last executing test programs: 29.899931133s ago: executing program 0 (id=247): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x40800) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r3, 0x1263, &(0x7f0000000000)={0xa, 0x2, 0x4e, 0x9}) fanotify_mark(r2, 0x261, 0x4800003e, r1, 0x0) close(0x3) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x4c, 0x14}, 0x18) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0xc6) 29.839925872s ago: executing program 0 (id=249): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x81ff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x120001) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r3], 0x44}}, 0x0) 29.529372967s ago: executing program 0 (id=259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf87, 0x8}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="c0", 0x12, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ifreq(r3, 0x891b, &(0x7f0000000200)={'veth1_macvtap\x00', @ifru_ivalue=0x63}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xc57, 0x4, 0x8, 0x1, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0xc, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="210000000000000026ed118012000100e9c23927687300140002000800010000", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0) 29.429399445s ago: executing program 0 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept4$vsock_stream(r1, &(0x7f0000002380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000200)="e7", 0x1}], 0x1) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[]) r3 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$addseals(r3, 0x11, 0xb1c25ce47c749b08) chdir(&(0x7f0000000300)='./file0\x00') r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x10080, 0xe8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x0, 0x5], 0x0, 0x0, 0x2}}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x3, 0x6, 0x4}]}) 29.329429733s ago: executing program 0 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="38b28b363c6a7ac422aa", 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x2f, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 28.937389728s ago: executing program 0 (id=267): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}], 0x28}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}], 0x28}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) (async) 28.843350642s ago: executing program 32 (id=267): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}], 0x28}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}], 0x28}}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) (async) 24.930106835s ago: executing program 2 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0xffffffffffffffff, &(0x7f0000000540)) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f00000007c0)={{0xcc, 0xf, 0x6, 0x1b1, 0xa0, 0xa0000, 0x20f, 0x94d}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa1f) chdir(&(0x7f0000000300)='./file0\x00') r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r4, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x2000c081}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="38b28b363c6a7ac422aa", 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 24.870218505s ago: executing program 2 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="38b28b363c6a7ac422aa", 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0xffffffff, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 24.720335478s ago: executing program 2 (id=349): chdir(&(0x7f0000000040)='./file0\x00') (async) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x240040) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 24.640349429s ago: executing program 2 (id=350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xa0f04a, 0x0) sendto$inet6(r4, &(0x7f00000004c0)="0dde5896e5631cf73b2b1d900b941dbaa07e8cdc5d0cf848a73d1296d35c381d1e2262d54b3a3a2dad2c355c57dfa2537b53368b64f8ccc066d637c2fb4ae6bab58f38c3f8746ae9111f151659b204dc8e3a117c5e056e60d1bc02bacbaf7e1fbee4c4e531471972bb430bf3461921865a25c8d2fffecacd5372e3bc47", 0x7d, 0x90, &(0x7f00000000c0)={0xa, 0x4e22, 0xbe, @mcast2, 0xa435}, 0x1c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000030000008100000008000300", @ANYRES32=r3, @ANYBLOB=':'], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x1) 24.639797705s ago: executing program 2 (id=351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x7, 0x6}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000440)={{}, r1, 0x0, @unused=[0x4, 0xe6a, 0x4, 0xa], @devid=r2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {0xffffff81}}, './file0\x00'}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f0000001480)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001500)=0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000001540)=0x0) read$FUSE(r3, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000035c0)={r4, r5, r6}, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003800)=0x0) r9 = gettid() syz_clone3(&(0x7f0000003880)={0x8000000, &(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680), {0x11}, &(0x7f00000036c0)=""/127, 0x7f, &(0x7f0000003740)=""/152, &(0x7f0000003840)=[r4, r4, r4, r7, r8, r9, r7], 0x7, {r3}}, 0x58) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003bc0)={&(0x7f0000003900)="ca114f1915d3094ece99f952a0421f1a5eb46eb3362bd0a28cefc48be6d8becda6b61c96e203a02025305af52dd4f05bddfcafa812ba02d7288f46de817dcf5acb29ee90ad964136ce9feaa594fcc8d8f17b277238dbca740d457bd65399594a7765b67b", &(0x7f0000003980)=""/239, &(0x7f0000003a80)="d45e167eb174d1d6d3eb0ca78fe91c3ea94b5333454b7cc464bd26f1d14e9c3a4a2d50a0ddf1bb727d79754a6b0637dd9b832e8b21a1f9c7bde8fa62eb54bf24384f8a111533cb9868d950d3c8250da2ae4a032485ef6eff1e5fe404b1a7bfb9021cb3643a8a1ee9deff78e841d771de", &(0x7f0000003b00)="44bb128c2bf1df5a9a940b5a9fd73dd3ff16c0e7babf78c038787dbe7adb4d3c260e238f4bedbe6496602d02d7b605abe7cc1c68476791bd01a9d6d2b792336596b63fb567a16ba61e054725c65dfae2f374adfae574577cbda8ab4403490b03e9565970699e5c5715ab6770be234dfd23f86f9c711769b6b790f872a8fea3d4bfd56fa32f5f803e", 0xff, r3}, 0x38) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r10, &(0x7f0000003c00)={{0x3, @default}, [@rose, @default, @bcast, @null, @rose, @bcast, @rose]}, &(0x7f0000003c80)=0x48) io_setup(0x0, &(0x7f0000003cc0)=0x0) io_pgetevents(r11, 0x2, 0x2, &(0x7f0000003d00)=[{}, {}], &(0x7f0000003d40), 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000003d80)={0x2f8c, 0x14, [0x0, 0x17de, 0xffffffff, 0x40, 0x2]}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003dc0), 0x4a6c0211a16a067d, 0x0) r13 = accept4$unix(r3, &(0x7f0000003e00), &(0x7f0000003e80)=0x6e, 0x80000) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000003fc0)={@local, @remote, 0x0}, &(0x7f0000004000)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004380)={r3, 0xe0, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000040c0)=[0x0, 0x0], &(0x7f0000004100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000004140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000041c0), &(0x7f0000004200), 0x8, 0x86, 0x8, 0x8, &(0x7f0000004240)}}, 0x10) r16 = syz_open_dev$vcsu(&(0x7f00000043c0), 0x7, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000004480)={0x14, 0x11, &(0x7f0000003ec0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @ldst={0x0, 0x0, 0x2, 0x5, 0x6, 0x6, 0x8}, @ldst={0x2, 0x0, 0x2, 0x2, 0x2, 0x8}], &(0x7f0000003f80)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', r14, @fallback=0xf, r3, 0x8, &(0x7f0000004040)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r15, r3, 0x2, &(0x7f0000004400)=[r3, r13, r16, r3, r3], &(0x7f0000004440)=[{0x1, 0x2, 0x1, 0xc}, {0x5, 0x4, 0x8}], 0x10, 0x64ae, @void, @value}, 0x94) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004580), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r16, &(0x7f0000004640)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x28, r17, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200048c5}, 0x0) sendmsg$tipc(r3, &(0x7f0000005900)={&(0x7f0000004680)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x3}}, 0x10, &(0x7f00000048c0)=[{&(0x7f00000046c0)="8ed2feb1b07c3b61ef591206e61d2a72d7f42de6d88e22531341e3b42e81", 0x1e}, {&(0x7f0000004700)="4ef8dec3acd5a32c769ce10b02190815f14153df0fa2e56f840e253c2721f4034d9a05535ae18a0663342d9513016d59499d3529b7f95879760b8ba0f7d5a9b806e5523c8465534800fe6d648b14d1d8cb0192f90f00ba52c24aa5d8cfff5bcbbac42a1e8348d1cf17349334bf385a8ade1b4e1ea90865d2556d96f2f5535058333dfafc0469d26c7eade8cef9d23d66ffe0378e23c998c7a7a9dd64e001f9865fba7167f3d9677c5be9be60bda7d699c87f9aba76fee214c3a780ab7cd6471601c570a76a7e0fe89b1facd0b80d578d5dbf2d35da3946e41962d016b7c29db3ad3153377d24d3344768", 0xea}, {&(0x7f0000004800)="72ea4b8ba5c0f1a3f1342050d340bf25c813356fbe7250560cc616ca256cef1ab5d3c77b614e4906f997608801406f0accdeb901df409b27e628b5e246ca832d310a724b7b819c2c7106296798d16024aec6eae2fd4e8bf7e756cab29f12cee91249c4a945be427191785abf9d81af7a19ac731065116314b8a9d93676af45e14820b81108c07b3d8f0d1e09d214708f36eb4cb25f6948ffcb48ddc7a62f6ed83ad705667fb99754d9b6a5f23c13", 0xae}], 0x3, &(0x7f0000004900)="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", 0x1000, 0x4084}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000005bc0)={0x10, 0x12, &(0x7f0000005940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22b, 0x0, 0x0, 0x0, 0x7}, [@generic={0x4, 0x0, 0x2, 0x82e5, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x1b}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x289}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}]}, &(0x7f0000005a00)='GPL\x00', 0x9, 0x42, &(0x7f0000005a40)=""/66, 0x41100, 0x48, '\x00', 0x0, @sk_msg=0x7, r16, 0x8, &(0x7f0000005ac0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r15, r16, 0x5, &(0x7f0000005b00)=[r16, r3, r3], &(0x7f0000005b40)=[{0x1, 0x2, 0xa, 0x9}, {0x5, 0x1, 0x3, 0xc}, {0x4, 0x2, 0x2, 0x7}, {0x2, 0x1, 0x0, 0x6}, {0x3, 0x2, 0xb, 0xa}], 0x10, 0x80, @void, @value}, 0x94) io_submit(r11, 0x3, &(0x7f0000006e80)=[&(0x7f0000005d40)={0x0, 0x0, 0x0, 0x3, 0x3, r12, &(0x7f0000005c80)="053ce4c9748000279e9d4d6bda0dbbb1c6eb76ab8fa186272aca1744fe7a636ba4266358fb92168d59c588afb046199121ca3690434cf9fce5553c7ca78adcccc355799cf41a8538a1dedb2a6620a0f54e7737bbb6c4a5d9f3613750c419e95493ab9799a520f3688027a8ce1d213e226fb7940f4c1dbd80dd03be0c1940e7bb476af038ceb00beb7e333b2fcb77dd347a06de13fea70ba20e6e1562771801f923b61ca7fbdb2b9e", 0xa8}, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x5, 0x4fa, r3, &(0x7f0000005d80)="713d8941ef45e6e7199ea4e8122323539f3d7f29d5f3112fdf3f42fb1d859a8d0ac85f334bc3724b4ba1b580fd42913a8ce081f21b231426844756ba217e1a265dab96de62582ba166bfc723e04421af215fcf307987a359cc8304b131ac323396d9127a2152ebb65c4a4b2e23ea", 0x6e, 0x1, 0x0, 0x1}, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x2, 0x8001, r10, &(0x7f0000005e40)="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", 0x1000, 0x4, 0x0, 0x3, r3}]) 24.330599986s ago: executing program 2 (id=352): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd7a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x7, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000001000005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000ac0)=r5, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/34, 0x22}], 0x1}}], 0x1, 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e00500000a0000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r8, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) keyctl$unlink(0x9, r1, r1) keyctl$negate(0xd, r8, 0x1, r8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @remote, 0x40}, 0x1c) 24.304851288s ago: executing program 33 (id=352): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x280, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd7a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x7, r3, 0x0, 0x7, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000001000005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000ac0)=r5, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r7, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/34, 0x22}], 0x1}}], 0x1, 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e00500000a0000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r8, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) keyctl$unlink(0x9, r1, r1) keyctl$negate(0xd, r8, 0x1, r8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @remote, 0x40}, 0x1c) 2.709865323s ago: executing program 3 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000080)="8d", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "fefd2e899235d56a", "6f4ac1f83653b9c85e96eae90899ed15", "8ad42af2", "c093907d0ea7a0bf"}, 0x28) 2.70934832s ago: executing program 3 (id=716): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"677779dc", 0x7d8, 0xd, 0x9, 0xc8c6, 0x5, "30a79fc6e91d3eca1ae54cb9771c97", "d6860352", "95a617b7", "d35a9275", ["fa0d69dd46f8c999b7fb9739", "ff5e5d2d35dc5ca695a54235", "ca8c37dc1c4a91e65b20a368", "8d1683f0e8ea61e63ab1bc35"]}) r1 = socket(0x10, 0x1, 0x80000000) ioctl$int_out(r1, 0x5460, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000140)={0x2, 0x99c8, 0x1}) io_setup(0x6, &(0x7f0000000280)=0x0) io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f00000002c0)="229ead68624944848b4c4d1c5f92ec469c20a65f34a0294c0e177c45fbb3a2294dcf60b864a86d425941c4", 0x2b, 0x80000001, 0x0, 0x3, r3}, &(0x7f0000000340)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) setresuid(r5, r7, r9) eventfd(0x8) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000640)={0x3, 0x6d, "dbf281a1a244e3e27fcf5bf15013ad9c743c4392c15d7212eb263605c73058f0ae3c8d8f3f0fbcc4e62a0d7678be4eefb6a2175be319fdb546da72a3cf27a4fedadaf5745db3b507d4d1855a3001c4609837e36a9b32d00a786543a5c13c72945bf9c1964fadca66823679737e"}) io_cancel(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x95a4, r2, &(0x7f00000006c0)="1f2d", 0x2, 0x1, 0x0, 0x2}, &(0x7f0000000740)) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, &(0x7f00000027c0)) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000002840)={0x3, 0x33e, 0xfff, 0xfff}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000002880)=""/24) setresuid(r6, r7, r9) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000028c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x6b3, '\x00', r8, r3, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002c00)={'gre0\x00', &(0x7f0000002b00)={'tunl0\x00', r8, 0x40, 0x20, 0x4, 0x100, {{0x31, 0x4, 0x3, 0x8, 0xc4, 0x68, 0x0, 0xfc, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x7d, 0x1, 0x2, [{@private=0xa010102, 0x9}, {@remote, 0x5}, {@loopback, 0x13c}, {@empty, 0x9}, {@private=0xa010101, 0x4}, {@multicast2, 0x3}, {@empty, 0x2}]}, @lsrr={0x83, 0x23, 0x5d, [@multicast2, @multicast1, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x0, [{@local, 0x6}, {@local, 0x4}, {@multicast1}]}, @ssrr={0x89, 0x13, 0xe1, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x14, 0x8f, 0x1, 0x3, [{@local, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp={0x44, 0x8, 0x54, 0x0, 0xf, [0x55ef]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x14, &(0x7f0000002940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}, @ldst={0x0, 0x1, 0x3, 0xb, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002a00)='syzkaller\x00', 0x1, 0xa0, &(0x7f0000002a40)=""/160, 0x41100, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002c40)={0x3, 0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002c80)=[r3, r2], &(0x7f0000002cc0)=[{0x1, 0x1, 0xf, 0xc}, {0x1, 0x3, 0x8, 0x7}, {0x2, 0x5, 0xe, 0x2}, {0x3, 0x4, 0xa, 0x7}, {0x1, 0x3, 0xd, 0xb}, {0x4, 0x1, 0x7, 0x8}], 0x10, 0x1, @void, @value}, 0x94) r12 = syz_open_dev$cec(&(0x7f0000002e00), 0x0, 0x153a00) ioctl$CEC_TRANSMIT(r12, 0xc0386105, &(0x7f0000002e40)={0x0, 0x0, 0x5, 0xf, 0x101, 0x40, "560350f8364fdbcc4654cb4657f5e251", 0x3, 0x6b, 0x6, 0xa6, 0x82, 0x9, 0xf2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002f00)={r2, 0x58, &(0x7f0000002e80)}, 0x10) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000002f40)) r13 = gettid() syz_open_procfs(r13, &(0x7f0000002f80)='net/ip_tables_matches\x00') syz_clone(0x800100, &(0x7f0000002fc0)="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", 0x1000, &(0x7f0000003fc0), &(0x7f0000004000), &(0x7f0000004040)="8e7618da702154b168") 1.72375703s ago: executing program 3 (id=718): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4095}, 0x20004040) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x10010, r1, 0xb45e000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004fc0000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000240)="741931", 0x0}, 0x20) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r4, 0x6000000) socket$packet(0x11, 0x2, 0x300) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9a0}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xbcba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 1.439491828s ago: executing program 3 (id=720): mkdir(&(0x7f0000000000)='./file0\x00', 0xb2) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x200000100000011, 0x3, 0x3) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4280, 0x0) write$P9_RREADDIR(r2, &(0x7f00000000c0)={0xe4, 0x29, 0x1, {0x7f, [{{0x8, 0x1, 0x8}, 0x800, 0x1, 0x7, './file0'}, {{0x10, 0x4, 0x1}, 0x0, 0x1, 0x7, './file0'}, {{0x10, 0x3, 0x1}, 0x718, 0x4, 0x7, './file0'}, {{0x4, 0x2}, 0x9, 0xe9, 0x7, './file0'}, {{0x0, 0x2, 0x4}, 0xeb22, 0x7, 0x7, './file0'}, {{0x1, 0x3, 0x1}, 0x7, 0x40, 0x7, './file0'}, {{0x40, 0x3, 0x6}, 0x78, 0x9, 0x7, './file0'}]}}, 0xe4) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) mount$9p_xen(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d78656e2c636163cb7c235fccda14241246e1008835453d68653d6d6d61702c70726976706f72742c667363616368652c76657273696f6e3d3970323030302e4c2c7625521545f6f04b9c77df5b25b8785279c182e58ae91bce8cfef6d2913e73fb537bf43a", @ANYRESDEC=r3, @ANYBLOB="2c6f626a5f757365723d26b5285eb2232b7d282c61756469742c6f626a5f747970653d285e2e032c2c61756469742c6f626a5f726f6c653d2c6673636f6e746578743d73746166665f752c00"]) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000080)=0xa43, 0x4) (async, rerun: 32) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (rerun: 32) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 1.259077475s ago: executing program 3 (id=730): mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='gfs2\x00', 0x40000, 0x0) 1.190092781s ago: executing program 3 (id=733): openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000161411"], 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r4 = epoll_create1(0x0) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000140)="6eb59b698d69c7c64c3790539d6b5ab7965f96f4b6d1dd36bc57e1c666e8f52cac15dea2e585cd87e381c9c389f7872d8fc008053f7e4e1ac96e2930bcb580b1158173376038854c7e693671cbc3eda946ba3a93d637dd33bca216e6da98f64196c29615c902f4b217546b43f619b47969a9e876cfd04f5f14043af0e93fd705c1efd83fa6b76eaf3e621222540d7ae8609f4f52c8cd7941d332198c13168c809860ba9fb8638f319ca1e801dd6306") epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x140, 0xb, 0xd0e0011, 0x140, 0xc6, 0x218, 0x1d8, 0x190, 0x218, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'gretap0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x140, 0x2000000, {}, [@common=@icmp={{0x28}, {0x4, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x101, 0x0, 0x5, '\x00', 'syz0\x00'}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'sit0\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x0, 0x20004, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 454.011256ms ago: executing program 4 (id=750): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008038, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @multicast2}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r0, 0x29, 0x2, 0x0, 0x7fff, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, 0x20, 0x10, 0x5, 0x80000000}}) 453.041347ms ago: executing program 4 (id=752): syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 64) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) connect$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x6b, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}], @generic="747b4ef689e085d9123b10d732c404700eb51101d9b192ac70a39b9d6c1af14ce7f9c5768a83f24893d74b180337414ca1d6b7795d4efcb0e10fe23dd0e4296fbb16f7c9c0c3d12325b95326fceef6fb0a3be4854a"}}}}, 0x0) 452.79078ms ago: executing program 1 (id=753): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000280)=0x1, 0x4) set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) syz_emit_ethernet(0x7e, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0x5, "91ec92"}, {0x0, 0x7, "0683fa3f39"}]}]}}}}}}}, 0x0) 452.544932ms ago: executing program 1 (id=754): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x8640, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007800800114000000000050005000a000000050001000700000005000400000000000900020073797a310000f80014000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x6}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 452.392627ms ago: executing program 4 (id=755): ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x401, 0x80000002, 0x0, 0xddffffff, 0x0, 0x0, 0xb, 0x200400, 0x200}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x4000000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x5c2, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000001b40)=""/4096, 0x1000) (async) keyctl$read(0xb, r2, &(0x7f0000001b40)=""/4096, 0x1000) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000000)) 390.38296ms ago: executing program 1 (id=756): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) r1 = socket$unix(0x1, 0x2, 0x0) close_range(r1, r1, 0x2) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x5, &(0x7f0000000500)=0xaec33, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$unix(0x1, 0x5, 0x0) r5 = fcntl$dupfd(r1, 0x0, r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x4, 0x0, &(0x7f0000000080)) accept(r5, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) 389.630563ms ago: executing program 5 (id=757): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x21e5, 0x0, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x44, 0x4007, @fd=r0, 0x5, &(0x7f0000001c80)="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", 0x1000, 0x4, 0x1}) io_uring_enter(r1, 0xcaf, 0x41e6, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000000000000000ac1414aa7840b9259cb26d23654486cd898b6f50c478a742fe7f6e3959991debde129f96222773cfabb2d11847356ebc2d20132571483ff8f8fbfa530004000000000000ab7f4b166728ef3f8b165f00"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x25}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) read(r0, &(0x7f0000000c80)=""/4084, 0xff4) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/23, 0xffffffffffffff71, 0x2140, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @loopback, 0x7}, 0x1c) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r6 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0xb, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x28, 0x5}) r8 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) 389.03157ms ago: executing program 4 (id=758): ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000029fcffffffffffffff0087000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a800800048004000980"], 0x2c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 310.288644ms ago: executing program 1 (id=759): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x7, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0xffffffffffffffff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r4, 0x2}}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 210.273706ms ago: executing program 5 (id=760): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1b1880, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001080)={'wlan0\x00'}) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) (rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000040)=""/4108, 0x100c) 209.233944ms ago: executing program 1 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x267, 0x0, 0x2}, {0x2ff, 0x0, 0xc5}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x80000000, 0x4) r6 = socket$phonet(0x23, 0x2, 0x1) close_range(r6, r4, 0x2) 208.332437ms ago: executing program 5 (id=762): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00001b00f8000000b702000014000000b703000000000000850000008b000000bf0900000000000055090100000000009500000000200000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0xa, 0xaba, 0x40000000, 0x10, 0xffffffffffffffff}) ftruncate(r1, 0x4) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 120.487593ms ago: executing program 4 (id=763): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0xf000, 0x1000, &(0x7f000000c000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 119.68066ms ago: executing program 1 (id=764): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x59, 0x0, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xa, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @loopback}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x2044}, 0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1e, 0x5, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008602"]) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$ptp0(0xffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000000000000deffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) socketpair(0x22, 0x2, 0x4, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002780)='\f', 0x1}], 0x1}, 0x4040040) 70.402196ms ago: executing program 5 (id=765): syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaf7c2c9101c0806600506040003ffff16000020ac7309fdaaaaaaaaaa4100004cd2d5e5178d090a30b3e2bee5de1732ad7f5c0a15723c52f464efa35ab45538b528faf3ea0c5404a0c73f34c1abefa807304ad24a81e82a959eec1f80d575db06310a4d8245438a902e85e0774dd9bc81ae395e40038730ee7f207a25f9064929437f2638f5006d38b626c5333800"/168], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0x4018aee3, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r1, 0xae80, 0x0) 69.934029ms ago: executing program 5 (id=766): fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xb, 0x2, 0x1, 0x81, '\x00}\\', 0x4}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x5c}}, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x52) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xb, 0x2, 0x1, 0x81, '\x00}\\', 0x4}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x5c}}, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x52) (async) close(r4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_SET(r7, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) (async) 443.417µs ago: executing program 5 (id=767): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x105, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x4745504a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000013000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000207000000ffffffff"]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18040, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'vcan0\x00', 0x400}) 0s ago: executing program 4 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x0, 0x8000) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000140)='./file0\x00', 0x400, 0x40) fanotify_mark(r1, 0x249, 0x48000000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x40050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): eout [ 52.017918][ T67] Bluetooth: hci0: command tx timeout [ 52.019666][ T5941] Bluetooth: hci2: command tx timeout [ 52.295565][ T6176] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 52.359041][ T6232] process 'syz.0.74' launched './file0' with NULL argv: empty string added [ 52.370013][ T6232] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 52.374006][ T6232] overlayfs: missing 'lowerdir' [ 52.470668][ T6176] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 52.504712][ T6176] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 52.507303][ T6176] usb 6-1: can't read configurations, error -22 [ 52.512223][ T6185] netlink: 65536 bytes leftover after parsing attributes in process `syz.3.58'. [ 52.513032][ T6236] ======================================================= [ 52.513032][ T6236] WARNING: The mand mount option has been deprecated and [ 52.513032][ T6236] and is ignored by this kernel. Remove the mand [ 52.513032][ T6236] option from the mount to silence this warning. [ 52.513032][ T6236] ======================================================= [ 52.646852][ T6176] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.657524][ T6246] 9pnet_fd: Insufficient options for proto=fd [ 52.660690][ T6246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'. [ 52.711868][ T6250] netlink: 'syz.3.81': attribute type 2 has an invalid length. [ 52.717823][ T6250] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 52.720707][ T6250] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 52.730806][ T6252] nfs4: Unknown parameter '}2eID' [ 52.815832][ T6176] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 52.820248][ T6176] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 52.823488][ T6176] usb 6-1: can't read configurations, error -22 [ 52.827688][ T6176] usb usb6-port1: attempt power cycle [ 52.831955][ T6258] fuse: Bad value for 'user_id' [ 52.834111][ T6258] fuse: Bad value for 'user_id' [ 53.006492][ T6265] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 53.057983][ T6267] ip6erspan0: entered promiscuous mode [ 53.185405][ T6271] RDS: rds_bind could not find a transport for fe80::2d, load rds_tcp or rds_rdma? [ 53.194496][ T6176] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 53.219272][ T6176] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 53.225603][ T6176] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 53.228549][ T6176] usb 6-1: can't read configurations, error -22 [ 53.286310][ T6274] netlink: 100 bytes leftover after parsing attributes in process `syz.0.92'. [ 53.391667][ T6176] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 53.437492][ T6176] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 53.443049][ T6176] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 53.447168][ T6176] usb 6-1: can't read configurations, error -22 [ 53.450274][ T6176] usb usb6-port1: unable to enumerate USB device [ 53.647464][ T6289] fuse: Bad value for 'fd' [ 53.650581][ T6290] 9pnet_virtio: no channels available for device syz [ 53.686173][ T6294] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 53.688696][ T6294] netlink: 'syz.2.101': attribute type 2 has an invalid length. [ 53.695277][ T6294] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.068767][ T6321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.072138][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.085659][ T5941] Bluetooth: hci0: command tx timeout [ 54.086789][ T67] Bluetooth: hci3: command tx timeout [ 54.094511][ T5941] Bluetooth: hci1: command tx timeout [ 54.096314][ T67] Bluetooth: hci2: command tx timeout [ 54.110200][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 54.121086][ T6321] evm: overlay not supported [ 54.178386][ T6338] 9pnet_virtio: no channels available for device syz [ 54.198939][ T6341] team_slave_0: entered promiscuous mode [ 54.201184][ T6341] team_slave_1: entered promiscuous mode [ 54.209717][ T6341] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 54.212372][ T6341] team0: Device macvtap1 is already an upper device of the team interface [ 54.227922][ T6341] team_slave_0: left promiscuous mode [ 54.230241][ T6341] team_slave_1: left promiscuous mode [ 54.250877][ T6343] netlink: 'syz.3.118': attribute type 23 has an invalid length. [ 54.345142][ T6352] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 54.346142][ T6350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.359622][ T6352] team0: Port device geneve0 added [ 54.414980][ T6358] netlink: 'syz.2.125': attribute type 8 has an invalid length. [ 54.433767][ T6358] NILFS (nbd2): device size too small [ 54.576718][ T6004] hid-generic 0003:0000:000E.0002: hidraw1: USB HID v0.3d Device [syz1] on syz1 [ 54.739115][ T6391] FAULT_INJECTION: forcing a failure. [ 54.739115][ T6391] name failslab, interval 1, probability 0, space 0, times 1 [ 54.743293][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.0.134 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 54.743307][ T6391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.743314][ T6391] Call Trace: [ 54.743319][ T6391] [ 54.743323][ T6391] dump_stack_lvl+0x16c/0x1f0 [ 54.743341][ T6391] should_fail_ex+0x512/0x640 [ 54.743353][ T6391] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 54.743366][ T6391] should_failslab+0xc2/0x120 [ 54.743378][ T6391] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 54.743388][ T6391] ? __alloc_skb+0x2b2/0x380 [ 54.743402][ T6391] __alloc_skb+0x2b2/0x380 [ 54.743413][ T6391] ? __pfx___alloc_skb+0x10/0x10 [ 54.743424][ T6391] ? find_held_lock+0x2b/0x80 [ 54.743441][ T6391] alloc_skb_with_frags+0xe0/0x860 [ 54.743459][ T6391] sock_alloc_send_pskb+0x7fb/0x990 [ 54.743470][ T6391] ? avc_has_perm+0x11a/0x1c0 [ 54.743481][ T6391] ? __pfx_avc_has_perm+0x10/0x10 [ 54.743492][ T6391] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 54.743502][ T6391] ? avc_has_perm_noaudit+0x149/0x3b0 [ 54.743513][ T6391] ? sock_has_perm+0x259/0x2f0 [ 54.743525][ T6391] ? __pfx_sock_has_perm+0x10/0x10 [ 54.743538][ T6391] hci_sock_sendmsg+0x1c7/0x25e0 [ 54.743553][ T6391] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 54.743567][ T6391] sock_write_iter+0x4fc/0x5b0 [ 54.743583][ T6391] ? __pfx_sock_write_iter+0x10/0x10 [ 54.743603][ T6391] ? bpf_lsm_file_permission+0x9/0x10 [ 54.743617][ T6391] ? security_file_permission+0x71/0x210 [ 54.743633][ T6391] ? rw_verify_area+0xcf/0x680 [ 54.743648][ T6391] vfs_write+0x5ba/0x1180 [ 54.743657][ T6391] ? __pfx_sock_write_iter+0x10/0x10 [ 54.743674][ T6391] ? __pfx_vfs_write+0x10/0x10 [ 54.743682][ T6391] ? find_held_lock+0x2b/0x80 [ 54.743732][ T6391] ksys_write+0x205/0x240 [ 54.743745][ T6391] ? __pfx_ksys_write+0x10/0x10 [ 54.743758][ T6391] do_syscall_64+0xcd/0x260 [ 54.743774][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.743785][ T6391] RIP: 0033:0x7f7989b8e169 [ 54.743793][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.743803][ T6391] RSP: 002b:00007f798a9a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.743813][ T6391] RAX: ffffffffffffffda RBX: 00007f7989db5fa0 RCX: 00007f7989b8e169 [ 54.743820][ T6391] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 54.743825][ T6391] RBP: 00007f798a9a5090 R08: 0000000000000000 R09: 0000000000000000 [ 54.743831][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.743837][ T6391] R13: 0000000000000000 R14: 00007f7989db5fa0 R15: 00007ffebf16dab8 [ 54.743849][ T6391] [ 54.954685][ T6404] overlayfs: conflicting lowerdir path [ 55.808066][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 55.808077][ T40] audit: type=1326 audit(1744837866.661:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.0.141" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7989b8e169 code=0x0 [ 55.829266][ T40] audit: type=1400 audit(1744837866.681:335): avc: denied { setopt } for pid=6428 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 55.834194][ T6429] __nla_validate_parse: 1 callbacks suppressed [ 55.834210][ T6429] netlink: 48 bytes leftover after parsing attributes in process `syz.1.142'. [ 55.836575][ T40] audit: type=1400 audit(1744837866.681:336): avc: denied { getopt } for pid=6428 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 55.858501][ T40] audit: type=1400 audit(1744837866.681:337): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 55.870995][ T40] audit: type=1400 audit(1744837866.721:338): avc: denied { create } for pid=6425 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.886293][ T40] audit: type=1400 audit(1744837866.731:339): avc: denied { bind } for pid=6425 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.893615][ T40] audit: type=1400 audit(1744837866.731:340): avc: denied { listen } for pid=6425 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.067974][ T6478] netlink: 'syz.3.151': attribute type 39 has an invalid length. [ 56.113998][ T40] audit: type=1400 audit(1744837866.961:341): avc: denied { setattr } for pid=6465 comm="syz.2.147" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.125825][ T6479] xt_hashlimit: size too large, truncated to 1048576 [ 56.140254][ T6484] xt_hashlimit: size too large, truncated to 1048576 [ 56.163459][ T40] audit: type=1400 audit(1744837867.011:342): avc: denied { connect } for pid=6477 comm="syz.3.151" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.300429][ T40] audit: type=1400 audit(1744837867.151:343): avc: denied { write } for pid=6488 comm="syz.2.152" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.304564][ T834] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 56.435403][ T834] usb 6-1: device descriptor read/64, error -71 [ 56.482573][ T6508] FAULT_INJECTION: forcing a failure. [ 56.482573][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.487387][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.2.157 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 56.487404][ T6508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.487410][ T6508] Call Trace: [ 56.487414][ T6508] [ 56.487418][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 56.487437][ T6508] should_fail_ex+0x512/0x640 [ 56.487451][ T6508] _copy_from_iter+0x2a4/0x15b0 [ 56.487465][ T6508] ? __pfx__copy_from_iter+0x10/0x10 [ 56.487476][ T6508] ? avc_has_perm_noaudit+0x149/0x3b0 [ 56.487489][ T6508] ? sock_has_perm+0x259/0x2f0 [ 56.487501][ T6508] ? __pfx_sock_has_perm+0x10/0x10 [ 56.487513][ T6508] hci_sock_sendmsg+0x46d/0x25e0 [ 56.487527][ T6508] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 56.487542][ T6508] sock_write_iter+0x4fc/0x5b0 [ 56.487558][ T6508] ? __pfx_sock_write_iter+0x10/0x10 [ 56.487578][ T6508] ? bpf_lsm_file_permission+0x9/0x10 [ 56.487594][ T6508] ? security_file_permission+0x71/0x210 [ 56.487609][ T6508] ? rw_verify_area+0xcf/0x680 [ 56.487626][ T6508] vfs_write+0x5ba/0x1180 [ 56.487635][ T6508] ? __pfx_sock_write_iter+0x10/0x10 [ 56.487651][ T6508] ? __pfx_vfs_write+0x10/0x10 [ 56.487659][ T6508] ? find_held_lock+0x2b/0x80 [ 56.487727][ T6508] ksys_write+0x205/0x240 [ 56.487738][ T6508] ? __pfx_ksys_write+0x10/0x10 [ 56.487750][ T6508] do_syscall_64+0xcd/0x260 [ 56.487766][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.487776][ T6508] RIP: 0033:0x7f90c098e169 [ 56.487785][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.487795][ T6508] RSP: 002b:00007f90be7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.487805][ T6508] RAX: ffffffffffffffda RBX: 00007f90c0bb5fa0 RCX: 00007f90c098e169 [ 56.487811][ T6508] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 56.487816][ T6508] RBP: 00007f90be7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.487822][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.487827][ T6508] R13: 0000000000000000 R14: 00007f90c0bb5fa0 R15: 00007fff8ab34bf8 [ 56.487839][ T6508] [ 56.573223][ T6499] kvm: apic: phys broadcast and lowest prio [ 56.704873][ T834] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 56.769052][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 56.846691][ T6525] afs: Unknown parameter 'a/utocell' [ 56.852878][ T6525] tun0: tun_chr_ioctl cmd 1074025675 [ 56.863262][ T834] usb 6-1: device descriptor read/64, error -71 [ 56.864132][ T6525] tun0: persist disabled [ 56.933309][ T6531] i2c i2c-1: Invalid block write size 34 [ 56.976072][ T834] usb usb6-port1: attempt power cycle [ 57.033147][ T6535] FAULT_INJECTION: forcing a failure. [ 57.033147][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 57.046992][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.2.167 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 57.047008][ T6535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.047021][ T6535] Call Trace: [ 57.047025][ T6535] [ 57.047029][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 57.047048][ T6535] should_fail_ex+0x512/0x640 [ 57.047060][ T6535] ? trace_contention_end+0xdd/0x130 [ 57.047073][ T6535] should_failslab+0xc2/0x120 [ 57.047085][ T6535] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 57.047095][ T6535] ? hci_sock_sendmsg+0xde2/0x25e0 [ 57.047106][ T6535] ? __alloc_skb+0x2b2/0x380 [ 57.047118][ T6535] ? __pfx___mutex_lock+0x10/0x10 [ 57.047135][ T6535] __alloc_skb+0x2b2/0x380 [ 57.047146][ T6535] ? __pfx___alloc_skb+0x10/0x10 [ 57.047162][ T6535] hci_sock_sendmsg+0x1a58/0x25e0 [ 57.047176][ T6535] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 57.047190][ T6535] sock_write_iter+0x4fc/0x5b0 [ 57.047207][ T6535] ? __pfx_sock_write_iter+0x10/0x10 [ 57.047227][ T6535] ? bpf_lsm_file_permission+0x9/0x10 [ 57.047242][ T6535] ? security_file_permission+0x71/0x210 [ 57.047259][ T6535] ? rw_verify_area+0xcf/0x680 [ 57.047275][ T6535] vfs_write+0x5ba/0x1180 [ 57.047284][ T6535] ? __pfx_sock_write_iter+0x10/0x10 [ 57.047301][ T6535] ? __pfx_vfs_write+0x10/0x10 [ 57.047309][ T6535] ? find_held_lock+0x2b/0x80 [ 57.047330][ T6535] ksys_write+0x205/0x240 [ 57.047338][ T6535] ? __pfx_ksys_write+0x10/0x10 [ 57.047351][ T6535] do_syscall_64+0xcd/0x260 [ 57.047366][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.047377][ T6535] RIP: 0033:0x7f90c098e169 [ 57.047386][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.047396][ T6535] RSP: 002b:00007f90be7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.047406][ T6535] RAX: ffffffffffffffda RBX: 00007f90c0bb5fa0 RCX: 00007f90c098e169 [ 57.047412][ T6535] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 57.047417][ T6535] RBP: 00007f90be7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 57.047423][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.047428][ T6535] R13: 0000000000000000 R14: 00007f90c0bb5fa0 R15: 00007fff8ab34bf8 [ 57.047440][ T6535] [ 57.314819][ T834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 57.335350][ T834] usb 6-1: device descriptor read/8, error -71 [ 57.575934][ T834] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 57.597662][ T834] usb 6-1: device descriptor read/8, error -71 [ 57.705369][ T834] usb usb6-port1: unable to enumerate USB device [ 57.908007][ T6595] netlink: 'syz.2.177': attribute type 11 has an invalid length. [ 57.914451][ T6595] netlink: 'syz.2.177': attribute type 11 has an invalid length. [ 57.917186][ T6595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.177'. [ 58.058774][ T6612] 9p: Unknown uid 00000000004294967295 [ 58.201276][ T6547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.204011][ T6547] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 58.217272][ T6547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.219862][ T6547] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 58.227405][ T6547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.229854][ T6547] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 58.244439][ T6547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.246597][ T6547] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 58.476706][ T6621] FAULT_INJECTION: forcing a failure. [ 58.476706][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 58.481677][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.2.188 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 58.481692][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.481698][ T6621] Call Trace: [ 58.481701][ T6621] [ 58.481705][ T6621] dump_stack_lvl+0x16c/0x1f0 [ 58.481723][ T6621] should_fail_ex+0x512/0x640 [ 58.481735][ T6621] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 58.481748][ T6621] should_failslab+0xc2/0x120 [ 58.481760][ T6621] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 58.481770][ T6621] ? __alloc_skb+0x2b2/0x380 [ 58.481785][ T6621] __alloc_skb+0x2b2/0x380 [ 58.481796][ T6621] ? __pfx___alloc_skb+0x10/0x10 [ 58.481809][ T6621] ? __lock_acquire+0xaa4/0x1ba0 [ 58.481835][ T6621] mgmt_cmd_complete+0x4f/0x550 [ 58.481850][ T6621] get_clock_info+0x4f5/0x5b0 [ 58.481861][ T6621] ? lock_acquire+0x179/0x350 [ 58.481870][ T6621] ? __pfx_get_clock_info+0x10/0x10 [ 58.481881][ T6621] ? find_held_lock+0x2b/0x80 [ 58.481896][ T6621] ? do_raw_read_unlock+0x44/0xe0 [ 58.481908][ T6621] ? _raw_read_unlock+0x28/0x50 [ 58.481921][ T6621] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 58.481933][ T6621] hci_sock_sendmsg+0x151f/0x25e0 [ 58.481947][ T6621] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 58.481961][ T6621] sock_write_iter+0x4fc/0x5b0 [ 58.481978][ T6621] ? __pfx_sock_write_iter+0x10/0x10 [ 58.481998][ T6621] ? bpf_lsm_file_permission+0x9/0x10 [ 58.482013][ T6621] ? security_file_permission+0x71/0x210 [ 58.482030][ T6621] ? rw_verify_area+0xcf/0x680 [ 58.482047][ T6621] vfs_write+0x5ba/0x1180 [ 58.482057][ T6621] ? __pfx_sock_write_iter+0x10/0x10 [ 58.482073][ T6621] ? __pfx_vfs_write+0x10/0x10 [ 58.482081][ T6621] ? find_held_lock+0x2b/0x80 [ 58.482102][ T6621] ksys_write+0x205/0x240 [ 58.482111][ T6621] ? __pfx_ksys_write+0x10/0x10 [ 58.482118][ T6621] ? rcu_is_watching+0x12/0xc0 [ 58.482135][ T6621] do_syscall_64+0xcd/0x260 [ 58.482150][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.482160][ T6621] RIP: 0033:0x7f90c098e169 [ 58.482169][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.482179][ T6621] RSP: 002b:00007f90be7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.482189][ T6621] RAX: ffffffffffffffda RBX: 00007f90c0bb5fa0 RCX: 00007f90c098e169 [ 58.482195][ T6621] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 58.482201][ T6621] RBP: 00007f90be7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.482207][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.482212][ T6621] R13: 0000000000000000 R14: 00007f90c0bb5fa0 R15: 00007fff8ab34bf8 [ 58.482225][ T6621] [ 58.665960][ T6630] usb usb8: usbfs: process 6630 (syz.2.191) did not claim interface 0 before use [ 58.877961][ T6639] netlink: 'syz.2.195': attribute type 5 has an invalid length. [ 58.925182][ T6647] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 58.927873][ T6647] netlink: 224 bytes leftover after parsing attributes in process `syz.3.197'. [ 58.944107][ T6648] overlayfs: failed to resolve './bus': -2 [ 59.184572][ T6004] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 59.427131][ T6674] FAULT_INJECTION: forcing a failure. [ 59.427131][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.431168][ T6674] CPU: 3 UID: 0 PID: 6674 Comm: syz.3.207 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 59.431183][ T6674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.431189][ T6674] Call Trace: [ 59.431195][ T6674] [ 59.431199][ T6674] dump_stack_lvl+0x16c/0x1f0 [ 59.431219][ T6674] should_fail_ex+0x512/0x640 [ 59.431233][ T6674] _copy_from_user+0x2e/0xd0 [ 59.431246][ T6674] __sys_bpf+0x21d/0x4d80 [ 59.431263][ T6674] ? __pfx___sys_bpf+0x10/0x10 [ 59.431276][ T6674] ? ksys_write+0x190/0x240 [ 59.431288][ T6674] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 59.431311][ T6674] ? fput+0x70/0xf0 [ 59.431322][ T6674] ? ksys_write+0x1b9/0x240 [ 59.431331][ T6674] ? __pfx_ksys_write+0x10/0x10 [ 59.431338][ T6674] ? rcu_is_watching+0x12/0xc0 [ 59.431359][ T6674] __x64_sys_bpf+0x78/0xc0 [ 59.431373][ T6674] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.431387][ T6674] do_syscall_64+0xcd/0x260 [ 59.431406][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.431417][ T6674] RIP: 0033:0x7f69d0d8e169 [ 59.431426][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.431436][ T6674] RSP: 002b:00007f69d1c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.431446][ T6674] RAX: ffffffffffffffda RBX: 00007f69d0fb5fa0 RCX: 00007f69d0d8e169 [ 59.431452][ T6674] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 59.431458][ T6674] RBP: 00007f69d1c07090 R08: 0000000000000000 R09: 0000000000000000 [ 59.431464][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.431470][ T6674] R13: 0000000000000000 R14: 00007f69d0fb5fa0 R15: 00007ffe50f8c018 [ 59.431482][ T6674] [ 59.489374][ C3] vkms_vblank_simulate: vblank timer overrun [ 59.566655][ T6676] FAULT_INJECTION: forcing a failure. [ 59.566655][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 59.570698][ T6676] CPU: 3 UID: 0 PID: 6676 Comm: syz.1.210 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 59.570712][ T6676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.570719][ T6676] Call Trace: [ 59.570723][ T6676] [ 59.570727][ T6676] dump_stack_lvl+0x16c/0x1f0 [ 59.570747][ T6676] should_fail_ex+0x512/0x640 [ 59.570760][ T6676] should_failslab+0xc2/0x120 [ 59.570773][ T6676] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 59.570785][ T6676] ? trace_kmem_cache_alloc+0x28/0xc0 [ 59.570797][ T6676] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 59.570806][ T6676] ? __alloc_skb+0x2b2/0x380 [ 59.570821][ T6676] __alloc_skb+0x2b2/0x380 [ 59.570832][ T6676] ? __pfx___alloc_skb+0x10/0x10 [ 59.570844][ T6676] ? __alloc_skb+0x200/0x380 [ 59.570855][ T6676] ? __pfx___alloc_skb+0x10/0x10 [ 59.570869][ T6676] create_monitor_ctrl_event+0x3b/0x450 [ 59.570882][ T6676] mgmt_cmd_complete+0x2de/0x550 [ 59.570894][ T6676] get_clock_info+0x4f5/0x5b0 [ 59.570906][ T6676] ? lock_acquire+0x179/0x350 [ 59.570916][ T6676] ? __pfx_get_clock_info+0x10/0x10 [ 59.570927][ T6676] ? find_held_lock+0x2b/0x80 [ 59.570942][ T6676] ? do_raw_read_unlock+0x44/0xe0 [ 59.570953][ T6676] ? _raw_read_unlock+0x28/0x50 [ 59.570966][ T6676] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 59.570979][ T6676] hci_sock_sendmsg+0x151f/0x25e0 [ 59.570992][ T6676] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 59.571006][ T6676] sock_write_iter+0x4fc/0x5b0 [ 59.571022][ T6676] ? __pfx_sock_write_iter+0x10/0x10 [ 59.571043][ T6676] ? bpf_lsm_file_permission+0x9/0x10 [ 59.571058][ T6676] ? security_file_permission+0x71/0x210 [ 59.571079][ T6676] ? rw_verify_area+0xcf/0x680 [ 59.571095][ T6676] vfs_write+0x5ba/0x1180 [ 59.571105][ T6676] ? __pfx_sock_write_iter+0x10/0x10 [ 59.571121][ T6676] ? __pfx_vfs_write+0x10/0x10 [ 59.571129][ T6676] ? find_held_lock+0x2b/0x80 [ 59.571149][ T6676] ksys_write+0x205/0x240 [ 59.571158][ T6676] ? __pfx_ksys_write+0x10/0x10 [ 59.571170][ T6676] do_syscall_64+0xcd/0x260 [ 59.571186][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.571197][ T6676] RIP: 0033:0x7f12b798e169 [ 59.571206][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.571215][ T6676] RSP: 002b:00007f12b883a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.571225][ T6676] RAX: ffffffffffffffda RBX: 00007f12b7bb5fa0 RCX: 00007f12b798e169 [ 59.571231][ T6676] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 59.571237][ T6676] RBP: 00007f12b883a090 R08: 0000000000000000 R09: 0000000000000000 [ 59.571242][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.571248][ T6676] R13: 0000000000000000 R14: 00007f12b7bb5fa0 R15: 00007ffd75e721f8 [ 59.571261][ T6676] [ 59.629822][ T6679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.631247][ C3] vkms_vblank_simulate: vblank timer overrun [ 59.659219][ T6681] 9pnet: p9_errstr2errno: server reported unknown error @ [ 59.659721][ T6679] IPv6: NLM_F_CREATE should be set when creating new route [ 59.750390][ T6684] lo: entered promiscuous mode [ 59.754452][ T6683] lo: left promiscuous mode [ 59.790326][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 59.796638][ T6693] xfrm1: entered promiscuous mode [ 59.798509][ T6693] xfrm1: entered allmulticast mode [ 60.079824][ T6716] syz.2.222 (6716): /proc/6713/oom_adj is deprecated, please use /proc/6713/oom_score_adj instead. [ 60.146113][ T6721] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 60.149379][ T6721] netlink: 224 bytes leftover after parsing attributes in process `syz.1.224'. [ 60.164892][ T6722] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.168838][ T106] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.183048][ T98] Bluetooth: hci4: Frame reassembly failed (-84) [ 60.191372][ T6724] IPv6: addrconf: prefix option has invalid lifetime [ 60.310423][ T6733] sctp: [Deprecated]: syz.1.228 (pid 6733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.310423][ T6733] Use struct sctp_sack_info instead [ 60.339858][ T6735] FAULT_INJECTION: forcing a failure. [ 60.339858][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.343857][ T6735] CPU: 2 UID: 0 PID: 6735 Comm: syz.1.230 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 60.343872][ T6735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.343879][ T6735] Call Trace: [ 60.343885][ T6735] [ 60.343891][ T6735] dump_stack_lvl+0x16c/0x1f0 [ 60.343910][ T6735] should_fail_ex+0x512/0x640 [ 60.343925][ T6735] _copy_to_user+0x32/0xd0 [ 60.343938][ T6735] simple_read_from_buffer+0xcb/0x170 [ 60.343956][ T6735] proc_fail_nth_read+0x197/0x270 [ 60.343974][ T6735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.343990][ T6735] ? rw_verify_area+0xcf/0x680 [ 60.344005][ T6735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.344026][ T6735] vfs_read+0x1de/0xc70 [ 60.344044][ T6735] ? __pfx___mutex_lock+0x10/0x10 [ 60.344060][ T6735] ? __pfx_vfs_read+0x10/0x10 [ 60.344079][ T6735] ? __fget_files+0x20e/0x3c0 [ 60.344093][ T6735] ksys_read+0x12a/0x240 [ 60.344101][ T6735] ? __pfx_ksys_read+0x10/0x10 [ 60.344109][ T6735] ? rcu_is_watching+0x12/0xc0 [ 60.344126][ T6735] do_syscall_64+0xcd/0x260 [ 60.344142][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.344153][ T6735] RIP: 0033:0x7f12b798cb7c [ 60.344162][ T6735] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.344172][ T6735] RSP: 002b:00007f12b883a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.344181][ T6735] RAX: ffffffffffffffda RBX: 00007f12b7bb5fa0 RCX: 00007f12b798cb7c [ 60.344188][ T6735] RDX: 000000000000000f RSI: 00007f12b883a0a0 RDI: 0000000000000003 [ 60.344193][ T6735] RBP: 00007f12b883a090 R08: 0000000000000000 R09: 0000000000000000 [ 60.344199][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.344205][ T6735] R13: 0000000000000000 R14: 00007f12b7bb5fa0 R15: 00007ffd75e721f8 [ 60.344217][ T6735] [ 60.454739][ T6739] FAULT_INJECTION: forcing a failure. [ 60.454739][ T6739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.458737][ T6739] CPU: 3 UID: 0 PID: 6739 Comm: syz.1.231 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 60.458751][ T6739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.458758][ T6739] Call Trace: [ 60.458763][ T6739] [ 60.458767][ T6739] dump_stack_lvl+0x16c/0x1f0 [ 60.458799][ T6739] should_fail_ex+0x512/0x640 [ 60.458817][ T6739] _copy_from_user+0x2e/0xd0 [ 60.458829][ T6739] memdup_user+0x6b/0xe0 [ 60.458842][ T6739] strndup_user+0x78/0xe0 [ 60.458854][ T6739] bpf_uprobe_multi_link_attach+0x353/0x1070 [ 60.458867][ T6739] ? find_held_lock+0x2b/0x80 [ 60.458881][ T6739] ? __fget_files+0x204/0x3c0 [ 60.458892][ T6739] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 60.458904][ T6739] ? __fget_files+0x20e/0x3c0 [ 60.458915][ T6739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.458929][ T6739] __sys_bpf+0x3fb6/0x4d80 [ 60.458944][ T6739] ? __pfx___sys_bpf+0x10/0x10 [ 60.458958][ T6739] ? ksys_write+0x190/0x240 [ 60.458969][ T6739] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 60.458991][ T6739] ? fput+0x70/0xf0 [ 60.459002][ T6739] ? ksys_write+0x1b9/0x240 [ 60.459010][ T6739] ? __pfx_ksys_write+0x10/0x10 [ 60.459021][ T6739] __x64_sys_bpf+0x78/0xc0 [ 60.459035][ T6739] ? lockdep_hardirqs_on+0x7c/0x110 [ 60.459048][ T6739] do_syscall_64+0xcd/0x260 [ 60.459063][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.459073][ T6739] RIP: 0033:0x7f12b798e169 [ 60.459082][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.459092][ T6739] RSP: 002b:00007f12b883a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.459102][ T6739] RAX: ffffffffffffffda RBX: 00007f12b7bb5fa0 RCX: 00007f12b798e169 [ 60.459108][ T6739] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 60.459113][ T6739] RBP: 00007f12b883a090 R08: 0000000000000000 R09: 0000000000000000 [ 60.459119][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.459124][ T6739] R13: 0000000000000000 R14: 00007f12b7bb5fa0 R15: 00007ffd75e721f8 [ 60.459136][ T6739] [ 60.495074][ T6741] netlink: 76 bytes leftover after parsing attributes in process `syz.3.229'. [ 60.496194][ C3] vkms_vblank_simulate: vblank timer overrun [ 60.534288][ C3] vkms_vblank_simulate: vblank timer overrun [ 60.536207][ C3] hrtimer: interrupt took 71829701 ns [ 60.608127][ C3] vkms_vblank_simulate: vblank timer overrun [ 60.734307][ T6743] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.232'. [ 60.737640][ T6743] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.232'. [ 60.815106][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 60.815116][ T40] audit: type=1400 audit(1744837871.671:393): avc: denied { setattr } for pid=6747 comm="syz.1.235" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.825005][ T40] audit: type=1400 audit(1744837871.671:394): avc: denied { connect } for pid=6747 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.831124][ T40] audit: type=1400 audit(1744837871.681:395): avc: denied { mount } for pid=6748 comm="syz.3.234" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.839356][ T40] audit: type=1400 audit(1744837871.691:396): avc: denied { read } for pid=6748 comm="syz.3.234" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.854524][ T40] audit: type=1400 audit(1744837871.691:397): avc: denied { open } for pid=6748 comm="syz.3.234" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.862725][ T40] audit: type=1400 audit(1744837871.701:398): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.874823][ T6755] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 60.883486][ T6755] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 60.887907][ T6755] 9pnet_virtio: no channels available for device syz [ 60.897549][ T40] audit: type=1400 audit(1744837871.751:399): avc: denied { accept } for pid=6752 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 60.983236][ T6764] 9pnet_virtio: no channels available for device syz [ 61.085475][ T6772] overlay: filesystem on ./bus is read-only [ 61.085548][ T40] audit: type=1400 audit(1744837871.941:400): avc: denied { mounton } for pid=6768 comm="syz.0.242" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 61.107148][ T6774] FAULT_INJECTION: forcing a failure. [ 61.107148][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 61.111210][ T6774] CPU: 3 UID: 0 PID: 6774 Comm: syz.1.240 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 61.111225][ T6774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.111232][ T6774] Call Trace: [ 61.111238][ T6774] [ 61.111243][ T6774] dump_stack_lvl+0x16c/0x1f0 [ 61.111279][ T6774] should_fail_ex+0x512/0x640 [ 61.111298][ T6774] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 61.111311][ T6774] should_failslab+0xc2/0x120 [ 61.111323][ T6774] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 61.111334][ T6774] ? getname_kernel+0x52/0x370 [ 61.111348][ T6774] getname_kernel+0x52/0x370 [ 61.111360][ T6774] kern_path+0x1d/0x50 [ 61.111370][ T6774] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 61.111384][ T6774] ? find_held_lock+0x2b/0x80 [ 61.111398][ T6774] ? __fget_files+0x204/0x3c0 [ 61.111409][ T6774] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 61.111421][ T6774] ? __fget_files+0x20e/0x3c0 [ 61.111432][ T6774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.111446][ T6774] __sys_bpf+0x3fb6/0x4d80 [ 61.111463][ T6774] ? __pfx___sys_bpf+0x10/0x10 [ 61.111476][ T6774] ? ksys_write+0x190/0x240 [ 61.111487][ T6774] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 61.111510][ T6774] ? fput+0x70/0xf0 [ 61.111521][ T6774] ? ksys_write+0x1b9/0x240 [ 61.111530][ T6774] ? __pfx_ksys_write+0x10/0x10 [ 61.111538][ T6774] ? rcu_is_watching+0x12/0xc0 [ 61.111553][ T6774] __x64_sys_bpf+0x78/0xc0 [ 61.111566][ T6774] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.111580][ T6774] do_syscall_64+0xcd/0x260 [ 61.111595][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.111606][ T6774] RIP: 0033:0x7f12b798e169 [ 61.111614][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.111624][ T6774] RSP: 002b:00007f12b883a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.111655][ T6774] RAX: ffffffffffffffda RBX: 00007f12b7bb5fa0 RCX: 00007f12b798e169 [ 61.111661][ T6774] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 61.111667][ T6774] RBP: 00007f12b883a090 R08: 0000000000000000 R09: 0000000000000000 [ 61.111673][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.111679][ T6774] R13: 0000000000000000 R14: 00007f12b7bb5fa0 R15: 00007ffd75e721f8 [ 61.111692][ T6774] [ 61.132522][ T6771] can0: slcan on ttyS3. [ 61.257705][ T6767] can0 (unregistered): slcan off ttyS3. [ 61.265554][ T6781] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 61.309813][ T40] audit: type=1400 audit(1744837872.161:401): avc: denied { shutdown } for pid=6783 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.321076][ T6786] ptrace attach of "/syz-executor exec"[5938] was attempted by "/syz-executor exec"[6786] [ 61.480958][ T40] audit: type=1400 audit(1744837872.331:402): avc: denied { map } for pid=6805 comm="syz.3.253" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.536653][ T6809] FAULT_INJECTION: forcing a failure. [ 61.536653][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 61.541472][ T6809] CPU: 3 UID: 0 PID: 6809 Comm: syz.3.254 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 61.541488][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.541496][ T6809] Call Trace: [ 61.541501][ T6809] [ 61.541505][ T6809] dump_stack_lvl+0x16c/0x1f0 [ 61.541525][ T6809] should_fail_ex+0x512/0x640 [ 61.541537][ T6809] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 61.541549][ T6809] should_failslab+0xc2/0x120 [ 61.541561][ T6809] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 61.541572][ T6809] ? __d_alloc+0x31/0xaa0 [ 61.541586][ T6809] __d_alloc+0x31/0xaa0 [ 61.541599][ T6809] d_alloc+0x4a/0x1e0 [ 61.541611][ T6809] d_alloc_parallel+0xe3/0x12e0 [ 61.541630][ T6809] ? __lock_acquire+0xaa4/0x1ba0 [ 61.541640][ T6809] ? __pfx_d_alloc_parallel+0x10/0x10 [ 61.541656][ T6809] ? lockdep_init_map_type+0x5c/0x280 [ 61.541667][ T6809] ? lockdep_init_map_type+0x5c/0x280 [ 61.541679][ T6809] __lookup_slow+0x193/0x460 [ 61.541694][ T6809] ? __pfx___lookup_slow+0x10/0x10 [ 61.541715][ T6809] ? lookup_fast+0x156/0x610 [ 61.541732][ T6809] walk_component+0x353/0x5b0 [ 61.541748][ T6809] path_lookupat+0x17e/0x780 [ 61.541767][ T6809] filename_lookup+0x224/0x5f0 [ 61.541777][ T6809] ? __pfx_filename_lookup+0x10/0x10 [ 61.541796][ T6809] ? getname_kernel+0x52/0x370 [ 61.541808][ T6809] ? __asan_memcpy+0x3c/0x60 [ 61.541825][ T6809] kern_path+0x35/0x50 [ 61.541834][ T6809] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 61.541848][ T6809] ? find_held_lock+0x2b/0x80 [ 61.541861][ T6809] ? __fget_files+0x204/0x3c0 [ 61.541872][ T6809] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 61.541884][ T6809] ? __fget_files+0x20e/0x3c0 [ 61.541895][ T6809] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.541910][ T6809] __sys_bpf+0x3fb6/0x4d80 [ 61.541925][ T6809] ? __pfx___sys_bpf+0x10/0x10 [ 61.541938][ T6809] ? ksys_write+0x190/0x240 [ 61.541953][ T6809] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 61.541982][ T6809] ? fput+0x70/0xf0 [ 61.541998][ T6809] ? ksys_write+0x1b9/0x240 [ 61.542008][ T6809] ? __pfx_ksys_write+0x10/0x10 [ 61.542016][ T6809] ? rcu_is_watching+0x12/0xc0 [ 61.542031][ T6809] __x64_sys_bpf+0x78/0xc0 [ 61.542044][ T6809] ? lockdep_hardirqs_on+0x7c/0x110 [ 61.542058][ T6809] do_syscall_64+0xcd/0x260 [ 61.542073][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.542087][ T6809] RIP: 0033:0x7f69d0d8e169 [ 61.542099][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.542113][ T6809] RSP: 002b:00007f69d1c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.542125][ T6809] RAX: ffffffffffffffda RBX: 00007f69d0fb5fa0 RCX: 00007f69d0d8e169 [ 61.542131][ T6809] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 61.542137][ T6809] RBP: 00007f69d1c07090 R08: 0000000000000000 R09: 0000000000000000 [ 61.542143][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.542148][ T6809] R13: 0000000000000000 R14: 00007f69d0fb5fa0 R15: 00007ffe50f8c018 [ 61.542161][ T6809] [ 61.558240][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 61.648221][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 61.656411][ T6797] ipvlan2: entered allmulticast mode [ 61.658290][ T6797] veth0_vlan: entered allmulticast mode [ 61.718910][ T6818] program syz.1.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.747255][ T6820] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 61.751253][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 61.764999][ T6822] kvm: kvm [6821]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 62.073849][ T6835] FAULT_INJECTION: forcing a failure. [ 62.073849][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 62.078423][ T6835] CPU: 3 UID: 0 PID: 6835 Comm: syz.1.264 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 62.078437][ T6835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.078444][ T6835] Call Trace: [ 62.078447][ T6835] [ 62.078451][ T6835] dump_stack_lvl+0x16c/0x1f0 [ 62.078470][ T6835] should_fail_ex+0x512/0x640 [ 62.078481][ T6835] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 62.078499][ T6835] should_failslab+0xc2/0x120 [ 62.078511][ T6835] __kmalloc_cache_noprof+0x6a/0x3e0 [ 62.078526][ T6835] ? do_raw_spin_unlock+0x172/0x230 [ 62.078540][ T6835] ? p9_fid_create+0x41/0x260 [ 62.078562][ T6835] p9_fid_create+0x41/0x260 [ 62.078580][ T6835] p9_client_walk+0xc5/0x530 [ 62.078596][ T6835] ? __pfx_p9_client_walk+0x10/0x10 [ 62.078613][ T6835] ? v9fs_fid_lookup+0xe9/0xeb0 [ 62.078628][ T6835] v9fs_vfs_lookup+0x206/0x5b0 [ 62.078643][ T6835] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 62.078658][ T6835] ? lockdep_init_map_type+0x5c/0x280 [ 62.078669][ T6835] ? lockdep_init_map_type+0x5c/0x280 [ 62.078681][ T6835] __lookup_slow+0x24e/0x460 [ 62.078695][ T6835] ? __pfx___lookup_slow+0x10/0x10 [ 62.078716][ T6835] ? lookup_fast+0x156/0x610 [ 62.078733][ T6835] walk_component+0x353/0x5b0 [ 62.078749][ T6835] path_lookupat+0x17e/0x780 [ 62.078767][ T6835] filename_lookup+0x224/0x5f0 [ 62.078777][ T6835] ? __pfx_filename_lookup+0x10/0x10 [ 62.078797][ T6835] ? getname_kernel+0x52/0x370 [ 62.078809][ T6835] ? __asan_memcpy+0x3c/0x60 [ 62.078825][ T6835] kern_path+0x35/0x50 [ 62.078834][ T6835] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 62.078847][ T6835] ? find_held_lock+0x2b/0x80 [ 62.078860][ T6835] ? __fget_files+0x204/0x3c0 [ 62.078872][ T6835] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 62.078883][ T6835] ? __fget_files+0x20e/0x3c0 [ 62.078895][ T6835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.078909][ T6835] __sys_bpf+0x3fb6/0x4d80 [ 62.078925][ T6835] ? __pfx___sys_bpf+0x10/0x10 [ 62.078939][ T6835] ? ksys_write+0x190/0x240 [ 62.078950][ T6835] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 62.078973][ T6835] ? fput+0x70/0xf0 [ 62.078988][ T6835] ? ksys_write+0x1b9/0x240 [ 62.078996][ T6835] ? __pfx_ksys_write+0x10/0x10 [ 62.079004][ T6835] ? rcu_is_watching+0x12/0xc0 [ 62.079019][ T6835] __x64_sys_bpf+0x78/0xc0 [ 62.079032][ T6835] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.079045][ T6835] do_syscall_64+0xcd/0x260 [ 62.079060][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.079070][ T6835] RIP: 0033:0x7f12b798e169 [ 62.079079][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.079088][ T6835] RSP: 002b:00007f12b883a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.079097][ T6835] RAX: ffffffffffffffda RBX: 00007f12b7bb5fa0 RCX: 00007f12b798e169 [ 62.079103][ T6835] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 62.079109][ T6835] RBP: 00007f12b883a090 R08: 0000000000000000 R09: 0000000000000000 [ 62.079115][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.079120][ T6835] R13: 0000000000000000 R14: 00007f12b7bb5fa0 R15: 00007ffd75e721f8 [ 62.079132][ T6835] [ 62.135812][ T6176] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.137117][ C3] vkms_vblank_simulate: vblank timer overrun [ 62.184624][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 62.187244][ C3] vkms_vblank_simulate: vblank timer overrun [ 62.299695][ C3] vkms_vblank_simulate: vblank timer overrun [ 62.327070][ T6176] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.330522][ T6176] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.333519][ T6176] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.336703][ T6176] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.342594][ T6822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.356789][ T6176] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.457013][ T6847] misc userio: No port type given on /dev/userio [ 62.489509][ T6843] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 62.512513][ T6849] misc userio: No port type given on /dev/userio [ 62.536654][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.542110][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.546593][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.553659][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.557558][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.564587][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.567410][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.567706][ T34] usb 8-1: USB disconnect, device number 2 [ 62.571182][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.576594][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.579390][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.620196][ T6855] FAULT_INJECTION: forcing a failure. [ 62.620196][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 62.622312][ T6857] program syz.1.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.626837][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.2.273 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 62.626860][ T6855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.626869][ T6855] Call Trace: [ 62.626874][ T6855] [ 62.626880][ T6855] dump_stack_lvl+0x16c/0x1f0 [ 62.626905][ T6855] should_fail_ex+0x512/0x640 [ 62.626921][ T6855] ? fs_reclaim_acquire+0xae/0x150 [ 62.626944][ T6855] ? p9_fcall_init+0x97/0x260 [ 62.626962][ T6855] should_failslab+0xc2/0x120 [ 62.626979][ T6855] __kmalloc_noprof+0xd2/0x510 [ 62.626993][ T6855] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 62.627013][ T6855] ? trace_kmem_cache_alloc+0x28/0xc0 [ 62.627040][ T6855] p9_fcall_init+0x97/0x260 [ 62.627059][ T6855] p9_tag_alloc+0x202/0x640 [ 62.627080][ T6855] ? __pfx_p9_tag_alloc+0x10/0x10 [ 62.627099][ T6855] ? stack_trace_save+0x8e/0xc0 [ 62.627125][ T6855] p9_client_prepare_req+0x19b/0x4d0 [ 62.627147][ T6855] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 62.627176][ T6855] p9_client_rpc+0x1c4/0xc50 [ 62.627201][ T6855] ? __pfx_p9_client_rpc+0x10/0x10 [ 62.627220][ T6855] ? do_raw_spin_unlock+0x172/0x230 [ 62.627238][ T6855] ? _raw_spin_unlock+0x28/0x50 [ 62.627256][ T6855] ? v9fs_fid_find+0x20e/0x360 [ 62.627287][ T6855] p9_client_readlink+0x6f/0x160 [ 62.627310][ T6855] v9fs_vfs_get_link_dotl+0xbe/0x230 [ 62.627333][ T6855] ? __pfx_v9fs_vfs_get_link_dotl+0x10/0x10 [ 62.627358][ T6855] ? try_to_unlazy+0x2a9/0x660 [ 62.627383][ T6855] ? __pfx_v9fs_vfs_get_link_dotl+0x10/0x10 [ 62.627408][ T6855] step_into+0x1b22/0x2270 [ 62.627436][ T6855] ? __pfx_step_into+0x10/0x10 [ 62.627463][ T6855] ? lookup_fast+0x156/0x610 [ 62.627486][ T6855] walk_component+0xfc/0x5b0 [ 62.627509][ T6855] path_lookupat+0x17e/0x780 [ 62.627535][ T6855] filename_lookup+0x224/0x5f0 [ 62.627551][ T6855] ? __pfx_filename_lookup+0x10/0x10 [ 62.627583][ T6855] ? getname_kernel+0x52/0x370 [ 62.627602][ T6855] ? __asan_memcpy+0x3c/0x60 [ 62.627658][ T6855] kern_path+0x35/0x50 [ 62.627672][ T6855] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 62.627692][ T6855] ? find_held_lock+0x2b/0x80 [ 62.627709][ T6855] ? __fget_files+0x204/0x3c0 [ 62.627726][ T6855] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 62.627742][ T6855] ? __fget_files+0x20e/0x3c0 [ 62.627760][ T6855] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.627779][ T6855] __sys_bpf+0x3fb6/0x4d80 [ 62.627803][ T6855] ? __pfx___sys_bpf+0x10/0x10 [ 62.627824][ T6855] ? ksys_write+0x190/0x240 [ 62.627840][ T6855] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 62.627875][ T6855] ? fput+0x70/0xf0 [ 62.627892][ T6855] ? ksys_write+0x1b9/0x240 [ 62.627906][ T6855] ? __pfx_ksys_write+0x10/0x10 [ 62.627918][ T6855] ? rcu_is_watching+0x12/0xc0 [ 62.627942][ T6855] __x64_sys_bpf+0x78/0xc0 [ 62.627963][ T6855] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.627985][ T6855] do_syscall_64+0xcd/0x260 [ 62.628009][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.628032][ T6855] RIP: 0033:0x7f90c098e169 [ 62.628048][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.628062][ T6855] RSP: 002b:00007f90be7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.628078][ T6855] RAX: ffffffffffffffda RBX: 00007f90c0bb6080 RCX: 00007f90c098e169 [ 62.628088][ T6855] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 62.628097][ T6855] RBP: 00007f90be7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 62.628107][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.628116][ T6855] R13: 0000000000000000 R14: 00007f90c0bb6080 R15: 00007fff8ab34bf8 [ 62.628138][ T6855] [ 62.749002][ T6851] chnl_net:caif_netlink_parms(): no params data found [ 62.885568][ T5941] Bluetooth: hci0: command tx timeout [ 62.901364][ T6874] syz_tun: entered allmulticast mode [ 62.904648][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.906967][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.909552][ T6851] bridge_slave_0: entered allmulticast mode [ 62.912431][ T6851] bridge_slave_0: entered promiscuous mode [ 62.917155][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.920305][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.922819][ T6851] bridge_slave_1: entered allmulticast mode [ 62.930243][ T6851] bridge_slave_1: entered promiscuous mode [ 63.008991][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.020607][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.089368][ T6851] team0: Port device team_slave_0 added [ 63.094709][ T6851] team0: Port device team_slave_1 added [ 63.107797][ T6890] FAULT_INJECTION: forcing a failure. [ 63.107797][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 63.113281][ T6890] CPU: 3 UID: 0 PID: 6890 Comm: syz.1.281 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 63.113306][ T6890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.113316][ T6890] Call Trace: [ 63.113323][ T6890] [ 63.113330][ T6890] dump_stack_lvl+0x16c/0x1f0 [ 63.113358][ T6890] should_fail_ex+0x512/0x640 [ 63.113376][ T6890] ? fs_reclaim_acquire+0xae/0x150 [ 63.113399][ T6890] ? p9_fcall_init+0x97/0x260 [ 63.113415][ T6890] should_failslab+0xc2/0x120 [ 63.113427][ T6890] __kmalloc_noprof+0xd2/0x510 [ 63.113439][ T6890] ? rcu_is_watching+0x12/0xc0 [ 63.113453][ T6890] ? trace_kmem_cache_alloc+0x28/0xc0 [ 63.113468][ T6890] p9_fcall_init+0x97/0x260 [ 63.113483][ T6890] p9_tag_alloc+0x161/0x640 [ 63.113499][ T6890] ? __pfx_p9_tag_alloc+0x10/0x10 [ 63.113513][ T6890] ? stack_depot_save_flags+0x28/0xa50 [ 63.113530][ T6890] p9_client_prepare_req+0x19b/0x4d0 [ 63.113546][ T6890] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 63.113563][ T6890] ? __lock_acquire+0xaa4/0x1ba0 [ 63.113576][ T6890] p9_client_rpc+0x1c4/0xc50 [ 63.113591][ T6890] ? node_tag_clear+0x105/0x290 [ 63.113605][ T6890] ? __pfx_p9_client_rpc+0x10/0x10 [ 63.113621][ T6890] ? idr_alloc_u32+0x20f/0x2f0 [ 63.113639][ T6890] ? idr_preload_end+0xc2/0x230 [ 63.113654][ T6890] ? rcu_is_watching+0x12/0xc0 [ 63.113669][ T6890] p9_client_walk+0x1ab/0x530 [ 63.113687][ T6890] ? __pfx_p9_client_walk+0x10/0x10 [ 63.113706][ T6890] ? v9fs_fid_lookup+0xe9/0xeb0 [ 63.113723][ T6890] v9fs_vfs_lookup+0x206/0x5b0 [ 63.113739][ T6890] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 63.113756][ T6890] ? lockdep_init_map_type+0x5c/0x280 [ 63.113768][ T6890] ? lockdep_init_map_type+0x5c/0x280 [ 63.113781][ T6890] __lookup_slow+0x24e/0x460 [ 63.113797][ T6890] ? __pfx___lookup_slow+0x10/0x10 [ 63.113821][ T6890] ? lookup_fast+0x156/0x610 [ 63.113839][ T6890] walk_component+0x353/0x5b0 [ 63.113857][ T6890] path_lookupat+0x17e/0x780 [ 63.113877][ T6890] filename_lookup+0x224/0x5f0 [ 63.113888][ T6890] ? __pfx_filename_lookup+0x10/0x10 [ 63.113910][ T6890] ? getname_kernel+0x52/0x370 [ 63.113924][ T6890] ? __asan_memcpy+0x3c/0x60 [ 63.113942][ T6890] kern_path+0x35/0x50 [ 63.113952][ T6890] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 63.113967][ T6890] ? find_held_lock+0x2b/0x80 [ 63.113982][ T6890] ? __fget_files+0x204/0x3c0 [ 63.113994][ T6890] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 63.114006][ T6890] ? __fget_files+0x20e/0x3c0 [ 63.114019][ T6890] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.114041][ T6890] __sys_bpf+0x3fb6/0x4d80 [ 63.114061][ T6890] ? __pfx___sys_bpf+0x10/0x10 [ 63.114075][ T6890] ? ksys_write+0x190/0x240 [ 63.114087][ T6890] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 63.114113][ T6890] ? fput+0x70/0xf0 [ 63.114125][ T6890] ? ksys_write+0x1b9/0x240 [ 63.114134][ T6890] ? __pfx_ksys_write+0x10/0x10 [ 63.114143][ T6890] ? rcu_is_watching+0x12/0xc0 [ 63.114158][ T6890] __x64_sys_bpf+0x78/0xc0 [ 63.114173][ T6890] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.114187][ T6890] do_syscall_64+0xcd/0x260 [ 63.114204][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.114215][ T6890] RIP: 0033:0x7f12b798e169 [ 63.114225][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.114235][ T6890] RSP: 002b:00007f12b883a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.114246][ T6890] RAX: ffffffffffffffda RBX: 00007f12b7bb5fa0 RCX: 00007f12b798e169 [ 63.114253][ T6890] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 63.114259][ T6890] RBP: 00007f12b883a090 R08: 0000000000000000 R09: 0000000000000000 [ 63.114265][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.114271][ T6890] R13: 0000000000000000 R14: 00007f12b7bb5fa0 R15: 00007ffd75e721f8 [ 63.114287][ T6890] [ 63.233809][ C3] vkms_vblank_simulate: vblank timer overrun [ 63.270957][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.273156][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.281517][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.285993][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.288313][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.296322][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.370221][ T6900] afs: Unknown parameter '' [ 63.371009][ T6851] hsr_slave_0: entered promiscuous mode [ 63.377061][ T6851] hsr_slave_1: entered promiscuous mode [ 63.379461][ T6851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.381839][ T6851] Cannot create hsr debugfs directory [ 63.390747][ T6902] sctp: [Deprecated]: syz.3.286 (pid 6902) Use of int in max_burst socket option deprecated. [ 63.390747][ T6902] Use struct sctp_assoc_value instead [ 63.491939][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 63.500981][ T6909] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 63.504168][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 63.557751][ T6918] 9pnet_virtio: no channels available for device syz [ 63.566596][ T6851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.577228][ T6851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.580222][ T6920] FAULT_INJECTION: forcing a failure. [ 63.580222][ T6920] name failslab, interval 1, probability 0, space 0, times 0 [ 63.586311][ T6920] CPU: 0 UID: 0 PID: 6920 Comm: syz.2.292 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 63.586338][ T6920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.586347][ T6920] Call Trace: [ 63.586352][ T6920] [ 63.586358][ T6920] dump_stack_lvl+0x16c/0x1f0 [ 63.586386][ T6920] should_fail_ex+0x512/0x640 [ 63.586402][ T6920] ? fs_reclaim_acquire+0xae/0x150 [ 63.586419][ T6920] ? p9_fcall_init+0x97/0x260 [ 63.586431][ T6920] should_failslab+0xc2/0x120 [ 63.586444][ T6920] __kmalloc_noprof+0xd2/0x510 [ 63.586454][ T6920] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 63.586469][ T6920] ? trace_kmem_cache_alloc+0x28/0xc0 [ 63.586488][ T6920] p9_fcall_init+0x97/0x260 [ 63.586509][ T6920] p9_tag_alloc+0x202/0x640 [ 63.586534][ T6920] ? __pfx_p9_tag_alloc+0x10/0x10 [ 63.586550][ T6920] ? stack_depot_save_flags+0x28/0xa50 [ 63.586577][ T6920] p9_client_prepare_req+0x19b/0x4d0 [ 63.586596][ T6920] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 63.586622][ T6920] ? __lock_acquire+0xaa4/0x1ba0 [ 63.586639][ T6920] p9_client_rpc+0x1c4/0xc50 [ 63.586661][ T6920] ? node_tag_clear+0x105/0x290 [ 63.586678][ T6920] ? __pfx_p9_client_rpc+0x10/0x10 [ 63.586698][ T6920] ? idr_alloc_u32+0x20f/0x2f0 [ 63.586724][ T6920] ? idr_preload_end+0xc2/0x230 [ 63.586742][ T6920] ? rcu_is_watching+0x12/0xc0 [ 63.586765][ T6920] p9_client_walk+0x1ab/0x530 [ 63.586787][ T6920] ? __pfx_p9_client_walk+0x10/0x10 [ 63.586813][ T6920] ? v9fs_fid_lookup+0xe9/0xeb0 [ 63.586834][ T6920] v9fs_vfs_lookup+0x206/0x5b0 [ 63.586857][ T6920] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 63.586878][ T6920] ? lockdep_init_map_type+0x5c/0x280 [ 63.586892][ T6920] ? lockdep_init_map_type+0x5c/0x280 [ 63.586913][ T6920] __lookup_slow+0x24e/0x460 [ 63.586932][ T6920] ? __pfx___lookup_slow+0x10/0x10 [ 63.586975][ T6920] ? lookup_fast+0x156/0x610 [ 63.587000][ T6920] walk_component+0x353/0x5b0 [ 63.587024][ T6920] path_lookupat+0x17e/0x780 [ 63.587050][ T6920] filename_lookup+0x224/0x5f0 [ 63.587067][ T6920] ? __pfx_filename_lookup+0x10/0x10 [ 63.587097][ T6920] ? getname_kernel+0x52/0x370 [ 63.587117][ T6920] ? __asan_memcpy+0x3c/0x60 [ 63.587139][ T6920] kern_path+0x35/0x50 [ 63.587155][ T6920] bpf_uprobe_multi_link_attach+0x395/0x1070 [ 63.587175][ T6920] ? find_held_lock+0x2b/0x80 [ 63.587191][ T6920] ? __fget_files+0x204/0x3c0 [ 63.587210][ T6920] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 63.587226][ T6920] ? __fget_files+0x20e/0x3c0 [ 63.587246][ T6920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.587269][ T6920] __sys_bpf+0x3fb6/0x4d80 [ 63.587294][ T6920] ? __pfx___sys_bpf+0x10/0x10 [ 63.587311][ T6920] ? ksys_write+0x190/0x240 [ 63.587328][ T6920] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 63.587366][ T6920] ? fput+0x70/0xf0 [ 63.587385][ T6920] ? ksys_write+0x1b9/0x240 [ 63.587395][ T6920] ? __pfx_ksys_write+0x10/0x10 [ 63.587405][ T6920] ? rcu_is_watching+0x12/0xc0 [ 63.587428][ T6920] __x64_sys_bpf+0x78/0xc0 [ 63.587446][ T6920] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.587463][ T6920] do_syscall_64+0xcd/0x260 [ 63.587488][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.587502][ T6920] RIP: 0033:0x7f90c098e169 [ 63.587516][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.587527][ T6920] RSP: 002b:00007f90be7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.587538][ T6920] RAX: ffffffffffffffda RBX: 00007f90c0bb5fa0 RCX: 00007f90c098e169 [ 63.587544][ T6920] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 63.587552][ T6920] RBP: 00007f90be7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.587560][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.587569][ T6920] R13: 0000000000000000 R14: 00007f90c0bb5fa0 R15: 00007fff8ab34bf8 [ 63.587590][ T6920] [ 63.589048][ T6851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.737636][ T6851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.768222][ T6933] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 63.779151][ T6933] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 63.843730][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.893472][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.912874][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.916132][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.931224][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.934482][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.965001][ T6953] overlayfs: failed to resolve 'fowner=00000000000000000000': -2 [ 64.084161][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.113672][ T6968] 9pnet_virtio: no channels available for device syz [ 64.213130][ T6977] openvswitch: netlink: IPv4 tunnel dst address is zero [ 64.235061][ T57] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 64.248209][ T6851] veth0_vlan: entered promiscuous mode [ 64.252996][ T6980] use of bytesused == 0 is deprecated and will be removed in the future, [ 64.254269][ T6851] veth1_vlan: entered promiscuous mode [ 64.256719][ T6980] use the actual size instead. [ 64.274102][ T6851] veth0_macvtap: entered promiscuous mode [ 64.279902][ T6851] veth1_macvtap: entered promiscuous mode [ 64.291334][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.295431][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.298791][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.302878][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.307332][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.310687][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.313925][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.317424][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.321342][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.339485][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.343444][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.351535][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.356052][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.359946][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.363037][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.367495][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.370708][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.376747][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.387130][ T6851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.389921][ T57] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.390374][ T6851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.393310][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.393345][ T57] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 64.397223][ T6851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.406544][ T6851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.460805][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.464197][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.484949][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.488305][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.522749][ T6998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.313'. [ 64.530680][ T7000] ip6tnl2: entered promiscuous mode [ 64.532442][ T7000] ip6tnl2: entered allmulticast mode [ 64.600580][ T7005] syz.4.268 uses obsolete (PF_INET,SOCK_PACKET) [ 64.655083][ T5941] Bluetooth: hci1: command tx timeout [ 64.746203][ T7012] capability: warning: `syz.4.318' uses 32-bit capabilities (legacy support in use) [ 65.007903][ T7034] dns_resolver: Unsupported server list version (0) [ 65.068988][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 65.073543][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 65.182551][ T7044] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 65.485327][ T7061] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.536816][ T7061] bridge0: entered promiscuous mode [ 65.538808][ T7061] macvlan3: entered promiscuous mode [ 65.542019][ T7061] bridge0: port 3(macvlan3) entered blocking state [ 65.545338][ T7061] bridge0: port 3(macvlan3) entered disabled state [ 65.548194][ T7061] macvlan3: entered allmulticast mode [ 65.550409][ T7061] bridge0: entered allmulticast mode [ 65.554805][ T7061] macvlan3: left allmulticast mode [ 65.556582][ T7061] bridge0: left allmulticast mode [ 65.559413][ T7061] bridge0: left promiscuous mode [ 65.882843][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 65.882860][ T40] audit: type=1400 audit(1744837876.731:438): avc: denied { mounton } for pid=7072 comm="syz.2.336" path="/103/file0/file1" dev="9p" ino=37617702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.914638][ T5973] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 66.087325][ T5973] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 66.090852][ T5973] usb 9-1: config 0 has no interface number 0 [ 66.093498][ T5973] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.098355][ T5973] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 66.102261][ T5973] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 66.109423][ T5973] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 66.113866][ T5973] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 66.118741][ T5973] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.124136][ T5973] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 66.128296][ T5973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.132542][ T5973] usb 9-1: config 0 descriptor?? [ 66.135768][ T7065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.138956][ T7065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.143966][ T5973] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 66.195855][ T40] audit: type=1400 audit(1744837877.051:439): avc: denied { mount } for pid=7096 comm="syz.3.342" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.213209][ T40] audit: type=1400 audit(1744837877.051:440): avc: denied { mounton } for pid=7096 comm="syz.3.342" path="/106/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.226233][ T40] audit: type=1400 audit(1744837877.051:441): avc: denied { read } for pid=7096 comm="syz.3.342" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.234519][ T40] audit: type=1400 audit(1744837877.051:442): avc: denied { open } for pid=7096 comm="syz.3.342" path="/106/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 66.241870][ T40] audit: type=1400 audit(1744837877.061:443): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.303087][ T40] audit: type=1400 audit(1744837877.151:444): avc: denied { getopt } for pid=7110 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.348875][ T5973] usb 9-1: USB disconnect, device number 2 [ 66.360116][ T5973] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 66.540987][ T7118] xt_ipcomp: unknown flags 12 [ 66.585557][ T7121] mmap: syz.2.350 (7121) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.656913][ T6162] syz_tun (unregistering): left allmulticast mode [ 66.734596][ T5941] Bluetooth: hci1: command tx timeout [ 66.894053][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.991873][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.004525][ T57] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.007165][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.021515][ T57] usb 6-1: can't set config #1, error -71 [ 67.025468][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'. [ 67.034626][ T57] usb 6-1: USB disconnect, device number 12 [ 67.074216][ T40] audit: type=1400 audit(1744837877.921:445): avc: denied { accept } for pid=7131 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.089580][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.094920][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.099875][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.108733][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.111048][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.113019][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.133797][ T7139] 9pnet_virtio: no channels available for device syz [ 67.169243][ T7137] netlink: 372 bytes leftover after parsing attributes in process `syz.4.357'. [ 67.201353][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.239641][ T7141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.242348][ T7144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.360'. [ 67.281459][ T40] audit: type=1400 audit(1744837878.131:446): avc: denied { create } for pid=7140 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 67.329621][ T7134] chnl_net:caif_netlink_parms(): no params data found [ 67.367611][ T40] audit: type=1400 audit(1744837878.221:447): avc: denied { setattr } for pid=7157 comm="syz.4.361" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.423709][ T12] bridge_slave_1: left allmulticast mode [ 67.427814][ T12] bridge_slave_1: left promiscuous mode [ 67.430752][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.441025][ T12] bridge_slave_0: left allmulticast mode [ 67.442873][ T12] bridge_slave_0: left promiscuous mode [ 67.448037][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.689414][ T7180] netlink: 14 bytes leftover after parsing attributes in process `syz.3.366'. [ 67.880232][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.884943][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.888930][ T12] bond0 (unregistering): Released all slaves [ 67.927543][ T7183] : renamed from team0 (while UP) [ 67.953104][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.955841][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.958517][ T7134] bridge_slave_0: entered allmulticast mode [ 67.962413][ T7134] bridge_slave_0: entered promiscuous mode [ 67.969336][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.971920][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.974907][ T7134] bridge_slave_1: entered allmulticast mode [ 67.977904][ T7134] bridge_slave_1: entered promiscuous mode [ 68.072890][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.082653][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.138542][ T7191] batadv_slave_1: entered promiscuous mode [ 68.146385][ T7134] team0: Port device team_slave_0 added [ 68.153120][ T7134] team0: Port device team_slave_1 added [ 68.170636][ T7191] 9pnet: Could not find request transport: virt)o [ 68.223352][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.226693][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.240250][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.245950][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.246322][ T7202] NILFS (nbd3): device size too small [ 68.248707][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.261409][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.380627][ T7134] hsr_slave_0: entered promiscuous mode [ 68.384507][ T7134] hsr_slave_1: entered promiscuous mode [ 68.387532][ T7134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.390569][ T7134] Cannot create hsr debugfs directory [ 68.407389][ T12] hsr_slave_0: left promiscuous mode [ 68.418472][ T12] hsr_slave_1: left promiscuous mode [ 68.422623][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.425996][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.429845][ T7216] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 68.431120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.436045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.460821][ T12] veth1_macvtap: left promiscuous mode [ 68.463607][ T12] veth0_macvtap: left promiscuous mode [ 68.467261][ T12] veth1_vlan: left promiscuous mode [ 68.469868][ T12] veth0_vlan: left promiscuous mode [ 68.509961][ T7225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 68.565687][ T7229] dccp_invalid_packet: invalid packet type [ 68.774182][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 68.806014][ T67] Bluetooth: hci1: command tx timeout [ 69.135143][ T67] Bluetooth: hci3: command tx timeout [ 69.266178][ T12] team0 (unregistering): Port device team_slave_1 removed [ 69.336871][ T12] team0 (unregistering): Port device team_slave_0 removed [ 69.938145][ T7258] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 69.998116][ T7258] pim6reg1: entered promiscuous mode [ 70.000311][ T7258] pim6reg1: entered allmulticast mode [ 70.127208][ T7271] 9pnet_virtio: no channels available for device syz [ 70.172446][ T7134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.186120][ T7134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.191496][ T7134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.196212][ T7134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.239366][ T7189] batadv_slave_1: left promiscuous mode [ 70.248782][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.260398][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.278436][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.281129][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.291641][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.294020][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.334622][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 70.341871][ T7288] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 70.352971][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.362048][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.550802][ T7314] netlink: 'syz.1.405': attribute type 21 has an invalid length. [ 70.553384][ T7314] netlink: 168 bytes leftover after parsing attributes in process `syz.1.405'. [ 70.562093][ T7314] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.565668][ T7314] IPv6: Can't replace route, no match found [ 70.594252][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.740269][ T7341] geneve2: entered promiscuous mode [ 70.742238][ T7341] geneve2: entered allmulticast mode [ 70.757089][ T7134] veth0_vlan: entered promiscuous mode [ 70.763753][ T7134] veth1_vlan: entered promiscuous mode [ 70.785836][ T7134] veth0_macvtap: entered promiscuous mode [ 70.791277][ T7134] veth1_macvtap: entered promiscuous mode [ 70.801326][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.804921][ T834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 70.807368][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.811637][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.816010][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.819109][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.822396][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.826469][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.832818][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.837721][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.840917][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.844263][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.847466][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.854434][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.857670][ T7134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.860919][ T7134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.865454][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.867602][ T7349] overlayfs: invalid origin (0000) [ 70.869345][ T7134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.872270][ T7134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.876867][ T7134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.879686][ T7134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.884594][ T67] Bluetooth: hci1: command tx timeout [ 70.934298][ T7353] loop0: detected capacity change from 0 to 7 [ 70.942911][ T7353] Dev loop0: unable to read RDB block 7 [ 70.946063][ T7353] loop0: unable to read partition table [ 70.947010][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.949890][ T7353] loop0: partition table beyond EOD, truncated [ 70.949927][ T7353] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 70.949927][ T7353] ) failed (rc=-5) [ 70.951024][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.975153][ T834] usb 9-1: Using ep0 maxpacket: 32 [ 70.978211][ T834] usb 9-1: config 0 has no interfaces? [ 70.980956][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.982577][ T834] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 70.983588][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.994956][ T834] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 70.998025][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 70.998038][ T40] audit: type=1400 audit(1744837881.851:462): avc: denied { sys_chroot } for pid=7356 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 71.009525][ T834] usb 9-1: Product: syz [ 71.010927][ T834] usb 9-1: Manufacturer: syz [ 71.012448][ T834] usb 9-1: SerialNumber: syz [ 71.013783][ T40] audit: type=1400 audit(1744837881.861:463): avc: denied { setgid } for pid=7356 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 71.024087][ T834] usb 9-1: config 0 descriptor?? [ 71.031683][ T40] audit: type=1400 audit(1744837881.861:464): avc: denied { setrlimit } for pid=7356 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 71.115787][ T40] audit: type=1400 audit(1744837881.971:465): avc: denied { read write } for pid=7368 comm="syz.1.414" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.123051][ T40] audit: type=1400 audit(1744837881.971:466): avc: denied { open } for pid=7368 comm="syz.1.414" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.167454][ T40] audit: type=1400 audit(1744837882.021:467): avc: denied { ioctl } for pid=7368 comm="syz.1.414" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 71.174224][ T7372] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 71.204513][ T67] Bluetooth: hci3: command tx timeout [ 71.245179][ T40] audit: type=1326 audit(1744837882.101:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.4.402" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e5f8e169 code=0x0 [ 71.258419][ T40] audit: type=1400 audit(1744837882.101:469): avc: denied { name_connect } for pid=7386 comm="syz.1.416" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 71.304824][ T6277] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 71.448994][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.456415][ T6277] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.461269][ T6277] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.469572][ T6277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.476472][ T6277] usb 10-1: config 0 descriptor?? [ 71.624892][ T834] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 71.750349][ T6277] usbhid 10-1:0.0: can't add hid device: -71 [ 71.752517][ T6277] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 71.758053][ T6277] usb 10-1: USB disconnect, device number 2 [ 71.786923][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 71.790960][ T834] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 71.793598][ T834] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 71.798467][ T834] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 71.801522][ T834] usb 6-1: config 250 has no interface number 0 [ 71.804110][ T834] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 71.808503][ T834] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 71.812300][ T834] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 71.820544][ T834] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 71.825260][ T834] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 71.829967][ T834] usb 6-1: config 250 interface 228 has no altsetting 0 [ 71.833792][ T834] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 71.837247][ T834] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 71.840097][ T834] usb 6-1: Product: syz [ 71.841567][ T834] usb 6-1: SerialNumber: syz [ 71.847888][ T834] hub 6-1:250.228: bad descriptor, ignoring hub [ 71.849908][ T834] hub 6-1:250.228: probe with driver hub failed with error -5 [ 71.900168][ T7425] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 72.004629][ T67] Bluetooth: hci0: command tx timeout [ 72.053651][ T834] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 72.184707][ T6277] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 72.334573][ T6277] usb 10-1: Using ep0 maxpacket: 32 [ 72.337663][ T6277] usb 10-1: too many configurations: 170, using maximum allowed: 8 [ 72.343030][ T6277] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 72.346854][ T6277] usb 10-1: can't read configurations, error -61 [ 72.364887][ T834] usb 6-1: USB disconnect, device number 13 [ 72.372270][ T834] usblp0: removed [ 72.474546][ T6277] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 72.624592][ T6277] usb 10-1: Using ep0 maxpacket: 32 [ 72.628229][ T6277] usb 10-1: too many configurations: 170, using maximum allowed: 8 [ 72.634183][ T6277] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 72.638811][ T6277] usb 10-1: can't read configurations, error -61 [ 72.642313][ T6277] usb usb10-port1: attempt power cycle [ 72.986136][ T6277] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 73.004983][ T6277] usb 10-1: Using ep0 maxpacket: 32 [ 73.007250][ T6277] usb 10-1: too many configurations: 170, using maximum allowed: 8 [ 73.011144][ T6277] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 73.014136][ T6277] usb 10-1: can't read configurations, error -61 [ 73.025783][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 73.029620][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 73.047484][ T7442] erspan0: entered promiscuous mode [ 73.050921][ T7442] gretap0: entered promiscuous mode [ 73.144490][ T6277] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 73.160619][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.160655][ T7455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 73.178047][ T6277] usb 10-1: Using ep0 maxpacket: 32 [ 73.184693][ T6277] usb 10-1: too many configurations: 170, using maximum allowed: 8 [ 73.188611][ T6277] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 73.191284][ T6277] usb 10-1: can't read configurations, error -61 [ 73.201647][ T6277] usb usb10-port1: unable to enumerate USB device [ 73.252655][ T7458] libceph: resolve '40' (ret=-3): failed [ 73.257697][ T40] audit: type=1400 audit(1744837884.111:470): avc: denied { read } for pid=7457 comm="syz.1.427" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 73.294562][ T67] Bluetooth: hci3: command tx timeout [ 73.445159][ T7470] sp0: Synchronizing with TNC [ 73.590271][ T6004] usb 9-1: USB disconnect, device number 3 [ 73.602537][ T40] audit: type=1400 audit(1744837884.451:471): avc: denied { create } for pid=7475 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.546587][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 74.559025][ T7506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.579751][ T7506] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 74.589969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.733558][ T7520] cgroup2: Unknown parameter 'memory_localeve' [ 74.764857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.786432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.804680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 74.885093][ T7506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.889118][ T7506] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 74.924741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.936217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.233589][ T7558] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 75.250276][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.460'. [ 75.280728][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.460'. [ 75.529370][ T7579] vlan2: entered promiscuous mode [ 75.531549][ T7579] bridge0: entered promiscuous mode [ 75.690500][ T7593] pim6reg: entered allmulticast mode [ 75.695890][ T7593] tmpfs: Bad value for 'mpol' [ 75.697985][ T7593] pim6reg: left allmulticast mode [ 75.812042][ T7604] 9pnet_fd: Insufficient options for proto=fd [ 75.856749][ T7607] netlink: 104 bytes leftover after parsing attributes in process `syz.4.477'. [ 75.921755][ T7613] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 76.057302][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 76.183610][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 76.271059][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 76.271072][ T40] audit: type=1326 audit(1744837887.121:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7633 comm="syz.5.485" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb9798e169 code=0x0 [ 76.323315][ T7621] team0: Port device team_slave_0 removed [ 76.651004][ T7652] netlink: 'syz.3.493': attribute type 4 has an invalid length. [ 76.714790][ T7656] xt_nfacct: accounting object `syz1' does not exists [ 76.738277][ T7656] syz.3.494: attempt to access beyond end of device [ 76.738277][ T7656] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 76.744972][ T7656] befs: (nbd3): unable to read superblock [ 76.793246][ T7664] kvm: MWAIT instruction emulated as NOP! [ 76.871037][ T40] audit: type=1400 audit(1744837887.721:490): avc: denied { accept } for pid=7666 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 76.885453][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 77.029792][ T40] audit: type=1400 audit(1744837887.881:491): avc: denied { ioctl } for pid=7670 comm="syz.3.499" path="socket:[20711]" dev="sockfs" ino=20711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.034648][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 77.048247][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.052561][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.061194][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 77.066382][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 77.070563][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.075210][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.078637][ T40] audit: type=1400 audit(1744837887.931:492): avc: denied { watch watch_reads } for pid=7672 comm="syz.3.500" path="pipe:[20718]" dev="pipefs" ino=20718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.095120][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 77.097791][ T7678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7678 comm=syz.4.498 [ 77.097816][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 77.112121][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 77.116367][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 77.122187][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 77.132136][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 77.143755][ T7674] netlink: 'syz.3.500': attribute type 5 has an invalid length. [ 77.149338][ T7681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.308330][ T40] audit: type=1400 audit(1744837888.161:493): avc: denied { connect } for pid=7687 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.317222][ T40] audit: type=1400 audit(1744837888.161:494): avc: denied { write } for pid=7687 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.332327][ T40] audit: type=1400 audit(1744837888.181:495): avc: denied { ioctl } for pid=7703 comm="syz.3.506" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.407186][ T40] audit: type=1400 audit(1744837888.261:496): avc: denied { write } for pid=7717 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.440666][ T40] audit: type=1400 audit(1744837888.291:497): avc: denied { setopt } for pid=7717 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.448101][ T40] audit: type=1400 audit(1744837888.291:498): avc: denied { write } for pid=7717 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.642265][ T7744] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 77.643646][ T7742] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 77.657035][ T7740] xt_socket: unknown flags 0xc [ 77.775753][ T7753] program syz.5.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.912866][ T7757] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 77.916323][ T7757] hsr0: entered promiscuous mode [ 77.923636][ T7757] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 77.929194][ T7757] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 77.933554][ T7757] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 78.014329][ T7650] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 78.158259][ T7776] 9pnet_fd: Insufficient options for proto=fd [ 78.208484][ T7778] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 78.210659][ T7778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.224585][ T7778] vhci_hcd vhci_hcd.0: Device attached [ 78.227784][ T7779] vhci_hcd: cannot find the pending unlink 1023 [ 78.230208][ T7779] vhci_hcd: connection closed [ 78.233802][ T1141] vhci_hcd: stop threads [ 78.242542][ T1141] vhci_hcd: release socket [ 78.246346][ T1141] vhci_hcd: disconnect device [ 78.487855][ T6004] usb 6-1: USB disconnect, device number 14 [ 78.593052][ T7810] xt_hashlimit: size too large, truncated to 1048576 [ 78.653438][ T7813] netlink: 'syz.3.537': attribute type 58 has an invalid length. [ 78.658996][ T7813] __nla_validate_parse: 9 callbacks suppressed [ 78.659013][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 79.016363][ T7842] bond0: (slave wlan0): Opening slave failed [ 79.025337][ T7843] syz.1.544: attempt to access beyond end of device [ 79.025337][ T7843] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 79.029873][ T7843] FAT-fs (nbd1): unable to read boot sector [ 79.464571][ T5973] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 79.516236][ T7875] Cannot find set identified by id 0 to match [ 79.594671][ T5973] usb 8-1: device descriptor read/64, error -71 [ 79.834718][ T5973] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 79.974471][ T5973] usb 8-1: device descriptor read/64, error -71 [ 80.084892][ T5973] usb usb8-port1: attempt power cycle [ 80.341091][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 80.444997][ T5973] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 80.465442][ T5973] usb 8-1: device descriptor read/8, error -71 [ 80.495344][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.565'. [ 80.499342][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.565'. [ 80.592265][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.566'. [ 80.596113][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 80.642682][ T7920] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 80.717809][ T5973] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 80.735612][ T5973] usb 8-1: device descriptor read/8, error -71 [ 80.823083][ T7925] 9p: Unknown Cache mode or invalid value fskache [ 80.844625][ T5973] usb usb8-port1: unable to enumerate USB device [ 80.999044][ T7932] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 81.001246][ T7932] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.003864][ T7932] vhci_hcd vhci_hcd.0: Device attached [ 81.284684][ T5984] usb 46-1: SetAddress Request (2) to port 0 [ 81.286865][ T5984] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.339054][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 81.474719][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 81.474733][ T40] audit: type=1400 audit(1744837892.331:514): avc: denied { block_suspend } for pid=7974 comm="syz.1.581" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.688261][ T29] cfg80211: failed to load regulatory.db [ 81.777847][ T7933] vhci_hcd: connection reset by peer [ 81.786449][ T1142] vhci_hcd: stop threads [ 81.787871][ T1142] vhci_hcd: release socket [ 81.790502][ T1142] vhci_hcd: disconnect device [ 82.082557][ T40] audit: type=1400 audit(1744837892.931:515): avc: denied { create } for pid=8002 comm="syz.5.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.090424][ T40] audit: type=1400 audit(1744837892.941:516): avc: denied { read append } for pid=8002 comm="syz.5.590" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.099225][ T40] audit: type=1400 audit(1744837892.941:517): avc: denied { open } for pid=8002 comm="syz.5.590" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.347766][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 82.350651][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 82.438088][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.610116][ T8040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.802761][ T8070] tipc: Enabling of bearer rejected, failed to enable media [ 82.836765][ T8073] netlink: 'syz.5.606': attribute type 10 has an invalid length. [ 82.839804][ T8073] syz_tun: entered promiscuous mode [ 82.843955][ T40] audit: type=1400 audit(1744837893.691:518): avc: denied { create } for pid=8066 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.848618][ T8078] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 82.851016][ T40] audit: type=1400 audit(1744837893.701:519): avc: denied { write } for pid=8066 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.864338][ T8073] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 82.874557][ T40] audit: type=1400 audit(1744837893.701:520): avc: denied { ioctl } for pid=8066 comm="syz.1.604" path="socket:[21371]" dev="sockfs" ino=21371 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.904314][ T8083] netlink: 'syz.4.608': attribute type 23 has an invalid length. [ 82.906974][ T40] audit: type=1400 audit(1744837893.761:521): avc: denied { ioctl } for pid=8082 comm="syz.4.608" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 82.991966][ T8098] netlink: 'syz.4.611': attribute type 21 has an invalid length. [ 83.039096][ T8098] netlink: 80 bytes leftover after parsing attributes in process `syz.4.611'. [ 83.064136][ T8104] mac80211_hwsim hwsim3 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 83.172250][ T8123] ieee802154 phy1 wpan1: encryption failed: -22 [ 83.266106][ T40] audit: type=1400 audit(1744837894.121:522): avc: denied { bind } for pid=8128 comm="syz.5.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.282327][ T8129] bond0: (slave syz_tun): Releasing backup interface [ 83.394651][ T57] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 83.410239][ T8132] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 83.472320][ T40] audit: type=1400 audit(1744837894.321:523): avc: denied { write } for pid=8147 comm="syz.5.621" path="socket:[21406]" dev="sockfs" ino=21406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 83.555735][ T57] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 83.558422][ T57] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.562106][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.565877][ T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.570260][ T57] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.575103][ T57] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.578026][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.583320][ T57] usb 9-1: config 0 descriptor?? [ 83.586095][ T8122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 83.690409][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.693654][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.924595][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 83.995176][ T57] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 84.000998][ T57] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 84.009881][ T8190] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 84.010114][ T57] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 84.013022][ T8190] __nla_validate_parse: 2 callbacks suppressed [ 84.013045][ T8190] netlink: 16138 bytes leftover after parsing attributes in process `syz.3.632'. [ 84.075359][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 84.079012][ T29] usb 6-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.085002][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 84.089393][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.40 [ 84.092882][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.096360][ T29] usb 6-1: Product: Ц [ 84.097988][ T29] usb 6-1: Manufacturer: Х [ 84.099934][ T29] usb 6-1: SerialNumber: а [ 84.125215][ T8197] netlink: 100 bytes leftover after parsing attributes in process `syz.3.634'. [ 84.193948][ T57] usb 9-1: USB disconnect, device number 4 [ 84.197905][ T8199] vivid-007: ================= START STATUS ================= [ 84.200720][ T8199] vivid-007: Enable Output Cropping: true [ 84.202881][ T8199] vivid-007: Enable Output Composing: true [ 84.204986][ T8199] vivid-007: Enable Output Scaler: true [ 84.206707][ T8199] vivid-007: Tx RGB Quantization Range: Automatic [ 84.208817][ T8199] vivid-007: Transmit Mode: HDMI [ 84.210513][ T8199] vivid-007: Hotplug Present: 0x00000000 [ 84.212355][ T8199] vivid-007: RxSense Present: 0x00000000 [ 84.214157][ T8199] vivid-007: EDID Present: 0x00000000 [ 84.216782][ T8199] vivid-007: ================== END STATUS ================== [ 84.316800][ T5973] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 84.322172][ T29] usbhid 6-1:1.0: can't add hid device: -71 [ 84.324170][ T29] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 84.329155][ T29] usb 6-1: USB disconnect, device number 15 [ 84.468424][ T5973] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.471849][ T5973] usb 10-1: config 0 has no interfaces? [ 84.473637][ T5973] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.477122][ T5973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.480975][ T5973] usb 10-1: config 0 descriptor?? [ 84.536000][ T8213] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 84.538497][ T8213] netlink: 224 bytes leftover after parsing attributes in process `syz.3.640'. [ 84.686383][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.689555][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.693882][ T57] usb 10-1: USB disconnect, device number 7 [ 84.848203][ T8233] hugetlbfs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 84.887898][ T8235] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 84.901794][ T8235] netlink: 165 bytes leftover after parsing attributes in process `syz.1.648'. [ 84.910810][ T8235] loop6: detected capacity change from 0 to 128 [ 84.916767][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.919963][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.923586][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.926513][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.930125][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.933104][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.936065][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.939977][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.945345][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.949410][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.953081][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.956064][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.960646][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.963572][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.967492][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.970425][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.973723][ T8235] ldm_validate_partition_table(): Disk read failed. [ 84.977324][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.980166][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.982996][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.985917][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.988771][ T8235] Dev loop6: unable to read RDB block 0 [ 84.992282][ T8235] loop6: unable to read partition table [ 84.994742][ T8235] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 85.106580][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.655'. [ 85.169229][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 85.188628][ T8262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.292684][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 85.295672][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 85.299630][ T8262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.360394][ T8262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.417222][ T8292] 9pnet_fd: Insufficient options for proto=fd [ 85.446862][ T8262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.484941][ T8297] overlayfs: missing 'workdir' [ 85.485115][ T8296] overlayfs: missing 'workdir' [ 85.513568][ T8262] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.522094][ T8262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.532797][ T8262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.540061][ T8262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549571][ T8264] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.606613][ T8296] netlink: 'syz.4.670': attribute type 39 has an invalid length. [ 85.611436][ T8264] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.669183][ T8264] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.780128][ T8264] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.018462][ T8302] loop2: detected capacity change from 0 to 7 [ 86.024043][ T8302] Dev loop2: unable to read RDB block 7 [ 86.027468][ T8302] loop2: AHDI p2 p3 [ 86.033131][ T8302] loop2: partition table partially beyond EOD, truncated [ 86.037582][ T8302] loop2: p3 start 335544320 is beyond EOD, truncated [ 86.127025][ T8310] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 86.136738][ T8310] pimreg3: entered allmulticast mode [ 86.324749][ T5984] usb 46-1: device descriptor read/8, error -110 [ 86.513668][ T8325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.683'. [ 86.519673][ T8325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.683'. [ 86.590090][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 86.590102][ T40] audit: type=1400 audit(1744837897.441:550): avc: denied { write } for pid=8330 comm="syz.4.685" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 86.716477][ T5984] usb usb46-port1: attempt power cycle [ 86.972798][ T40] audit: type=1400 audit(1744837897.821:551): avc: denied { bind } for pid=8341 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.179071][ T8346] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 87.246176][ T8352] netlink: 'syz.4.693': attribute type 21 has an invalid length. [ 87.315939][ T5984] usb usb46-port1: unable to enumerate USB device [ 87.550132][ T40] audit: type=1400 audit(1744837898.401:552): avc: denied { create } for pid=8368 comm="syz.4.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.558342][ T40] audit: type=1400 audit(1744837898.401:553): avc: denied { setopt } for pid=8368 comm="syz.4.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.585449][ T40] audit: type=1400 audit(1744837898.441:554): avc: denied { map } for pid=8370 comm="syz.4.699" path="socket:[24671]" dev="sockfs" ino=24671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.594684][ T40] audit: type=1400 audit(1744837898.441:555): avc: denied { read } for pid=8370 comm="syz.4.699" path="socket:[24671]" dev="sockfs" ino=24671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.691682][ T40] audit: type=1400 audit(1744837898.541:556): avc: denied { nlmsg_read } for pid=8379 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.726984][ T40] audit: type=1326 audit(1744837898.581:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.4.703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e5f8e169 code=0x7ffc0000 [ 87.736484][ T40] audit: type=1326 audit(1744837898.581:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.4.703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1e5f8e169 code=0x7ffc0000 [ 87.745644][ T40] audit: type=1326 audit(1744837898.581:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8381 comm="syz.4.703" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fa1e5f8e169 code=0x7ffc0000 [ 88.324915][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.342507][ T8411] netlink: 'syz.5.713': attribute type 10 has an invalid length. [ 88.347277][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.361638][ T8411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.368698][ T8411] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 88.417628][ T8411] syzkaller0: entered promiscuous mode [ 88.419453][ T8411] syzkaller0: entered allmulticast mode [ 88.431001][ T8411] macsec1: entered allmulticast mode [ 88.432808][ T8411] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 88.437109][ T8411] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 89.757098][ T8426] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 89.775841][ T8264] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.788825][ T8264] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.799051][ T8264] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.807162][ T8264] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.843917][ T8436] program syz.1.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.847480][ T8436] program syz.1.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.857797][ T8436] program syz.1.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.862044][ T8436] program syz.1.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.007072][ T8470] __nla_validate_parse: 5 callbacks suppressed [ 90.007085][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 90.274883][ T834] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 90.340230][ T8496] syz.4.739: attempt to access beyond end of device [ 90.340230][ T8496] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 90.346309][ T8496] XFS (nbd4): SB validate failed with error -5. [ 90.434848][ T834] usb 8-1: Using ep0 maxpacket: 16 [ 90.436546][ T8507] 9p: Unknown Cache mode or invalid value mma` [ 90.438392][ T834] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 90.447915][ T834] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 90.450786][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.457702][ T834] usb 8-1: config 0 descriptor?? [ 90.462869][ T834] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input15 [ 90.492248][ T8516] Mount JFS Failure: -22 [ 90.493777][ T8516] jfs_mount failed w/return code = -22 [ 90.589143][ T8530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8530 comm=syz.5.747 [ 90.589278][ T8531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8531 comm=syz.5.747 [ 90.698332][ T5344] bcm5974 8-1:0.0: could not read from device [ 90.704860][ T5344] bcm5974 8-1:0.0: could not read from device [ 90.709399][ T5344] bcm5974 8-1:0.0: could not read from device [ 90.711614][ T834] usb 8-1: USB disconnect, device number 7 [ 90.800686][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 90.800706][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 90.852446][ T8564] GUP no longer grows the stack in syz.5.757 (8564): 200000004000-20000000a000 (200000002000) [ 90.857753][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.5.757 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 90.857768][ T8564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.857776][ T8564] Call Trace: [ 90.857782][ T8564] [ 90.857787][ T8564] dump_stack_lvl+0x16c/0x1f0 [ 90.857824][ T8564] gup_vma_lookup+0x1d2/0x220 [ 90.857840][ T8564] __get_user_pages+0x234/0x36f0 [ 90.857857][ T8564] ? __pfx___might_resched+0x10/0x10 [ 90.857876][ T8564] ? __pfx___get_user_pages+0x10/0x10 [ 90.857903][ T8564] ? __pfx_down_read_killable+0x10/0x10 [ 90.857926][ T8564] __gup_longterm_locked+0x20d/0x1850 [ 90.857945][ T8564] ? try_get_folio+0x1d2/0x730 [ 90.857957][ T8564] ? __pfx___gup_longterm_locked+0x10/0x10 [ 90.857974][ T8564] ? try_get_folio+0x255/0x730 [ 90.857992][ T8564] gup_fast_fallback+0x183d/0x2650 [ 90.858016][ T8564] ? __pfx_gup_fast_fallback+0x10/0x10 [ 90.858036][ T8564] ? rcu_is_watching+0x12/0xc0 [ 90.858053][ T8564] ? __lock_acquire+0xaa4/0x1ba0 [ 90.858065][ T8564] get_user_pages_fast+0xa7/0xf0 [ 90.858080][ T8564] ? __pfx_get_user_pages_fast+0x10/0x10 [ 90.858096][ T8564] ? __mutex_trylock_common+0xe9/0x250 [ 90.858108][ T8564] __iov_iter_get_pages_alloc+0x83a/0x1f50 [ 90.858128][ T8564] ? rcu_is_watching+0x12/0xc0 [ 90.858140][ T8564] ? trace_contention_end+0xdd/0x130 [ 90.858150][ T8564] ? __mutex_lock+0x1ca/0xb90 [ 90.858164][ T8564] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 90.858176][ T8564] ? pipe_lock+0x64/0x80 [ 90.858187][ T8564] ? __pfx___mutex_lock+0x10/0x10 [ 90.858201][ T8564] ? import_ubuf+0x1b6/0x220 [ 90.858215][ T8564] iov_iter_get_pages2+0xa3/0x100 [ 90.858226][ T8564] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 90.858238][ T8564] ? wait_for_space+0x232/0x2e0 [ 90.858257][ T8564] __do_sys_vmsplice+0xa58/0x1210 [ 90.858271][ T8564] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 90.858285][ T8564] ? __pfx_futex_wait+0x10/0x10 [ 90.858316][ T8564] ? rcu_is_watching+0x12/0xc0 [ 90.858331][ T8564] ? do_syscall_64+0xcd/0x260 [ 90.858345][ T8564] do_syscall_64+0xcd/0x260 [ 90.858360][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.858371][ T8564] RIP: 0033:0x7fcb9798e169 [ 90.858380][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.858390][ T8564] RSP: 002b:00007fcb98886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 90.858400][ T8564] RAX: ffffffffffffffda RBX: 00007fcb97bb6080 RCX: 00007fcb9798e169 [ 90.858406][ T8564] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 90.858412][ T8564] RBP: 00007fcb97a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 90.858418][ T8564] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 90.858424][ T8564] R13: 0000000000000000 R14: 00007fcb97bb6080 R15: 00007ffe78c2c878 [ 90.858437][ T8564] [ 91.047769][ T8576] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 91.067749][ T8575] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 91.171244][ T8586] ipt_REJECT: TCP_RESET invalid for non-tcp [ 91.191737][ T8590] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 91.226869][ T8590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.230520][ T8593] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 91.249465][ C1] [ 91.249921][ T8590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.250292][ C1] ============================= [ 91.250297][ C1] [ BUG: Invalid wait context ] [ 91.252821][ T8590] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.254177][ C1] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 91.256938][ T8590] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 91.260351][ C1] ----------------------------- [ 91.260360][ C1] kworker/1:0/29 is trying to lock: [ 91.260367][ C1] ffffc9000467a410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 91.260395][ C1] other info that might help us debug this: [ 91.260398][ C1] context-{2:2} [ 91.260402][ C1] 4 locks held by kworker/1:0/29: [ 91.260409][ C1] #0: ffff88801b48ad48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 91.280059][ C1] #1: ffffc90000687d18 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 91.283707][ T8596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8596 comm=syz.1.764 [ 91.284051][ C1] #2: ffffffff8e582c78 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x73/0x1920 [ 91.292257][ C1] #3: ffffc9000467a958 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 91.295951][ C1] stack backtrace: [ 91.297378][ C1] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 91.297397][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.297407][ C1] Workqueue: rcu_gp process_srcu [ 91.297428][ C1] Call Trace: [ 91.297433][ C1] [ 91.297438][ C1] dump_stack_lvl+0x116/0x1f0 [ 91.297457][ C1] __lock_acquire+0x3ff/0x1ba0 [ 91.297471][ C1] ? xa_load+0x149/0x2c0 [ 91.297488][ C1] lock_acquire+0x179/0x350 [ 91.297498][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 91.297514][ C1] _raw_read_lock_irqsave+0x46/0x90 [ 91.297529][ C1] ? kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 91.297542][ C1] kvm_xen_set_evtchn_fast+0x254/0xeb0 [ 91.297553][ C1] ? kvm_xen_set_evtchn_fast+0x23a/0xeb0 [ 91.297567][ C1] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 91.297579][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 91.297592][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.297606][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 91.297624][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 91.297635][ C1] xen_timer_callback+0x1db/0x2a0 [ 91.297646][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 91.297658][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 91.297672][ C1] __hrtimer_run_queues+0x5ea/0xad0 [ 91.297688][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 91.297700][ C1] ? read_tsc+0x9/0x20 [ 91.297720][ C1] hrtimer_interrupt+0x397/0x8e0 [ 91.297742][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 91.297758][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 91.297774][ C1] [ 91.297778][ C1] [ 91.297782][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 91.297795][ C1] RIP: 0010:delay_tsc+0x49/0xc0 [ 91.297808][ C1] Code: 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 bf 01 00 00 00 e8 24 ea 17 f6 e8 5f 28 01 00 44 39 e0 75 36 0f 01 f9 <66> 90 48 c1 e2 20 48 89 d3 48 09 c3 48 89 d8 48 29 e8 4c 39 e8 73 [ 91.297820][ C1] RSP: 0018:ffffc90000687ae0 EFLAGS: 00000246 [ 91.297831][ C1] RAX: 0000000082bc0e8e RBX: 0000003882bc0e30 RCX: 0000000000000001 [ 91.297839][ C1] RDX: 0000000000000038 RSI: ffffffff8bf46480 RDI: ffffffff8bf464c0 [ 91.297847][ C1] RBP: 0000003882bbe2a0 R08: 0000000000000001 R09: 0000000000000401 [ 91.297854][ C1] R10: ffff88816dd342c7 R11: 0000000000000000 R12: 0000000000000001 [ 91.297862][ C1] R13: 00000000000032c9 R14: 0000000000000000 R15: 000000008e582a01 [ 91.297875][ C1] try_check_zero+0x3e9/0x6b0 [ 91.297890][ C1] process_srcu+0x612/0x1920 [ 91.297904][ C1] ? rcu_is_watching+0x12/0xc0 [ 91.297919][ C1] process_one_work+0x9cc/0x1b70 [ 91.297936][ C1] ? __pfx_process_srcu+0x10/0x10 [ 91.297948][ C1] ? __pfx_process_one_work+0x10/0x10 [ 91.297962][ C1] ? assign_work+0x1a0/0x250 [ 91.297975][ C1] worker_thread+0x6c8/0xf10 [ 91.297993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 91.298006][ C1] kthread+0x3c2/0x780 [ 91.298019][ C1] ? __pfx_kthread+0x10/0x10 [ 91.298030][ C1] ? __pfx_kthread+0x10/0x10 [ 91.298041][ C1] ? __pfx_kthread+0x10/0x10 [ 91.298052][ C1] ? __pfx_kthread+0x10/0x10 [ 91.298062][ C1] ? rcu_is_watching+0x12/0xc0 [ 91.298076][ C1] ? __pfx_kthread+0x10/0x10 [ 91.298087][ C1] ret_from_fork+0x45/0x80 [ 91.298100][ C1] ? __pfx_kthread+0x10/0x10 [ 91.298110][ C1] ret_from_fork_asm+0x1a/0x30 [ 91.298132][ C1] [ 91.408659][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.419174][ T8595] veth0: entered promiscuous mode [ 91.429847][ T8595] macvlan2: entered promiscuous mode [ 91.445966][ T8595] veth0: left promiscuous mode VM DIAGNOSIS: 21:11:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000098ba4 RBX=0000000000000000 RCX=ffffffff8b726439 RDX=ffffed100d4865be RSI=ffffffff8bf46480 RDI=ffffffff8191a751 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90866010 R15=0000000000000000 RIP=ffffffff8b724ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c26025d CR3=000000003289e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff96835d70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120203320206620 2066202030202031 20206120203e2034 3c20353020333020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0425 RDI=ffffffff9ae27460 RBP=ffffffff9ae27420 RSP=ffffc900006a0698 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=28203a32646e6f62 R12=0000000000000000 R13=0000000000000073 R14=ffffffff9ae27420 R15=ffffffff854e03c0 RIP=ffffffff854e044f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c273e07 CR3=00000000324a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f2000000 Opmask01=0000000000000008 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ba7dbaa700 000055ba7dbb5180 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35706f0035706f6f 6c2f6b636f6c6200 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0f48789e4528c8e 000000055ba7db9b 0000000000000141 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ba7dbbd288 000055ba7dbbd288 0000000000000041 000055ba7d00302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000271 0000000000007974 00736576616c7300 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 485f7ffe7fffffff 00007ffe7c79b5f9 3000312f3fffebff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000434f4c1f1b00 00004c4c494b4652 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c494a414d 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000099b5c RBX=0000000000000002 RCX=ffffffff8b726439 RDX=ffffed100d4c65be RSI=ffffffff8bf46480 RDI=ffffffff8191a751 RBP=ffffed1003a5f910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d2fc880 R14=ffffffff90866010 R15=0000000000000000 RIP=ffffffff8b724ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa1e6ecdf98 CR3=000000004b7ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0410008081001001 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5879f370 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a554a47215101 2a2a2a2a2a2a2a2a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a554a4721af0b 2a2a2a2a2a2a2a2a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 35706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0032657300326500 35317475706e692f 7475706e692f302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c394843492b3533 515f43002a64626e 7c2a6d656d707c2a 6d63737c2a646200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ba7dce9b10 0000000000000041 00004e4f53414552 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d5500304510 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0425 RDI=ffffffff9ae27460 RBP=ffffffff9ae27420 RSP=ffffc90003116b60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=000000000000002e R14=ffffffff9ae27420 R15=ffffffff854e03c0 RIP=ffffffff854e044f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f12b88196c0 ffffffff 00c00000 GS =0000 ffff8880d6cb1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c43e5c8 CR3=000000005b500000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeff00 Opmask01=000000000040007f Opmask02=00000000fffeff7f Opmask03=2040000404420020 Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5879f520 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0f48789e4528c8e 000000055ba7db9b 0000000000000141 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ba7dbbd288 000055ba7dbbd288 0000000000000041 000055ba7d00302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000271 0000000000007974 00736576616c7300 306d656d702f6b63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 485f7ffe7fffffff 00007ffe7c79b5f9 3000312f3fffebff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382433273f397b27 697a787c69303b7e 69305f474f5b647c 6930382433273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000434f4c1f1b00 00004c4c494b4652 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c494a414d 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020