0x190 [ 74.575371][ T7501] ? __might_fault+0xe3/0x190 [ 74.575385][ T7501] ? __might_fault+0x13b/0x190 [ 74.575411][ T7501] vt_ioctl+0x48f/0x2f50 [ 74.575426][ T7501] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.575445][ T7501] ? __pfx_vt_ioctl+0x10/0x10 [ 74.575468][ T7501] ? tomoyo_path_number_perm+0x18d/0x580 [ 74.575491][ T7501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.575509][ T7501] ? do_vfs_ioctl+0x512/0x1990 [ 74.575527][ T7501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.575542][ T7501] ? tty_jobctrl_ioctl+0x152/0xe00 [ 74.575561][ T7501] ? __pfx_vt_ioctl+0x10/0x10 [ 74.575576][ T7501] tty_ioctl+0x65a/0x1610 [ 74.575599][ T7501] ? __pfx_tty_ioctl+0x10/0x10 [ 74.575618][ T7501] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.575649][ T7501] ? hook_file_ioctl_common+0x145/0x410 [ 74.575672][ T7501] ? selinux_file_ioctl+0x180/0x270 [ 74.575693][ T7501] ? selinux_file_ioctl+0xb4/0x270 [ 74.575712][ T7501] ? __pfx_tty_ioctl+0x10/0x10 [ 74.575735][ T7501] __x64_sys_ioctl+0x190/0x200 [ 74.575758][ T7501] do_syscall_64+0xcd/0x260 [ 74.575779][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.575791][ T7501] RIP: 0033:0x7f6f54f8e969 [ 74.575805][ T7501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.575819][ T7501] RSP: 002b:00007f6f55d7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.575841][ T7501] RAX: ffffffffffffffda RBX: 00007f6f551b5fa0 RCX: 00007f6f54f8e969 [ 74.575850][ T7501] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000003 [ 74.575859][ T7501] RBP: 00007f6f55d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.575866][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.575872][ T7501] R13: 0000000000000000 R14: 00007f6f551b5fa0 R15: 00007ffdaefd9c18 [ 74.575894][ T7501] [ 74.594440][ T7503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.606976][ T7507] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 74.606993][ T7507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.607466][ T7507] vhci_hcd vhci_hcd.0: Device attached [ 74.623631][ T7508] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 0 [ 74.761611][ T1145] vhci_hcd: stop threads [ 74.763059][ T1145] vhci_hcd: release socket [ 74.765483][ T1145] vhci_hcd: disconnect device [ 74.795830][ T7516] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.798769][ T7516] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.822913][ T24] vhci_hcd: vhci_device speed not set [ 74.881585][ T40] audit: type=1400 audit(1745530168.972:419): avc: denied { ioctl } for pid=7528 comm="syz.3.526" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 75.101949][ T58] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 75.165909][ T7539] FAULT_INJECTION: forcing a failure. [ 75.165909][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 75.170890][ T7539] CPU: 1 UID: 0 PID: 7539 Comm: syz.3.528 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 75.170905][ T7539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.170911][ T7539] Call Trace: [ 75.170916][ T7539] [ 75.170920][ T7539] dump_stack_lvl+0x16c/0x1f0 [ 75.170953][ T7539] should_fail_ex+0x512/0x640 [ 75.170968][ T7539] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 75.170981][ T7539] should_failslab+0xc2/0x120 [ 75.170993][ T7539] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 75.171003][ T7539] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 75.171015][ T7539] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 75.171034][ T7539] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 75.171048][ T7539] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 75.171063][ T7539] mmu_topup_memory_caches+0x25/0x170 [ 75.171074][ T7539] kvm_mmu_load+0xd9/0x22a0 [ 75.171091][ T7539] ? kvm_apic_has_interrupt+0xb5/0x190 [ 75.171105][ T7539] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 75.171119][ T7539] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 75.171129][ T7539] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 75.171144][ T7539] ? __pfx_kvm_mmu_load+0x10/0x10 [ 75.171160][ T7539] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 75.171172][ T7539] ? kvm_check_and_inject_events+0x71c/0x1310 [ 75.171191][ T7539] vcpu_run+0x33d9/0x52d0 [ 75.171205][ T7539] ? kvm_mmu_post_init_vm+0x269/0x370 [ 75.171217][ T7539] ? __lock_acquire+0xaa4/0x1ba0 [ 75.171230][ T7539] ? __pfx_vcpu_run+0x10/0x10 [ 75.171248][ T7539] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 75.171262][ T7539] ? __local_bh_enable_ip+0xa4/0x120 [ 75.171279][ T7539] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 75.171294][ T7539] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 75.171314][ T7539] kvm_vcpu_ioctl+0x5e9/0x1680 [ 75.171325][ T7539] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.171346][ T7539] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 75.171364][ T7539] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.171384][ T7539] ? hook_file_ioctl_common+0x145/0x410 [ 75.171398][ T7539] ? selinux_file_ioctl+0x180/0x270 [ 75.171414][ T7539] ? selinux_file_ioctl+0xb4/0x270 [ 75.171429][ T7539] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.171446][ T7539] __x64_sys_ioctl+0x190/0x200 [ 75.171462][ T7539] do_syscall_64+0xcd/0x260 [ 75.171478][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.171489][ T7539] RIP: 0033:0x7f5b8ef8e969 [ 75.171498][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.171508][ T7539] RSP: 002b:00007f5b8fd52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.171519][ T7539] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef8e969 [ 75.171525][ T7539] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 75.171531][ T7539] RBP: 00007f5b8fd52090 R08: 0000000000000000 R09: 0000000000000000 [ 75.171537][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.171542][ T7539] R13: 0000000000000000 R14: 00007f5b8f1b5fa0 R15: 00007ffe11838e48 [ 75.171555][ T7539] [ 75.293135][ T58] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.296516][ T58] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.299559][ T58] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.302637][ T58] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.306350][ T58] usb 10-1: config 0 descriptor?? [ 75.471029][ T40] audit: type=1400 audit(1745530169.552:420): avc: denied { create } for pid=7548 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 75.481950][ T40] audit: type=1400 audit(1745530169.572:421): avc: denied { write } for pid=7548 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 75.513192][ T7553] FAULT_INJECTION: forcing a failure. [ 75.513192][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 75.514893][ T58] usbhid 10-1:0.0: can't add hid device: -71 [ 75.518422][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.3.533 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 75.518445][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.518455][ T7553] Call Trace: [ 75.518462][ T7553] [ 75.518469][ T7553] dump_stack_lvl+0x16c/0x1f0 [ 75.518496][ T7553] should_fail_ex+0x512/0x640 [ 75.518514][ T7553] ? __kmalloc_noprof+0xbf/0x510 [ 75.518533][ T7553] ? sk_prot_alloc+0x1a8/0x2a0 [ 75.518555][ T7553] should_failslab+0xc2/0x120 [ 75.518574][ T7553] __kmalloc_noprof+0xd2/0x510 [ 75.518596][ T7553] sk_prot_alloc+0x1a8/0x2a0 [ 75.518620][ T7553] sk_alloc+0x36/0xc20 [ 75.518639][ T7553] __netlink_create+0x5e/0x2c0 [ 75.518657][ T7553] ? __wake_up+0x3f/0x60 [ 75.518681][ T7553] netlink_create+0x39e/0x620 [ 75.518700][ T7553] ? __pfx_genl_bind+0x10/0x10 [ 75.518722][ T7553] ? __pfx_genl_unbind+0x10/0x10 [ 75.518743][ T7553] ? __pfx_genl_release+0x10/0x10 [ 75.518770][ T7553] __sock_create+0x335/0x8d0 [ 75.518800][ T7553] __sys_socket+0x14d/0x260 [ 75.518813][ T7553] ? fput+0x70/0xf0 [ 75.518832][ T7553] ? __pfx___sys_socket+0x10/0x10 [ 75.518844][ T7553] ? ksys_write+0x1b9/0x240 [ 75.518858][ T7553] ? __pfx_ksys_write+0x10/0x10 [ 75.518875][ T7553] __x64_sys_socket+0x72/0xb0 [ 75.518889][ T7553] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.518910][ T7553] do_syscall_64+0xcd/0x260 [ 75.518933][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.518949][ T7553] RIP: 0033:0x7f5b8ef90887 [ 75.518964][ T7553] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.518979][ T7553] RSP: 002b:00007f5b8fd50f48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 75.518994][ T7553] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef90887 [ 75.519005][ T7553] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 75.519015][ T7553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.519024][ T7553] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 75.519034][ T7553] R13: 0000000000000000 R14: 0000200000000040 R15: 0000200000000080 [ 75.519055][ T7553] [ 75.541166][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.543607][ T58] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 75.544853][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.552214][ T58] usb 10-1: USB disconnect, device number 2 [ 75.553493][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.613065][ T67] Bluetooth: hci3: command 0x0419 tx timeout [ 75.640346][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.643335][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.646398][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.655940][ T7559] Cannot find add_set index 0 as target [ 75.677360][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.680297][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 75.683496][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 76.331781][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.643541][ T7597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.758302][ T7643] Driver unsupported XDP return value 0 on prog (id 103) dev N/A, expect packet loss! [ 76.823311][ T7679] xt_hashlimit: size too large, truncated to 1048576 [ 76.827939][ T7599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.830084][ T7599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.835991][ T7599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.838604][ T40] audit: type=1400 audit(1745530170.932:422): avc: denied { read } for pid=7680 comm="syz.5.555" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.846647][ T40] audit: type=1400 audit(1745530170.932:423): avc: denied { open } for pid=7680 comm="syz.5.555" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.856442][ T40] audit: type=1400 audit(1745530170.942:424): avc: denied { ioctl } for pid=7680 comm="syz.5.555" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.876308][ T7685] FAULT_INJECTION: forcing a failure. [ 76.876308][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 76.884563][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.2.554 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 76.884587][ T7685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.884597][ T7685] Call Trace: [ 76.884603][ T7685] [ 76.884609][ T7685] dump_stack_lvl+0x16c/0x1f0 [ 76.884637][ T7685] should_fail_ex+0x512/0x640 [ 76.884654][ T7685] ? __kvmalloc_node_noprof+0x122/0x600 [ 76.884673][ T7685] should_failslab+0xc2/0x120 [ 76.884691][ T7685] __kvmalloc_node_noprof+0x135/0x600 [ 76.884708][ T7685] ? bucket_table_alloc.isra.0+0x83/0x460 [ 76.884736][ T7685] ? bucket_table_alloc.isra.0+0x83/0x460 [ 76.884751][ T7685] bucket_table_alloc.isra.0+0x83/0x460 [ 76.884769][ T7685] rhashtable_init_noprof+0x41a/0x7e0 [ 76.884783][ T7685] ? __pfx_br_dev_init+0x10/0x10 [ 76.884802][ T7685] br_dev_init+0x29/0x500 [ 76.884820][ T7685] ? kasan_save_track+0x14/0x30 [ 76.884832][ T7685] ? __pfx_br_dev_init+0x10/0x10 [ 76.884850][ T7685] register_netdevice+0x650/0x2270 [ 76.884876][ T7685] ? __pfx_validate_linkmsg+0x10/0x10 [ 76.884893][ T7685] ? __pfx_register_netdevice+0x10/0x10 [ 76.884919][ T7685] br_dev_newlink+0x6a/0x170 [ 76.884938][ T7685] ? __pfx_br_dev_newlink+0x10/0x10 [ 76.884959][ T7685] rtnl_newlink+0xc42/0x2000 [ 76.884984][ T7685] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.885000][ T7685] ? find_held_lock+0x2b/0x80 [ 76.885018][ T7685] ? avc_has_perm_noaudit+0x117/0x3b0 [ 76.885037][ T7685] ? avc_has_perm_noaudit+0x149/0x3b0 [ 76.885071][ T7685] ? find_held_lock+0x2b/0x80 [ 76.885088][ T7685] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.885104][ T7685] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.885121][ T7685] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 76.885139][ T7685] ? __pfx_rtnl_newlink+0x10/0x10 [ 76.885156][ T7685] rtnetlink_rcv_msg+0x95b/0xe90 [ 76.885174][ T7685] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.885200][ T7685] netlink_rcv_skb+0x16a/0x440 [ 76.885218][ T7685] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 76.885236][ T7685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.885264][ T7685] ? netlink_deliver_tap+0x1ae/0xd30 [ 76.885285][ T7685] netlink_unicast+0x53a/0x7f0 [ 76.885306][ T7685] ? __pfx_netlink_unicast+0x10/0x10 [ 76.885331][ T7685] netlink_sendmsg+0x8d1/0xdd0 [ 76.885353][ T7685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.885380][ T7685] ____sys_sendmsg+0xa95/0xc70 [ 76.885402][ T7685] ? copy_msghdr_from_user+0x10a/0x160 [ 76.885420][ T7685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.885453][ T7685] ___sys_sendmsg+0x134/0x1d0 [ 76.885472][ T7685] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.885521][ T7685] __sys_sendmsg+0x16d/0x220 [ 76.885541][ T7685] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.885565][ T7685] ? rcu_is_watching+0x12/0xc0 [ 76.885593][ T7685] do_syscall_64+0xcd/0x260 [ 76.885618][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.885635][ T7685] RIP: 0033:0x7f9003f8e969 [ 76.885649][ T7685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.885665][ T7685] RSP: 002b:00007f9001df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.885680][ T7685] RAX: ffffffffffffffda RBX: 00007f90041b6080 RCX: 00007f9003f8e969 [ 76.885690][ T7685] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 76.885700][ T7685] RBP: 00007f9001df6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.885709][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.885724][ T7685] R13: 0000000000000000 R14: 00007f90041b6080 R15: 00007ffdfce10a98 [ 76.885746][ T7685] [ 77.165394][ T7698] xt_hashlimit: size too large, truncated to 1048576 [ 78.001547][ T40] audit: type=1400 audit(1745530172.082:425): avc: denied { read } for pid=7716 comm="syz.5.565" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.011072][ T40] audit: type=1400 audit(1745530172.082:426): avc: denied { open } for pid=7716 comm="syz.5.565" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.075210][ T7725] IPv6: syztnl0: Disabled Multicast RS [ 78.185600][ T7731] overlay: ./file1 is not a directory [ 78.271751][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.291842][ T834] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 78.431901][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 78.434792][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.438086][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.440977][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.446313][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.448970][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.453039][ T834] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.456037][ T834] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 78.458867][ T834] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 78.461593][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.464190][ T9] usb 6-1: config 0 descriptor?? [ 78.469461][ T834] usb 8-1: config 0 descriptor?? [ 78.473542][ T834] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 78.475584][ T834] dvb-usb: bulk message failed: -22 (3/0) [ 78.480848][ T834] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 78.485994][ T834] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 78.488182][ T834] usb 8-1: media controller created [ 78.490662][ T834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.497571][ T834] dvb-usb: bulk message failed: -22 (6/0) [ 78.499488][ T834] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 78.507348][ T834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input6 [ 78.512825][ T834] dvb-usb: schedule remote query interval to 150 msecs. [ 78.514945][ T834] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 78.671812][ T834] dvb-usb: bulk message failed: -22 (1/0) [ 78.674427][ T834] dvb-usb: error while querying for an remote control event. [ 78.677029][ T835] usb 8-1: USB disconnect, device number 4 [ 78.690150][ T835] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 78.802445][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 78.871266][ T9] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 78.873632][ T9] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 78.876267][ T9] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 78.878440][ T9] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 78.880659][ T9] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 78.881908][ T67] Bluetooth: hci3: command 0x0419 tx timeout [ 78.882884][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.889590][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 78.912939][ T9] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 78.915602][ T9] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 79.072953][ T7722] random: crng reseeded on system resumption [ 79.208417][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.213025][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.228746][ T10] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 79.232642][ T834] usb 6-1: USB disconnect, device number 4 [ 79.238902][ T10] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 79.242659][ T10] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 79.246070][ T10] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 79.483876][ T7771] ceph: Path missing in source [ 79.565099][ T7778] FAULT_INJECTION: forcing a failure. [ 79.565099][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 79.568953][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.3.590 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 79.568969][ T7778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.568976][ T7778] Call Trace: [ 79.568979][ T7778] [ 79.568983][ T7778] dump_stack_lvl+0x16c/0x1f0 [ 79.569001][ T7778] should_fail_ex+0x512/0x640 [ 79.569013][ T7778] ? __kmalloc_noprof+0xbf/0x510 [ 79.569024][ T7778] ? lsm_blob_alloc+0x68/0x90 [ 79.569035][ T7778] should_failslab+0xc2/0x120 [ 79.569047][ T7778] __kmalloc_noprof+0xd2/0x510 [ 79.569059][ T7778] lsm_blob_alloc+0x68/0x90 [ 79.569070][ T7778] security_sk_alloc+0x30/0x270 [ 79.569083][ T7778] sk_prot_alloc+0x1c7/0x2a0 [ 79.569099][ T7778] sk_alloc+0x36/0xc20 [ 79.569111][ T7778] __netlink_create+0x5e/0x2c0 [ 79.569123][ T7778] ? __wake_up+0x3f/0x60 [ 79.569139][ T7778] netlink_create+0x39e/0x620 [ 79.569150][ T7778] ? __pfx_genl_bind+0x10/0x10 [ 79.569164][ T7778] ? __pfx_genl_unbind+0x10/0x10 [ 79.569178][ T7778] ? __pfx_genl_release+0x10/0x10 [ 79.569195][ T7778] __sock_create+0x335/0x8d0 [ 79.569213][ T7778] __sys_socket+0x14d/0x260 [ 79.569221][ T7778] ? fput+0x70/0xf0 [ 79.569233][ T7778] ? __pfx___sys_socket+0x10/0x10 [ 79.569241][ T7778] ? ksys_write+0x1b9/0x240 [ 79.569249][ T7778] ? __pfx_ksys_write+0x10/0x10 [ 79.569257][ T7778] ? rcu_is_watching+0x12/0xc0 [ 79.569273][ T7778] __x64_sys_socket+0x72/0xb0 [ 79.569281][ T7778] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.569295][ T7778] do_syscall_64+0xcd/0x260 [ 79.569310][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.569321][ T7778] RIP: 0033:0x7f5b8ef90887 [ 79.569330][ T7778] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.569340][ T7778] RSP: 002b:00007f5b8fd50f48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 79.569350][ T7778] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef90887 [ 79.569356][ T7778] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 79.569362][ T7778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.569367][ T7778] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 79.569373][ T7778] R13: 0000000000000000 R14: 0000200000000040 R15: 0000200000000080 [ 79.569386][ T7778] [ 79.651348][ T7780] tmpfs: Cannot change global quota limit on remount [ 79.693671][ T7782] __nla_validate_parse: 24 callbacks suppressed [ 79.693685][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. [ 79.693802][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 79.693816][ T40] audit: type=1400 audit(1745530173.782:435): avc: denied { write } for pid=7781 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.987239][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 80.084459][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 80.113744][ T7811] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 80.143002][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.146061][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.151753][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.154569][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.224899][ T7818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 80.313146][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 80.365722][ T10] usb 7-1: usb_control_msg returned -32 [ 80.367508][ T10] usbtmc 7-1:16.0: can't read capabilities [ 80.378471][ T7818] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.386199][ T7818] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.388202][ T7818] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.398794][ T7833] overlayfs: failed to resolve './file1': -2 [ 80.403014][ T7818] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.460544][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'. [ 80.464787][ T7835] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 80.589273][ T40] audit: type=1400 audit(1745530174.672:436): avc: denied { append } for pid=7841 comm="syz.1.616" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.597809][ T7837] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 80.599902][ T7837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.600304][ T40] audit: type=1400 audit(1745530174.672:437): avc: denied { getopt } for pid=7838 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.603248][ T7837] vhci_hcd vhci_hcd.0: Device attached [ 80.608968][ T40] audit: type=1400 audit(1745530174.692:438): avc: denied { name_connect } for pid=7841 comm="syz.1.616" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 80.617096][ T7845] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 0 [ 80.620387][ T12] vhci_hcd: stop threads [ 80.621848][ T12] vhci_hcd: release socket [ 80.622338][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 80.623486][ T12] vhci_hcd: disconnect device [ 80.629500][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.791908][ T7863] overlayfs: failed to resolve './file1': -2 [ 80.921431][ T835] usb 7-1: USB disconnect, device number 3 [ 81.364004][ T57] cfg80211: failed to load regulatory.db [ 81.438717][ T40] audit: type=1400 audit(1745530175.522:439): avc: denied { write } for pid=7875 comm="syz.1.627" lport=34111 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 81.447513][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 81.472132][ T7881] FAULT_INJECTION: forcing a failure. [ 81.472132][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 81.477565][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.2.628 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 81.477580][ T7881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.477587][ T7881] Call Trace: [ 81.477591][ T7881] [ 81.477595][ T7881] dump_stack_lvl+0x16c/0x1f0 [ 81.477613][ T7881] should_fail_ex+0x512/0x640 [ 81.477627][ T7881] should_failslab+0xc2/0x120 [ 81.477640][ T7881] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 81.477653][ T7881] ? sidtab_sid2str_get+0x17a/0x680 [ 81.477672][ T7881] kmemdup_noprof+0x29/0x60 [ 81.477684][ T7881] sidtab_sid2str_get+0x17a/0x680 [ 81.477702][ T7881] sidtab_entry_to_string+0x33/0x110 [ 81.477717][ T7881] security_sid_to_context_core+0x35c/0x640 [ 81.477734][ T7881] selinux_inode_init_security+0x460/0x660 [ 81.477752][ T7881] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 81.477768][ T7881] ? trace_kmalloc+0x2b/0xd0 [ 81.477785][ T7881] security_inode_init_security+0x1e5/0x390 [ 81.477797][ T7881] ? __pfx_shmem_initxattrs+0x10/0x10 [ 81.477813][ T7881] ? __pfx_security_inode_init_security+0x10/0x10 [ 81.477828][ T7881] shmem_mknod+0x22e/0x450 [ 81.477846][ T7881] vfs_mknod+0x5d7/0x8e0 [ 81.477863][ T7881] ovl_create_real+0x390/0x750 [ 81.477877][ T7881] ovl_create_or_link+0x2a4/0x800 [ 81.477890][ T7881] ? inode_init_owner+0x2d6/0x3e0 [ 81.477903][ T7881] ovl_create_object+0x266/0x300 [ 81.477916][ T7881] ? __pfx_ovl_create_object+0x10/0x10 [ 81.477929][ T7881] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.477948][ T7881] ovl_mknod+0x59/0x80 [ 81.477959][ T7881] vfs_mknod+0x5d7/0x8e0 [ 81.477976][ T7881] unix_bind+0x30a/0x1680 [ 81.477987][ T7881] ? __might_fault+0xe3/0x190 [ 81.478000][ T7881] ? __pfx_unix_bind+0x10/0x10 [ 81.478013][ T7881] __sys_bind+0x211/0x260 [ 81.478024][ T7881] ? __pfx___sys_bind+0x10/0x10 [ 81.478033][ T7881] ? __fget_files+0x20e/0x3c0 [ 81.478048][ T7881] ? __pfx_ksys_write+0x10/0x10 [ 81.478061][ T7881] __x64_sys_bind+0x72/0xb0 [ 81.478069][ T7881] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.478083][ T7881] do_syscall_64+0xcd/0x260 [ 81.478099][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.478110][ T7881] RIP: 0033:0x7f9003f8e969 [ 81.478119][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.478129][ T7881] RSP: 002b:00007f9004d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 81.478139][ T7881] RAX: ffffffffffffffda RBX: 00007f90041b5fa0 RCX: 00007f9003f8e969 [ 81.478145][ T7881] RDX: 000000000000006e RSI: 0000200000000400 RDI: 0000000000000009 [ 81.478151][ T7881] RBP: 00007f9004d25090 R08: 0000000000000000 R09: 0000000000000000 [ 81.478157][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.478163][ T7881] R13: 0000000000000000 R14: 00007f90041b5fa0 R15: 00007ffdfce10a98 [ 81.478176][ T7881] [ 81.575761][ T7894] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 81.578290][ T7894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.583266][ T7894] vhci_hcd vhci_hcd.0: Device attached [ 81.743322][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 81.746176][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 81.748918][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 81.821781][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 81.824759][ T6517] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 81.891917][ T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.994251][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.998220][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.002615][ T34] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.006305][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.012777][ T34] usb 10-1: config 0 descriptor?? [ 82.040565][ T7926] overlay: ./file1 is not a directory [ 82.042269][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 82.046907][ T57] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 82.051751][ T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.055779][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.059558][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.065303][ T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.070648][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.074543][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.219356][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 82.221388][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 82.225479][ T34] usb 10-1: USB disconnect, device number 3 [ 82.286219][ T57] usb 6-1: usb_control_msg returned -32 [ 82.288734][ T57] usbtmc 6-1:16.0: can't read capabilities [ 82.401944][ T5948] Bluetooth: hci3: command 0x0419 tx timeout [ 82.401962][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 82.481834][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.604024][ T7933] xt_hashlimit: size too large, truncated to 1048576 [ 82.622563][ T7895] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 1 [ 82.625299][ T1142] vhci_hcd: stop threads [ 82.626673][ T1142] vhci_hcd: release socket [ 82.628145][ T1142] vhci_hcd: disconnect device [ 82.659459][ T7937] xt_hashlimit: size too large, truncated to 1048576 [ 82.810696][ T7945] FAULT_INJECTION: forcing a failure. [ 82.810696][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.815034][ T7945] CPU: 0 UID: 0 PID: 7945 Comm: syz.2.652 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 82.815049][ T7945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.815055][ T7945] Call Trace: [ 82.815059][ T7945] [ 82.815062][ T7945] dump_stack_lvl+0x16c/0x1f0 [ 82.815081][ T7945] should_fail_ex+0x512/0x640 [ 82.815095][ T7945] _copy_from_user+0x2e/0xd0 [ 82.815107][ T7945] memdup_user+0x6b/0xe0 [ 82.815120][ T7945] strndup_user+0x78/0xe0 [ 82.815132][ T7945] __x64_sys_mount+0x137/0x310 [ 82.815145][ T7945] ? __pfx___x64_sys_mount+0x10/0x10 [ 82.815161][ T7945] do_syscall_64+0xcd/0x260 [ 82.815176][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.815187][ T7945] RIP: 0033:0x7f9003f8e969 [ 82.815195][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.815205][ T7945] RSP: 002b:00007f9004d25038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.815215][ T7945] RAX: ffffffffffffffda RBX: 00007f90041b5fa0 RCX: 00007f9003f8e969 [ 82.815222][ T7945] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 82.815228][ T7945] RBP: 00007f9004d25090 R08: 0000200000000280 R09: 0000000000000000 [ 82.815233][ T7945] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.815239][ T7945] R13: 0000000000000000 R14: 00007f90041b5fa0 R15: 00007ffdfce10a98 [ 82.815252][ T7945] [ 82.921310][ T40] audit: type=1400 audit(1745530177.002:440): avc: denied { nlmsg_read } for pid=7956 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.995003][ T40] audit: type=1400 audit(1745530177.072:441): avc: denied { mount } for pid=7904 comm="syz.1.639" name="/" dev="ramfs" ino=22099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.006236][ T57] usb 6-1: USB disconnect, device number 5 [ 83.010906][ T40] audit: type=1400 audit(1745530177.092:442): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.025688][ T40] audit: type=1400 audit(1745530177.112:443): avc: denied { mounton } for pid=7968 comm="syz.2.661" path="/183/file0/bus" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 83.026291][ T7969] overlay: filesystem on ./bus not supported [ 83.049847][ T40] audit: type=1400 audit(1745530177.132:444): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.110266][ T7982] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 83.208675][ T7990] kvm: pic: non byte read [ 83.211209][ T7990] kvm: pic: level sensitive irq not supported [ 83.211448][ T7990] kvm: pic: non byte read [ 83.216688][ T7990] kvm: pic: level sensitive irq not supported [ 83.216956][ T7990] kvm: pic: non byte read [ 83.221358][ T7990] kvm: pic: level sensitive irq not supported [ 83.224418][ T7990] kvm: pic: non byte read [ 84.007859][ T8005] xt_hashlimit: size too large, truncated to 1048576 [ 84.048021][ T8009] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.133831][ T8014] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 84.135864][ T8014] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.138272][ T8014] vhci_hcd vhci_hcd.0: Device attached [ 84.391790][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 84.392129][ T58] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 84.483472][ T5948] Bluetooth: hci3: command 0x0419 tx timeout [ 84.553244][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.556887][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.560027][ T34] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.565614][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.569773][ T34] usb 6-1: config 0 descriptor?? [ 84.597962][ T8050] FAULT_INJECTION: forcing a failure. [ 84.597962][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 84.602141][ T8050] CPU: 0 UID: 0 PID: 8050 Comm: syz.5.689 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 84.602156][ T8050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.602162][ T8050] Call Trace: [ 84.602166][ T8050] [ 84.602170][ T8050] dump_stack_lvl+0x16c/0x1f0 [ 84.602188][ T8050] should_fail_ex+0x512/0x640 [ 84.602199][ T8050] ? __kvmalloc_node_noprof+0x122/0x600 [ 84.602211][ T8050] should_failslab+0xc2/0x120 [ 84.602223][ T8050] __kvmalloc_node_noprof+0x135/0x600 [ 84.602232][ T8050] ? do_raw_spin_lock+0x12c/0x2b0 [ 84.602244][ T8050] ? find_held_lock+0x2b/0x80 [ 84.602256][ T8050] ? simple_xattr_alloc+0x41/0xa0 [ 84.602272][ T8050] ? simple_xattr_alloc+0x41/0xa0 [ 84.602283][ T8050] simple_xattr_alloc+0x41/0xa0 [ 84.602296][ T8050] shmem_initxattrs+0x127/0x5b0 [ 84.602310][ T8050] ? evm_inode_init_security+0x237/0x320 [ 84.602329][ T8050] security_inode_init_security+0x26b/0x390 [ 84.602341][ T8050] ? __pfx_shmem_initxattrs+0x10/0x10 [ 84.602355][ T8050] ? __pfx_security_inode_init_security+0x10/0x10 [ 84.602371][ T8050] shmem_mknod+0x22e/0x450 [ 84.602388][ T8050] vfs_mknod+0x5d7/0x8e0 [ 84.602406][ T8050] ovl_create_real+0x390/0x750 [ 84.602420][ T8050] ovl_create_or_link+0x2a4/0x800 [ 84.602433][ T8050] ? inode_init_owner+0x2d6/0x3e0 [ 84.602446][ T8050] ovl_create_object+0x266/0x300 [ 84.602458][ T8050] ? __pfx_ovl_create_object+0x10/0x10 [ 84.602472][ T8050] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.602486][ T8050] ovl_mknod+0x59/0x80 [ 84.602498][ T8050] vfs_mknod+0x5d7/0x8e0 [ 84.602515][ T8050] unix_bind+0x30a/0x1680 [ 84.602525][ T8050] ? __might_fault+0xe3/0x190 [ 84.602544][ T8050] ? __pfx_unix_bind+0x10/0x10 [ 84.602564][ T8050] __sys_bind+0x211/0x260 [ 84.602582][ T8050] ? __pfx___sys_bind+0x10/0x10 [ 84.602597][ T8050] ? __fget_files+0x20e/0x3c0 [ 84.602624][ T8050] ? __pfx_ksys_write+0x10/0x10 [ 84.602639][ T8050] ? rcu_is_watching+0x12/0xc0 [ 84.602666][ T8050] __x64_sys_bind+0x72/0xb0 [ 84.602680][ T8050] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.602702][ T8050] do_syscall_64+0xcd/0x260 [ 84.602720][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.602731][ T8050] RIP: 0033:0x7f91a298e969 [ 84.602746][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.602756][ T8050] RSP: 002b:00007f91a37e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 84.602766][ T8050] RAX: ffffffffffffffda RBX: 00007f91a2bb5fa0 RCX: 00007f91a298e969 [ 84.602772][ T8050] RDX: 000000000000006e RSI: 0000200000000400 RDI: 0000000000000009 [ 84.602778][ T8050] RBP: 00007f91a37e0090 R08: 0000000000000000 R09: 0000000000000000 [ 84.602784][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.602790][ T8050] R13: 0000000000000000 R14: 00007f91a2bb5fa0 R15: 00007ffeb2e48bb8 [ 84.602803][ T8050] [ 84.777164][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 84.779216][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 84.783696][ T34] usb 6-1: USB disconnect, device number 6 [ 84.975482][ T8015] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 2 [ 84.978044][ T1143] vhci_hcd: stop threads [ 84.979458][ T1143] vhci_hcd: release socket [ 84.980973][ T1143] vhci_hcd: disconnect device [ 85.276717][ T8054] IPVS: persistence engine module ip_vs_pe_" not found [ 85.556146][ T8081] FAULT_INJECTION: forcing a failure. [ 85.556146][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 85.560123][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.3.701 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 85.560137][ T8081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.560144][ T8081] Call Trace: [ 85.560148][ T8081] [ 85.560152][ T8081] dump_stack_lvl+0x16c/0x1f0 [ 85.560170][ T8081] should_fail_ex+0x512/0x640 [ 85.560181][ T8081] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 85.560199][ T8081] should_failslab+0xc2/0x120 [ 85.560217][ T8081] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 85.560231][ T8081] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 85.560251][ T8081] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 85.560274][ T8081] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 85.560314][ T8081] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 85.560334][ T8081] mmu_topup_memory_caches+0x25/0x170 [ 85.560345][ T8081] kvm_mmu_load+0xd9/0x22a0 [ 85.560362][ T8081] ? kvm_apic_has_interrupt+0xb5/0x190 [ 85.560376][ T8081] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 85.560391][ T8081] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 85.560400][ T8081] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 85.560415][ T8081] ? __pfx_kvm_mmu_load+0x10/0x10 [ 85.560431][ T8081] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 85.560443][ T8081] ? kvm_check_and_inject_events+0x71c/0x1310 [ 85.560462][ T8081] vcpu_run+0x33d9/0x52d0 [ 85.560476][ T8081] ? kvm_mmu_post_init_vm+0x269/0x370 [ 85.560487][ T8081] ? __lock_acquire+0xaa4/0x1ba0 [ 85.560501][ T8081] ? __pfx_vcpu_run+0x10/0x10 [ 85.560518][ T8081] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 85.560533][ T8081] ? __local_bh_enable_ip+0xa4/0x120 [ 85.560549][ T8081] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 85.560565][ T8081] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 85.560585][ T8081] kvm_vcpu_ioctl+0x5e9/0x1680 [ 85.560596][ T8081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.560616][ T8081] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 85.560634][ T8081] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 85.560655][ T8081] ? hook_file_ioctl_common+0x145/0x410 [ 85.560669][ T8081] ? selinux_file_ioctl+0x180/0x270 [ 85.560684][ T8081] ? selinux_file_ioctl+0xb4/0x270 [ 85.560700][ T8081] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 85.560716][ T8081] __x64_sys_ioctl+0x190/0x200 [ 85.560732][ T8081] do_syscall_64+0xcd/0x260 [ 85.560747][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.560758][ T8081] RIP: 0033:0x7f5b8ef8e969 [ 85.560767][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.560777][ T8081] RSP: 002b:00007f5b8fd52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.560787][ T8081] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef8e969 [ 85.560793][ T8081] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 85.560799][ T8081] RBP: 00007f5b8fd52090 R08: 0000000000000000 R09: 0000000000000000 [ 85.560805][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.560810][ T8081] R13: 0000000000000000 R14: 00007f5b8f1b5fa0 R15: 00007ffe11838e48 [ 85.560823][ T8081] [ 85.720010][ T8084] __nla_validate_parse: 29 callbacks suppressed [ 85.720023][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.726009][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.728840][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.744064][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 85.744075][ T40] audit: type=1400 audit(1745530179.832:449): avc: denied { read write } for pid=8086 comm="syz.3.702" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.745149][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.746174][ T40] audit: type=1400 audit(1745530179.832:450): avc: denied { open } for pid=8086 comm="syz.3.702" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.753454][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.759019][ T40] audit: type=1400 audit(1745530179.842:451): avc: denied { map } for pid=8086 comm="syz.3.702" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.763655][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.769676][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 85.773888][ T40] audit: type=1400 audit(1745530179.852:452): avc: denied { execute } for pid=8086 comm="syz.3.702" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.805219][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.808048][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.810870][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 85.982607][ T8098] hfsplus: unable to find HFS+ superblock [ 85.986614][ T40] audit: type=1400 audit(1745530180.082:453): avc: denied { getopt } for pid=8097 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.986746][ T8098] tmpfs: Invalid gid '0x00000000ffffffff' [ 86.007849][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.197390][ T8109] overlay: ./file1 is not a directory [ 86.210906][ T40] audit: type=1400 audit(1745530180.292:454): avc: denied { shutdown } for pid=8106 comm="syz.5.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.462333][ T40] audit: type=1400 audit(1745530180.552:455): avc: denied { mount } for pid=8114 comm="syz.1.708" name="/" dev="autofs" ino=23991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 86.562418][ T40] audit: type=1400 audit(1745530180.652:456): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 86.585284][ T8117] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 86.587336][ T8117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.590391][ T8117] vhci_hcd vhci_hcd.0: Device attached [ 86.756538][ T8123] IPv6: syztnl0: Disabled Multicast RS [ 86.861934][ T835] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 86.942466][ T40] audit: type=1400 audit(1745530181.032:457): avc: denied { getopt } for pid=8136 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.945345][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 86.962274][ T6517] vhci_hcd: vhci_device speed not set [ 87.044194][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.047664][ T835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.051065][ T835] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.054313][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.062657][ T835] usb 6-1: config 0 descriptor?? [ 87.269625][ T835] usbhid 6-1:0.0: can't add hid device: -71 [ 87.271787][ T835] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 87.275275][ T835] usb 6-1: USB disconnect, device number 7 [ 87.451777][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 87.468861][ T8118] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 2 [ 87.471640][ T12] vhci_hcd: stop threads [ 87.473117][ T12] vhci_hcd: release socket [ 87.474554][ T12] vhci_hcd: disconnect device [ 87.954261][ T8169] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 87.959449][ T40] audit: type=1400 audit(1745530182.042:458): avc: denied { getopt } for pid=8167 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.052196][ T8184] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.140494][ T8192] netlink: set zone limit has 8 unknown bytes [ 88.182110][ T8201] FAULT_INJECTION: forcing a failure. [ 88.182110][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 88.184570][ T8199] IPv6: syztnl0: Disabled Multicast RS [ 88.186145][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.5.740 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 88.186160][ T8201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.186166][ T8201] Call Trace: [ 88.186171][ T8201] [ 88.186174][ T8201] dump_stack_lvl+0x16c/0x1f0 [ 88.186204][ T8201] should_fail_ex+0x512/0x640 [ 88.186219][ T8201] ? __kmalloc_noprof+0xbf/0x510 [ 88.186230][ T8201] ? shmem_initxattrs+0x168/0x5b0 [ 88.186244][ T8201] should_failslab+0xc2/0x120 [ 88.186256][ T8201] __kmalloc_noprof+0xd2/0x510 [ 88.186269][ T8201] shmem_initxattrs+0x168/0x5b0 [ 88.186283][ T8201] ? evm_inode_init_security+0x237/0x320 [ 88.186301][ T8201] security_inode_init_security+0x26b/0x390 [ 88.186314][ T8201] ? __pfx_shmem_initxattrs+0x10/0x10 [ 88.186328][ T8201] ? __pfx_security_inode_init_security+0x10/0x10 [ 88.186344][ T8201] shmem_mknod+0x22e/0x450 [ 88.186361][ T8201] vfs_mknod+0x5d7/0x8e0 [ 88.186379][ T8201] ovl_create_real+0x390/0x750 [ 88.186393][ T8201] ovl_create_or_link+0x2a4/0x800 [ 88.186406][ T8201] ? inode_init_owner+0x2d6/0x3e0 [ 88.186419][ T8201] ovl_create_object+0x266/0x300 [ 88.186432][ T8201] ? __pfx_ovl_create_object+0x10/0x10 [ 88.186446][ T8201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.186461][ T8201] ovl_mknod+0x59/0x80 [ 88.186472][ T8201] vfs_mknod+0x5d7/0x8e0 [ 88.186489][ T8201] unix_bind+0x30a/0x1680 [ 88.186500][ T8201] ? __might_fault+0xe3/0x190 [ 88.186513][ T8201] ? __pfx_unix_bind+0x10/0x10 [ 88.186526][ T8201] __sys_bind+0x211/0x260 [ 88.186538][ T8201] ? __pfx___sys_bind+0x10/0x10 [ 88.186547][ T8201] ? __fget_files+0x20e/0x3c0 [ 88.186561][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 88.186570][ T8201] ? rcu_is_watching+0x12/0xc0 [ 88.186586][ T8201] __x64_sys_bind+0x72/0xb0 [ 88.186595][ T8201] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.186608][ T8201] do_syscall_64+0xcd/0x260 [ 88.186624][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.186635][ T8201] RIP: 0033:0x7f91a298e969 [ 88.186643][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.186654][ T8201] RSP: 002b:00007f91a37e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 88.186664][ T8201] RAX: ffffffffffffffda RBX: 00007f91a2bb5fa0 RCX: 00007f91a298e969 [ 88.186670][ T8201] RDX: 000000000000006e RSI: 0000200000000400 RDI: 0000000000000009 [ 88.186676][ T8201] RBP: 00007f91a37e0090 R08: 0000000000000000 R09: 0000000000000000 [ 88.186682][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.186688][ T8201] R13: 0000000000000000 R14: 00007f91a2bb5fa0 R15: 00007ffeb2e48bb8 [ 88.186701][ T8201] [ 88.187054][ T67] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 88.291909][ T5948] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 88.383934][ T8221] ipvlan2: entered allmulticast mode [ 88.385677][ T8221] bond0: entered allmulticast mode [ 88.387334][ T8221] bond_slave_0: entered allmulticast mode [ 88.389375][ T8221] bond_slave_1: entered allmulticast mode [ 88.392441][ T8221] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 89.149076][ T8235] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 89.379180][ T8255] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 89.381629][ T8260] FAULT_INJECTION: forcing a failure. [ 89.381629][ T8260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.383368][ T8260] CPU: 3 UID: 0 PID: 8260 Comm: syz.2.762 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 89.383394][ T8260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.383405][ T8260] Call Trace: [ 89.383411][ T8260] [ 89.383418][ T8260] dump_stack_lvl+0x16c/0x1f0 [ 89.383446][ T8260] should_fail_ex+0x512/0x640 [ 89.383468][ T8260] _copy_from_user+0x2e/0xd0 [ 89.383488][ T8260] copy_mount_options+0x76/0x190 [ 89.383513][ T8260] __x64_sys_mount+0x1ac/0x310 [ 89.383532][ T8260] ? __pfx___x64_sys_mount+0x10/0x10 [ 89.383551][ T8260] ? rcu_is_watching+0x12/0xc0 [ 89.383578][ T8260] do_syscall_64+0xcd/0x260 [ 89.383609][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.383627][ T8260] RIP: 0033:0x7f9003f8e969 [ 89.383640][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.383656][ T8260] RSP: 002b:00007f9004d25038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.383674][ T8260] RAX: ffffffffffffffda RBX: 00007f90041b5fa0 RCX: 00007f9003f8e969 [ 89.383685][ T8260] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 89.383695][ T8260] RBP: 00007f9004d25090 R08: 0000200000000280 R09: 0000000000000000 [ 89.383705][ T8260] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.383715][ T8260] R13: 0000000000000000 R14: 00007f90041b5fa0 R15: 00007ffdfce10a98 [ 89.383737][ T8260] [ 89.385493][ T8260] overlay: ./file1 is not a directory [ 89.487832][ T8273] xt_hashlimit: size too large, truncated to 1048576 [ 89.523615][ T58] vhci_hcd: vhci_device speed not set [ 89.826619][ T8298] can0: slcan on ptm0. [ 89.943678][ T8297] can0 (unregistered): slcan off ptm0. [ 90.052581][ T8329] FAULT_INJECTION: forcing a failure. [ 90.052581][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.056673][ T8329] CPU: 2 UID: 0 PID: 8329 Comm: syz.3.782 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 90.056688][ T8329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.056695][ T8329] Call Trace: [ 90.056699][ T8329] [ 90.056703][ T8329] dump_stack_lvl+0x16c/0x1f0 [ 90.056726][ T8329] should_fail_ex+0x512/0x640 [ 90.056746][ T8329] _copy_from_user+0x2e/0xd0 [ 90.056768][ T8329] bpf_prog_load+0x1a8d/0x2490 [ 90.056794][ T8329] ? __pfx_bpf_prog_load+0x10/0x10 [ 90.056815][ T8329] ? avc_has_perm_noaudit+0x149/0x3b0 [ 90.056849][ T8329] ? selinux_bpf+0xde/0x130 [ 90.056866][ T8329] ? bpf_lsm_bpf+0x9/0x10 [ 90.056884][ T8329] __sys_bpf+0x433c/0x4d80 [ 90.056904][ T8329] ? __pfx___sys_bpf+0x10/0x10 [ 90.056919][ T8329] ? ksys_write+0x190/0x240 [ 90.056931][ T8329] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 90.056959][ T8329] ? fput+0x70/0xf0 [ 90.056977][ T8329] ? ksys_write+0x1b9/0x240 [ 90.056992][ T8329] ? __pfx_ksys_write+0x10/0x10 [ 90.057006][ T8329] ? rcu_is_watching+0x12/0xc0 [ 90.057032][ T8329] __x64_sys_bpf+0x78/0xc0 [ 90.057053][ T8329] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.057073][ T8329] do_syscall_64+0xcd/0x260 [ 90.057092][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.057103][ T8329] RIP: 0033:0x7f5b8ef8e969 [ 90.057112][ T8329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.057122][ T8329] RSP: 002b:00007f5b8fd52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.057132][ T8329] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef8e969 [ 90.057139][ T8329] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 90.057145][ T8329] RBP: 00007f5b8fd52090 R08: 0000000000000000 R09: 0000000000000000 [ 90.057150][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.057156][ T8329] R13: 0000000000000000 R14: 00007f5b8f1b5fa0 R15: 00007ffe11838e48 [ 90.057168][ T8329] [ 90.149866][ T8341] sp0: Synchronizing with TNC [ 90.550578][ T8395] bridge1: entered promiscuous mode [ 90.777353][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 90.777364][ T40] audit: type=1400 audit(1745530184.862:465): avc: denied { lock } for pid=8415 comm="syz.5.809" path="socket:[24551]" dev="sockfs" ino=24551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.785625][ T8418] nbd: must specify a size in bytes for the device [ 90.888751][ T8424] kvm: pic: non byte read [ 90.891386][ T8424] kvm: pic: level sensitive irq not supported [ 90.891796][ T8424] kvm: pic: non byte read [ 90.897145][ T8424] kvm: pic: level sensitive irq not supported [ 90.897444][ T8424] kvm: pic: non byte read [ 90.904219][ T8424] kvm: pic: level sensitive irq not supported [ 90.904527][ T8424] kvm: pic: non byte read [ 90.957875][ T40] audit: type=1400 audit(1745530185.042:466): avc: denied { ioctl } for pid=8435 comm="syz.1.816" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 90.958065][ T8436] __nla_validate_parse: 20 callbacks suppressed [ 90.958074][ T8436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.816'. [ 90.981497][ T5948] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 91.021441][ T8449] xt_hashlimit: size too large, truncated to 1048576 [ 91.073753][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 91.079915][ T8456] FAULT_INJECTION: forcing a failure. [ 91.079915][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.084066][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.3.824 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 91.084081][ T8456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.084087][ T8456] Call Trace: [ 91.084091][ T8456] [ 91.084095][ T8456] dump_stack_lvl+0x16c/0x1f0 [ 91.084113][ T8456] should_fail_ex+0x512/0x640 [ 91.084127][ T8456] _copy_from_user+0x2e/0xd0 [ 91.084140][ T8456] kvm_arch_vcpu_ioctl+0x27cc/0x4f00 [ 91.084155][ T8456] ? kvm_arch_vcpu_ioctl+0x27a7/0x4f00 [ 91.084170][ T8456] ? stack_trace_save+0x8e/0xc0 [ 91.084186][ T8456] ? stack_depot_save_flags+0x28/0xa50 [ 91.084201][ T8456] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 91.084217][ T8456] ? __lock_acquire+0xaa4/0x1ba0 [ 91.084230][ T8456] ? kasan_save_stack+0x42/0x60 [ 91.084258][ T8456] ? kasan_save_stack+0x33/0x60 [ 91.084272][ T8456] ? kasan_save_track+0x14/0x30 [ 91.084281][ T8456] ? kasan_save_free_info+0x3b/0x60 [ 91.084295][ T8456] ? __kasan_slab_free+0x51/0x70 [ 91.084304][ T8456] ? kfree+0x2b6/0x4d0 [ 91.084318][ T8456] ? tomoyo_path_number_perm+0x470/0x580 [ 91.084331][ T8456] ? security_file_ioctl+0x9b/0x240 [ 91.084345][ T8456] ? __x64_sys_ioctl+0xb7/0x200 [ 91.084361][ T8456] ? __lock_acquire+0xaa4/0x1ba0 [ 91.084374][ T8456] ? __mutex_trylock_common+0xe9/0x250 [ 91.084385][ T8456] ? __pfx___mutex_trylock_common+0x10/0x10 [ 91.084396][ T8456] ? __pfx___might_resched+0x10/0x10 [ 91.084417][ T8456] ? rcu_is_watching+0x12/0xc0 [ 91.084430][ T8456] ? trace_contention_end+0xdd/0x130 [ 91.084440][ T8456] ? __mutex_lock+0x1ca/0xb90 [ 91.084456][ T8456] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 91.084467][ T8456] ? __pfx___mutex_lock+0x10/0x10 [ 91.084486][ T8456] ? tomoyo_path_number_perm+0x18d/0x580 [ 91.084500][ T8456] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 91.084508][ T8456] kvm_vcpu_ioctl+0x1232/0x1680 [ 91.084519][ T8456] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 91.084539][ T8456] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 91.084557][ T8456] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 91.084578][ T8456] ? hook_file_ioctl_common+0x145/0x410 [ 91.084592][ T8456] ? selinux_file_ioctl+0x180/0x270 [ 91.084611][ T8456] ? selinux_file_ioctl+0xb4/0x270 [ 91.084627][ T8456] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 91.084645][ T8456] __x64_sys_ioctl+0x190/0x200 [ 91.084660][ T8456] do_syscall_64+0xcd/0x260 [ 91.084675][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.084686][ T8456] RIP: 0033:0x7f5b8ef8e969 [ 91.084695][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.084705][ T8456] RSP: 002b:00007f5b8fd52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.084716][ T8456] RAX: ffffffffffffffda RBX: 00007f5b8f1b5fa0 RCX: 00007f5b8ef8e969 [ 91.084722][ T8456] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 91.084728][ T8456] RBP: 00007f5b8fd52090 R08: 0000000000000000 R09: 0000000000000000 [ 91.084734][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.084742][ T8456] R13: 0000000000000000 R14: 00007f5b8f1b5fa0 R15: 00007ffe11838e48 [ 91.084755][ T8456] [ 91.279079][ T40] audit: type=1400 audit(1745530185.362:467): avc: denied { execstack } for pid=8464 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.327088][ T8465] SELinux: failed to load policy [ 91.349364][ T40] audit: type=1400 audit(1745530185.432:468): avc: denied { ioctl } for pid=8466 comm="syz.3.828" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.366222][ T8470] xt_hashlimit: size too large, truncated to 1048576 [ 91.379962][ T40] audit: type=1400 audit(1745530185.462:469): avc: denied { connect } for pid=8471 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.417060][ T40] audit: type=1400 audit(1745530185.502:470): avc: denied { setopt } for pid=8471 comm="syz.5.830" laddr=172.20.20.170 lport=6 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.420654][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 91.431965][ T8478] FAULT_INJECTION: forcing a failure. [ 91.431965][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 91.435961][ T8478] CPU: 2 UID: 0 PID: 8478 Comm: syz.3.829 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 91.435975][ T8478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.435982][ T8478] Call Trace: [ 91.435986][ T8478] [ 91.435990][ T8478] dump_stack_lvl+0x16c/0x1f0 [ 91.436008][ T8478] should_fail_ex+0x512/0x640 [ 91.436019][ T8478] ? __kvmalloc_node_noprof+0x122/0x600 [ 91.436032][ T8478] should_failslab+0xc2/0x120 [ 91.436044][ T8478] __kvmalloc_node_noprof+0x135/0x600 [ 91.436054][ T8478] ? bucket_table_alloc.isra.0+0x83/0x460 [ 91.436068][ T8478] ? bucket_table_alloc.isra.0+0x83/0x460 [ 91.436077][ T8478] bucket_table_alloc.isra.0+0x83/0x460 [ 91.436088][ T8478] rhashtable_init_noprof+0x41a/0x7e0 [ 91.436101][ T8478] br_vlan_init+0x67/0x210 [ 91.436112][ T8478] br_dev_init+0x7f/0x500 [ 91.436127][ T8478] ? kasan_save_track+0x14/0x30 [ 91.436136][ T8478] ? __pfx_br_dev_init+0x10/0x10 [ 91.436150][ T8478] register_netdevice+0x650/0x2270 [ 91.436167][ T8478] ? __pfx_validate_linkmsg+0x10/0x10 [ 91.436181][ T8478] ? __pfx_register_netdevice+0x10/0x10 [ 91.436199][ T8478] br_dev_newlink+0x6a/0x170 [ 91.436214][ T8478] ? __pfx_br_dev_newlink+0x10/0x10 [ 91.436229][ T8478] rtnl_newlink+0xc42/0x2000 [ 91.436264][ T8478] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.436277][ T8478] ? find_held_lock+0x2b/0x80 [ 91.436291][ T8478] ? avc_has_perm_noaudit+0x117/0x3b0 [ 91.436305][ T8478] ? avc_has_perm_noaudit+0x149/0x3b0 [ 91.436326][ T8478] ? find_held_lock+0x2b/0x80 [ 91.436338][ T8478] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.436351][ T8478] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.436363][ T8478] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 91.436377][ T8478] ? __pfx_rtnl_newlink+0x10/0x10 [ 91.436390][ T8478] rtnetlink_rcv_msg+0x95b/0xe90 [ 91.436404][ T8478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.436424][ T8478] netlink_rcv_skb+0x16a/0x440 [ 91.436439][ T8478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.436453][ T8478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.436474][ T8478] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.436490][ T8478] netlink_unicast+0x53a/0x7f0 [ 91.436506][ T8478] ? __pfx_netlink_unicast+0x10/0x10 [ 91.436524][ T8478] netlink_sendmsg+0x8d1/0xdd0 [ 91.436540][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.436559][ T8478] ____sys_sendmsg+0xa95/0xc70 [ 91.436590][ T8478] ? copy_msghdr_from_user+0x10a/0x160 [ 91.436602][ T8478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.436624][ T8478] ___sys_sendmsg+0x134/0x1d0 [ 91.436637][ T8478] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.436665][ T8478] __sys_sendmsg+0x16d/0x220 [ 91.436678][ T8478] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.436699][ T8478] do_syscall_64+0xcd/0x260 [ 91.436715][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.436725][ T8478] RIP: 0033:0x7f5b8ef8e969 [ 91.436734][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.436744][ T8478] RSP: 002b:00007f5b8fd31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.436755][ T8478] RAX: ffffffffffffffda RBX: 00007f5b8f1b6080 RCX: 00007f5b8ef8e969 [ 91.436762][ T8478] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 91.436768][ T8478] RBP: 00007f5b8fd31090 R08: 0000000000000000 R09: 0000000000000000 [ 91.436774][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.436779][ T8478] R13: 0000000000000000 R14: 00007f5b8f1b6080 R15: 00007ffe11838e48 [ 91.436792][ T8478] [ 91.767794][ T8490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 91.770419][ T8490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.773199][ T8490] vhci_hcd vhci_hcd.0: Device attached [ 92.011759][ T835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 92.014660][ T57] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 92.162907][ T835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.166157][ T835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.169021][ T835] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.171755][ T835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.175357][ T835] usb 8-1: config 0 descriptor?? [ 92.333876][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.838'. [ 92.382057][ T835] usbhid 8-1:0.0: can't add hid device: -71 [ 92.383986][ T835] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 92.392267][ T835] usb 8-1: USB disconnect, device number 5 [ 92.407095][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.840'. [ 92.420172][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.841'. [ 92.423675][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.841'. [ 92.580402][ T8491] vhci_hcd: cannot find a urb of seqnum 65536 max seqnum 1 [ 92.584295][ T84] vhci_hcd: stop threads [ 92.585656][ T84] vhci_hcd: release socket [ 92.587292][ T84] vhci_hcd: disconnect device [ 92.693873][ T8519] xt_hashlimit: size too large, truncated to 1048576 [ 92.752812][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 93.154389][ T8535] FAULT_INJECTION: forcing a failure. [ 93.154389][ T8535] name failslab, interval 1, probability 0, space 0, times 0 [ 93.159353][ T8535] CPU: 3 UID: 0 PID: 8535 Comm: syz.1.853 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 93.159374][ T8535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.159384][ T8535] Call Trace: [ 93.159390][ T8535] [ 93.159396][ T8535] dump_stack_lvl+0x16c/0x1f0 [ 93.159420][ T8535] should_fail_ex+0x512/0x640 [ 93.159436][ T8535] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 93.159455][ T8535] should_failslab+0xc2/0x120 [ 93.159473][ T8535] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 93.159488][ T8535] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 93.159502][ T8535] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 93.159523][ T8535] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 93.159544][ T8535] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 93.159568][ T8535] mmu_topup_memory_caches+0x25/0x170 [ 93.159586][ T8535] kvm_mmu_load+0xd9/0x22a0 [ 93.159609][ T8535] ? kvm_apic_has_interrupt+0xb5/0x190 [ 93.159629][ T8535] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 93.159650][ T8535] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 93.159664][ T8535] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 93.159682][ T8535] ? __pfx_kvm_mmu_load+0x10/0x10 [ 93.159705][ T8535] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 93.159722][ T8535] ? kvm_check_and_inject_events+0x71c/0x1310 [ 93.159749][ T8535] vcpu_run+0x33d9/0x52d0 [ 93.159765][ T8535] ? kvm_mmu_post_init_vm+0x269/0x370 [ 93.159783][ T8535] ? __lock_acquire+0xaa4/0x1ba0 [ 93.159804][ T8535] ? __pfx_vcpu_run+0x10/0x10 [ 93.159830][ T8535] ? fpu_swap_kvm_fpstate+0x235/0x4a0 [ 93.159848][ T8535] ? __local_bh_enable_ip+0xa4/0x120 [ 93.159874][ T8535] ? kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 93.159896][ T8535] kvm_arch_vcpu_ioctl_run+0x51c/0x18c0 [ 93.159921][ T8535] kvm_vcpu_ioctl+0x5e9/0x1680 [ 93.159937][ T8535] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 93.159967][ T8535] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 93.159993][ T8535] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 93.160020][ T8535] ? hook_file_ioctl_common+0x145/0x410 [ 93.160043][ T8535] ? selinux_file_ioctl+0x180/0x270 [ 93.160064][ T8535] ? selinux_file_ioctl+0xb4/0x270 [ 93.160085][ T8535] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 93.160107][ T8535] __x64_sys_ioctl+0x190/0x200 [ 93.160130][ T8535] do_syscall_64+0xcd/0x260 [ 93.160152][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.160167][ T8535] RIP: 0033:0x7f6f54f8e969 [ 93.160176][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.160190][ T8535] RSP: 002b:00007f6f55d7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.160205][ T8535] RAX: ffffffffffffffda RBX: 00007f6f551b5fa0 RCX: 00007f6f54f8e969 [ 93.160215][ T8535] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 93.160242][ T8535] RBP: 00007f6f55d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.160252][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.160261][ T8535] R13: 0000000000000000 R14: 00007f6f551b5fa0 R15: 00007ffdaefd9c18 [ 93.160283][ T8535] [ 93.260537][ C3] vkms_vblank_simulate: vblank timer overrun [ 93.326107][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.854'. [ 93.331941][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 93.360798][ T8541] IPv6: syztnl0: Disabled Multicast RS [ 93.521808][ T5958] Bluetooth: hci4: command 0x1003 tx timeout [ 93.522176][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.945129][ T8532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.947591][ T8532] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.952732][ T8532] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.955236][ T8532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.957255][ T8532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.959188][ T8532] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.961608][ T8532] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.005507][ T40] audit: type=1400 audit(1745530188.102:471): avc: denied { getopt } for pid=8545 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.067448][ T40] audit: type=1400 audit(1745530188.152:472): avc: denied { read } for pid=8559 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 94.100618][ T8564] netlink: 'syz.3.866': attribute type 11 has an invalid length. [ 94.166851][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.299550][ T40] audit: type=1400 audit(1745530188.382:473): avc: denied { getopt } for pid=8581 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.562038][ T67] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 94.562212][ T5958] Bluetooth: hci5: command 0x1003 tx timeout [ 94.636784][ T8589] FAULT_INJECTION: forcing a failure. [ 94.636784][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 94.643468][ T8589] CPU: 3 UID: 0 PID: 8589 Comm: syz.5.874 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 94.643484][ T8589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.643491][ T8589] Call Trace: [ 94.643496][ T8589] [ 94.643500][ T8589] dump_stack_lvl+0x16c/0x1f0 [ 94.643519][ T8589] should_fail_ex+0x512/0x640 [ 94.643531][ T8589] ? fs_reclaim_acquire+0xae/0x150 [ 94.643547][ T8589] should_failslab+0xc2/0x120 [ 94.643559][ T8589] __kmalloc_cache_noprof+0x6a/0x3e0 [ 94.643581][ T8589] ? do_raw_spin_lock+0x12c/0x2b0 [ 94.643593][ T8589] ? inode_doinit_use_xattr+0x54/0x410 [ 94.643608][ T8589] inode_doinit_use_xattr+0x54/0x410 [ 94.643622][ T8589] inode_doinit_with_dentry+0x51e/0x12e0 [ 94.643640][ T8589] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 94.643655][ T8589] ? __pfx_ovl_get_inode+0x10/0x10 [ 94.643668][ T8589] selinux_d_instantiate+0x26/0x30 [ 94.643695][ T8589] security_d_instantiate+0x142/0x1a0 [ 94.643711][ T8589] d_instantiate+0x5c/0x90 [ 94.643724][ T8589] ovl_instantiate+0x16a/0x2c0 [ 94.643736][ T8589] ? ovl_copyattr+0x445/0x590 [ 94.643750][ T8589] ? __pfx_ovl_instantiate+0x10/0x10 [ 94.643761][ T8589] ? __pfx_ovl_copyattr+0x10/0x10 [ 94.643783][ T8589] ovl_create_or_link+0x4fb/0x800 [ 94.643799][ T8589] ovl_create_object+0x266/0x300 [ 94.643811][ T8589] ? __pfx_ovl_create_object+0x10/0x10 [ 94.643825][ T8589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.643840][ T8589] ovl_mknod+0x59/0x80 [ 94.643852][ T8589] vfs_mknod+0x5d7/0x8e0 [ 94.643870][ T8589] unix_bind+0x30a/0x1680 [ 94.643880][ T8589] ? __might_fault+0xe3/0x190 [ 94.643894][ T8589] ? __pfx_unix_bind+0x10/0x10 [ 94.643907][ T8589] __sys_bind+0x211/0x260 [ 94.643918][ T8589] ? __pfx___sys_bind+0x10/0x10 [ 94.643927][ T8589] ? __fget_files+0x20e/0x3c0 [ 94.643942][ T8589] ? __pfx_ksys_write+0x10/0x10 [ 94.643950][ T8589] ? rcu_is_watching+0x12/0xc0 [ 94.643966][ T8589] __x64_sys_bind+0x72/0xb0 [ 94.643974][ T8589] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.643988][ T8589] do_syscall_64+0xcd/0x260 [ 94.644003][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.644014][ T8589] RIP: 0033:0x7f91a298e969 [ 94.644023][ T8589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.644033][ T8589] RSP: 002b:00007f91a37e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 94.644043][ T8589] RAX: ffffffffffffffda RBX: 00007f91a2bb5fa0 RCX: 00007f91a298e969 [ 94.644050][ T8589] RDX: 000000000000006e RSI: 0000200000000400 RDI: 0000000000000009 [ 94.644055][ T8589] RBP: 00007f91a37e0090 R08: 0000000000000000 R09: 0000000000000000 [ 94.644061][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.644067][ T8589] R13: 0000000000000000 R14: 00007f91a2bb5fa0 R15: 00007ffeb2e48bb8 [ 94.644081][ T8589] [ 94.743316][ C3] vkms_vblank_simulate: vblank timer overrun [ 94.773057][ T8591] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 94.775936][ T8591] overlayfs: missing 'lowerdir' [ 94.793512][ T8591] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 94.796668][ T8591] UDF-fs: Scanning with blocksize 2048 failed [ 94.800754][ T8591] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 94.805650][ T8591] UDF-fs: Scanning with blocksize 4096 failed [ 94.810058][ T8591] dns_resolver: Unsupported content type (234) [ 95.184320][ T8603] xt_hashlimit: size too large, truncated to 1048576 [ 95.372095][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 95.410754][ T40] audit: type=1400 audit(1745530189.492:474): avc: denied { read } for pid=8612 comm="syz.5.882" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.439568][ T8620] xt_ipcomp: unknown flags 12 [ 95.464561][ T67] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 95.510744][ T8622] overlayfs: failed to resolve './file1': -2 [ 95.576631][ T8622] vivid-007: ================= START STATUS ================= [ 95.579248][ T8622] vivid-007: Enable Output Cropping: true [ 95.581893][ T8622] vivid-007: Enable Output Composing: true [ 95.584186][ T8622] vivid-007: Enable Output Scaler: true [ 95.586318][ T8622] vivid-007: Tx RGB Quantization Range: Automatic [ 95.588419][ T8622] vivid-007: Transmit Mode: HDMI [ 95.590002][ T8622] vivid-007: Hotplug Present: 0x00000000 [ 95.591874][ T8622] vivid-007: RxSense Present: 0x00000000 [ 95.593699][ T8622] vivid-007: EDID Present: 0x00000000 [ 95.595631][ T8622] vivid-007: ================== END STATUS ================== [ 95.662990][ T8633] bond1: entered promiscuous mode [ 95.664999][ T8633] bond1: entered allmulticast mode [ 95.667333][ T8633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.672292][ T8636] tipc: Trying to set illegal importance in message [ 95.736332][ T8633] bond1 (unregistering): Released all slaves [ 95.939851][ T8648] IPVS: stopping master sync thread 8235 ... [ 96.011844][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.014477][ T5945] Bluetooth: hci3: command 0x0419 tx timeout [ 96.017764][ T5958] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.241812][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.274368][ T8655] __nla_validate_parse: 7 callbacks suppressed [ 96.274380][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 96.338772][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.902'. [ 96.365550][ T8667] syz.2.903: attempt to access beyond end of device [ 96.365550][ T8667] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 96.370354][ T8667] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 96.446599][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 96.446610][ T40] audit: type=1400 audit(1745530190.532:480): avc: denied { block_suspend } for pid=8664 comm="syz.5.902" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.940864][ T8675] FAULT_INJECTION: forcing a failure. [ 96.940864][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 96.945864][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.2.905 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 96.945879][ T8675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.945885][ T8675] Call Trace: [ 96.945889][ T8675] [ 96.945892][ T8675] dump_stack_lvl+0x16c/0x1f0 [ 96.945911][ T8675] should_fail_ex+0x512/0x640 [ 96.945922][ T8675] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 96.945939][ T8675] should_failslab+0xc2/0x120 [ 96.945951][ T8675] __kmalloc_cache_noprof+0x6a/0x3e0 [ 96.945967][ T8675] ? selinux_bpf_prog_load+0x47/0x1c0 [ 96.945979][ T8675] selinux_bpf_prog_load+0x47/0x1c0 [ 96.945989][ T8675] security_bpf_prog_load+0x241/0x270 [ 96.946005][ T8675] bpf_prog_load+0xde7/0x2490 [ 96.946021][ T8675] ? __pfx_bpf_prog_load+0x10/0x10 [ 96.946033][ T8675] ? avc_has_perm_noaudit+0x149/0x3b0 [ 96.946053][ T8675] ? selinux_bpf+0xde/0x130 [ 96.946061][ T8675] ? bpf_lsm_bpf+0x9/0x10 [ 96.946072][ T8675] __sys_bpf+0x433c/0x4d80 [ 96.946086][ T8675] ? __pfx___sys_bpf+0x10/0x10 [ 96.946100][ T8675] ? ksys_write+0x190/0x240 [ 96.946111][ T8675] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 96.946135][ T8675] ? fput+0x70/0xf0 [ 96.946146][ T8675] ? ksys_write+0x1b9/0x240 [ 96.946154][ T8675] ? __pfx_ksys_write+0x10/0x10 [ 96.946162][ T8675] ? rcu_is_watching+0x12/0xc0 [ 96.946177][ T8675] __x64_sys_bpf+0x78/0xc0 [ 96.946190][ T8675] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.946204][ T8675] do_syscall_64+0xcd/0x260 [ 96.946219][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.946229][ T8675] RIP: 0033:0x7f9003f8e969 [ 96.946238][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.946248][ T8675] RSP: 002b:00007f9004d25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.946258][ T8675] RAX: ffffffffffffffda RBX: 00007f90041b5fa0 RCX: 00007f9003f8e969 [ 96.946264][ T8675] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 96.946270][ T8675] RBP: 00007f9004d25090 R08: 0000000000000000 R09: 0000000000000000 [ 96.946276][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.946282][ T8675] R13: 0000000000000000 R14: 00007f90041b5fa0 R15: 00007ffdfce10a98 [ 96.946294][ T8675] [ 97.024216][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.076435][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 97.090697][ T8688] FAULT_INJECTION: forcing a failure. [ 97.090697][ T8688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.095093][ T8688] CPU: 3 UID: 0 PID: 8688 Comm: syz.2.911 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 97.095108][ T8688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.095115][ T8688] Call Trace: [ 97.095119][ T8688] [ 97.095123][ T8688] dump_stack_lvl+0x16c/0x1f0 [ 97.095142][ T8688] should_fail_ex+0x512/0x640 [ 97.095155][ T8688] strncpy_from_user+0x3b/0x2e0 [ 97.095166][ T8688] getname_flags.part.0+0x8f/0x550 [ 97.095195][ T8688] getname_flags+0x93/0xf0 [ 97.095211][ T8688] user_path_at+0x24/0x60 [ 97.095221][ T8688] __x64_sys_mount+0x1fc/0x310 [ 97.095233][ T8688] ? __pfx___x64_sys_mount+0x10/0x10 [ 97.095245][ T8688] ? rcu_is_watching+0x12/0xc0 [ 97.095262][ T8688] do_syscall_64+0xcd/0x260 [ 97.095277][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.095288][ T8688] RIP: 0033:0x7f9003f8e969 [ 97.095297][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.095307][ T8688] RSP: 002b:00007f9004d25038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.095327][ T8688] RAX: ffffffffffffffda RBX: 00007f90041b5fa0 RCX: 00007f9003f8e969 [ 97.095334][ T8688] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 97.095340][ T8688] RBP: 00007f9004d25090 R08: 0000200000000280 R09: 0000000000000000 [ 97.095346][ T8688] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.095352][ T8688] R13: 0000000000000000 R14: 00007f90041b5fa0 R15: 00007ffdfce10a98 [ 97.095365][ T8688] [ 97.111793][ T57] vhci_hcd: vhci_device speed not set [ 97.262683][ T8703] ip6t_srh: unknown srh invflags 7863 [ 97.263136][ T8701] ocfs2: Unknown parameter 'grpquota ' [ 97.441979][ T67] Bluetooth: hci1: command 0x0419 tx timeout [ 98.081790][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.334138][ T8734] overlayfs: missing 'lowerdir' [ 98.377561][ T8736] overlayfs: upper fs does not support file handles, falling back to index=off. [ 98.489561][ T44] BUG: sleeping function called from invalid context at mm/util.c:743 [ 98.492899][ T44] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 44, name: kcompactd0 [ 98.493696][ T8744] Cannot find map_set index 0 as target [ 98.497012][ T44] preempt_count: 1, expected: 0 [ 98.501145][ T44] RCU nest depth: 0, expected: 0 [ 98.502923][ T44] 1 lock held by kcompactd0/44: [ 98.504533][ T44] #0: ffff8881045737c8 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x25b/0x690 [ 98.508352][ T44] Preemption disabled at: [ 98.508358][ T44] [<0000000000000000>] 0x0 [ 98.511394][ T44] CPU: 0 UID: 0 PID: 44 Comm: kcompactd0 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 98.511413][ T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.511422][ T44] Call Trace: [ 98.511428][ T44] [ 98.511434][ T44] dump_stack_lvl+0x16c/0x1f0 [ 98.511459][ T44] __might_resched+0x3c0/0x5e0 [ 98.511483][ T44] ? __pfx___might_resched+0x10/0x10 [ 98.511508][ T44] folio_mc_copy+0xfb/0x190 [ 98.511532][ T44] __migrate_folio.constprop.0+0xa1/0x3d0 [ 98.511555][ T44] __buffer_migrate_folio+0x5cd/0x690 [ 98.511577][ T44] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 98.511597][ T44] move_to_new_folio+0x1d9/0x700 [ 98.511618][ T44] migrate_pages_batch+0x201d/0x31a0 [ 98.511657][ T44] ? __pfx_compaction_free+0x10/0x10 [ 98.511690][ T44] ? __pfx_migrate_pages_batch+0x10/0x10 [ 98.511712][ T44] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 98.511739][ T44] migrate_pages_sync+0x12d/0x8a0 [ 98.511760][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 98.511787][ T44] ? __pfx_compaction_free+0x10/0x10 [ 98.511815][ T44] ? __pfx_migrate_pages_sync+0x10/0x10 [ 98.511839][ T44] ? find_held_lock+0x2b/0x80 [ 98.511860][ T44] ? isolate_movable_page+0x124/0x750 [ 98.511883][ T44] migrate_pages+0x1b28/0x2350 [ 98.511906][ T44] ? __pfx_compaction_alloc+0x10/0x10 [ 98.511927][ T44] ? __pfx_compaction_free+0x10/0x10 [ 98.511954][ T44] ? __pfx_migrate_pages+0x10/0x10 [ 98.511979][ T44] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 98.512005][ T44] ? __pfx___might_resched+0x10/0x10 [ 98.512031][ T44] compact_zone+0x1f6c/0x45f0 [ 98.512065][ T44] ? __lock_acquire+0xaa4/0x1ba0 [ 98.512092][ T44] ? __pfx_compact_zone+0x10/0x10 [ 98.512126][ T44] compact_node+0x1a4/0x2d0 [ 98.512151][ T44] ? __pfx_compact_node+0x10/0x10 [ 98.512195][ T44] ? __pfx___might_resched+0x10/0x10 [ 98.512237][ T44] ? __pfx_extfrag_for_order+0x10/0x10 [ 98.512258][ T44] ? rcu_is_watching+0x12/0xc0 [ 98.512283][ T44] kcompactd+0x762/0xea0 [ 98.512312][ T44] ? __pfx_kcompactd+0x10/0x10 [ 98.512334][ T44] ? find_held_lock+0x2b/0x80 [ 98.512357][ T44] ? __pfx_autoremove_wake_function+0x10/0x10 [ 98.512382][ T44] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.512405][ T44] ? __kthread_parkme+0x19e/0x250 [ 98.512430][ T44] ? __pfx_kcompactd+0x10/0x10 [ 98.512453][ T44] kthread+0x3c2/0x780 [ 98.512471][ T44] ? __pfx_kthread+0x10/0x10 [ 98.512486][ T44] ? __pfx_kthread+0x10/0x10 [ 98.512501][ T44] ? __pfx_kthread+0x10/0x10 [ 98.512516][ T44] ? __pfx_kthread+0x10/0x10 [ 98.512531][ T44] ? rcu_is_watching+0x12/0xc0 [ 98.512551][ T44] ? __pfx_kthread+0x10/0x10 [ 98.512568][ T44] ret_from_fork+0x45/0x80 [ 98.512585][ T44] ? __pfx_kthread+0x10/0x10 [ 98.512601][ T44] ret_from_fork_asm+0x1a/0x30 [ 98.512638][ T44] [ 98.608225][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.122050][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.531802][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 100.161750][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.241808][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout VM DIAGNOSIS: 21:29:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e4b05 RDI=ffffffff9ae264a0 RBP=ffffffff9ae26460 RSP=ffffc90000a1ee90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9ae26460 R15=ffffffff854e4aa0 RIP=ffffffff854e4b2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9004ce56c0 CR3=0000000033560000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555789b84a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555789c8398 00005555789c81b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555789c4c94 00005555789c4c90 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555789ca79a 00005555789c9460 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a010c98200800 0980030fffffffff ffff041003000800 080300080000033c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040e9003520800 0e88033408000e80 03098004000401de 0800028808000108 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 054f800404a4e608 0001000000080606 013ac40000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80044d80034d8004 4ea0030008004e90 030fffffffffffff 044e8003084fa00e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e100000000000001 24081a8c03010000 0c04061a88030000 06f408081a80031a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010004e800401 000000080606015b ec0008004ee00300 10004ed003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ec0030210004eb0 031be810004d9003 010000110208ffff ffffffff00000080 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003306d528081ab8 030100000e08061a b003000300080000 003b004fe1000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000124081a8c 030100000c04061a 8803000006f40808 1a80031a80044d80 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000080000 RBX=0000000000000003 RCX=ffffc9000d473000 RDX=0000000000080000 RSI=ffffffff81694531 RDI=ffffffff8bf465c0 RBP=ffff8881045737b0 RSP=ffffc90005d67460 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90864b17 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a53ad00 R15=ffffed10208ae6f6 RIP=ffffffff8b72acaf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5b8fd316c0 ffffffff 00c00000 GS =0000 ffff8880d6ab2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5b8f1a1406 CR3=000000004e142000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81fe6615 ffffffff81fe6615 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81fe6615 ffffffff81fe6615 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff81fe6615 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f183488 00007f5b8f183480 00007f5b8f183478 00007f5b8f183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8fced100 00007f5b8f183440 00007f5b00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b8f183498 00007f5b8f183490 00007f5b8f183488 00007f5b8f183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000001e92e RBX=0000000000000025 RCX=ffffc9000c4f2000 RDX=0000000000080000 RSI=ffffffff819b30e0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000359f540 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920006b3eaa R13=0000000000000200 R14=ffff88801d342440 R15=ffffc9000359f608 RIP=ffffffff819b30e9 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9004d256c0 ffffffff 00c00000 GS =0000 ffff8880d6bb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000004f2f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004183488 00007f9004183480 00007f9004183478 00007f9004183450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004ced100 00007f9004183440 00007f9004183458 00007f90041834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004183498 00007f9004183490 00007f9004183488 00007f9004183480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff88804da448c0 RBX=ffff888036a77000 RCX=ffffffff819879ac RDX=1ffffffff35a968a RSI=0000000000000004 RDI=ffffc90005c274a0 RBP=ffffc90005c27658 RSP=ffffc90005c27530 R8 =0000000000000001 R9 =fffff52000b84e94 R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888036a76000 R14=ffffffff9ad4b438 R15=000000000000168f RIP=ffffffff84d570af RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555584571500 ffffffff 00c00000 GS =0000 ffff8880d6cb2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f90041b7bac CR3=0000000058718000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfce10e20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9004011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000