last executing test programs: 1m30.241409683s ago: executing program 2 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 4) 1m30.10086149s ago: executing program 2 (id=613): openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) sendmsg$NFNL_MSG_ACCT_NEW(r1, 0x0, 0x8850) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 1m30.100655976s ago: executing program 2 (id=614): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b7030000000000005600000040420f002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000280)="5525fa6a373c2acd43292eb5c543f577cdd991ed7f7d2b581d8c675327e85de938323116e0f701515abf91dd58807b680cc1d671c861f90f838a8a3d9c6f7ebc0a208fa602b55c797bdce13a6185459a164cc9c58203af88e037a07db7655f4eadb64fe6f85ecbaa6ae9d85045bf7bde131a8ca01297016b39e40ce4979c55dd7ab07474f6f0c6615331e8c936686cf19cec83b573c3ac550300acff52ad52491d67062efc8ab113ae95704749af011aadafdac23d9b50239cf9cded1d5419ab5503be3ab3a65e81d52edba5f8b5503d63638a33ccbe765feddc4ad12ca2ae", 0xdf}, {&(0x7f0000000080)="462987f36922d123d706e2827f91126e0e3fe4ca4c8ffdeaa57125bf42ee281d54ff68effa467ac3605145b200a3c7780297e6694ad05eb1a7f9ae3af719b340c061aa53557e4ccae6c811297716906ef9014cd3c457d2fc3d9e3713", 0x5c}, {&(0x7f0000000140)="f58f7ec601db4101655b66bd69baf333e61dd9cad541b9f319102c684f8570ec73009fe7f72d83e883e9bfe921aed0ecbaa8057ea496ba74113f5dd166ada0ffa2b7a6d3f44dda8f41079920a2eae8e8dbfe8b24d7e948ab4f0c317e24a6e05b45612fa912b354cd9ec647faf6365d4da6504442c8bab4eab6715e261b52983506ac35fb3b21", 0x86}, {&(0x7f0000000380)="f419a5d4b5604ba7e782251065f4ac6a6ab7f80ce6e06b5a6b4e", 0x1a}, {&(0x7f00000003c0)="022dc7e4e2d96c5881b3c13088b080313524ff293860ecd01cb40880b9ac7cd262789e238e53c15b3547e8780dc06b4b56ac9027b8412d01b45f32276cc90e2b33d6816a7050360232974802bf58c25c5123f732017582a01cdef205c184d9dc388aaecc2d31a8c3f8b97615d0dce0a7fda03e187efcc9490f182d515416f5a284e322cfd5705ec7524a7d60801d12504a104fd610a8460be7031dd088fd80f6f17906ef98dd4dcfba61d6138008cc03d064197fa4099e5ef40977820041805164", 0xc1}, {&(0x7f00000004c0)="6eb7c3bfbd2c240ae333599b938b6e1b7dac5a45e4149c8c49a30d72259dc206b71ea2f965b3c2a7bfccfda75b8893ff8cb5fbb22f10c01cdd72eb72b8269533a12065fd82cdef0fde11256bc502d9c7378f2cb675e8baf02d126293dfca944773e761067dcc8fcabe54fda06f5b468b40e36c6cb03805232bb41eec21848735206d926b6517ea66f42a", 0x8a}], 0x6, 0x6, 0x4, 0x1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x5, 0x4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m29.960741461s ago: executing program 2 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 3) 1m29.891451713s ago: executing program 2 (id=619): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b120500ab0a0000240012800b00010069703667726500001400028008000100", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) r8 = socket(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x4a66, &(0x7f0000000200)={0x0, 0xa7bf, 0x20, 0x1, 0x31}, &(0x7f0000000280), &(0x7f0000000340)) io_uring_enter(r9, 0x5882, 0x8b86, 0x4, &(0x7f00000005c0)={[0x200]}, 0x8) r10 = socket$packet(0x11, 0x2, 0x300) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0xf0b, 0x10, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0)="68fe3019677b9125ca6e5cd165584f172d7474dc18fc", &(0x7f00000004c0)=@tcp6=r0, 0x4}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) 1m29.794098923s ago: executing program 2 (id=620): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f9ffffff000000000000005e00"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003540)={0x3, 0xc, &(0x7f0000004700)=ANY=[@ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x698c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000002440)=@in6={0xa, 0x4e21, 0x4, @private2, 0xc}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x0) r6 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x800, 0x7fff}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4, r8, 0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f0000003680)=[{0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f0000001080)=""/126, 0x7e}, {&(0x7f0000001100)=""/216, 0xd8}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/133, 0x85}, {&(0x7f0000002140)=""/60, 0x3c}, {&(0x7f00000013c0)=""/243, 0xf3}], &(0x7f0000001540)=[0x4]}, {0x5, 0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001580)=""/151, 0x97}, {&(0x7f0000001640)=""/241, 0xf1}, {&(0x7f0000001740)=""/216, 0xd8}, {&(0x7f0000001840)=""/227, 0xe3}, {&(0x7f0000001a00)=""/162, 0xa2}], &(0x7f0000001ac0)=[0xa, 0x69bafa8f, 0x9, 0x5]}, {0x9, 0x1, 0x0, &(0x7f0000002040)=[{&(0x7f0000001b00)=""/152, 0x98}, {&(0x7f0000001bc0)=""/80, 0x50}, {&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000001d00)=""/22, 0x16}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001e40)=""/249, 0xf9}, {&(0x7f0000001f40)=""/19, 0x13}, {&(0x7f0000001f80)=""/188, 0xbc}], &(0x7f0000002100)=[0x4, 0x10000]}, {0x5, 0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002200)=""/100, 0x64}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f0000002280)=""/3, 0x3}, {&(0x7f00000022c0)=""/226, 0xe2}, {&(0x7f0000003700)=""/4096, 0x1000}], &(0x7f0000003600)=[0x9235, 0x3, 0x1, 0x1, 0x100000000, 0x100, 0x3, 0xd3d2, 0xffffffffffffffa6, 0xf]}], 0x4) 1m14.517636762s ago: executing program 32 (id=620): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f9ffffff000000000000005e00"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003540)={0x3, 0xc, &(0x7f0000004700)=ANY=[@ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x698c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000002440)=@in6={0xa, 0x4e21, 0x4, @private2, 0xc}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x0) r6 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x800, 0x7fff}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4, r8, 0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f0000003680)=[{0x7, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f0000001080)=""/126, 0x7e}, {&(0x7f0000001100)=""/216, 0xd8}, {&(0x7f0000001200)=""/194, 0xc2}, {&(0x7f0000001300)=""/133, 0x85}, {&(0x7f0000002140)=""/60, 0x3c}, {&(0x7f00000013c0)=""/243, 0xf3}], &(0x7f0000001540)=[0x4]}, {0x5, 0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001580)=""/151, 0x97}, {&(0x7f0000001640)=""/241, 0xf1}, {&(0x7f0000001740)=""/216, 0xd8}, {&(0x7f0000001840)=""/227, 0xe3}, {&(0x7f0000001a00)=""/162, 0xa2}], &(0x7f0000001ac0)=[0xa, 0x69bafa8f, 0x9, 0x5]}, {0x9, 0x1, 0x0, &(0x7f0000002040)=[{&(0x7f0000001b00)=""/152, 0x98}, {&(0x7f0000001bc0)=""/80, 0x50}, {&(0x7f0000001c40)=""/173, 0xad}, {&(0x7f0000001d00)=""/22, 0x16}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001e40)=""/249, 0xf9}, {&(0x7f0000001f40)=""/19, 0x13}, {&(0x7f0000001f80)=""/188, 0xbc}], &(0x7f0000002100)=[0x4, 0x10000]}, {0x5, 0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002200)=""/100, 0x64}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f0000002280)=""/3, 0x3}, {&(0x7f00000022c0)=""/226, 0xe2}, {&(0x7f0000003700)=""/4096, 0x1000}], &(0x7f0000003600)=[0x9235, 0x3, 0x1, 0x1, 0x100000000, 0x100, 0x3, 0xd3d2, 0xffffffffffffffa6, 0xf]}], 0x4) 23.121146579s ago: executing program 1 (id=1527): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0, r0}, 0x14) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) 23.058922722s ago: executing program 1 (id=1530): rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000380)=""/118) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x2}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x10000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x6e69468e, 0x22}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002080)={@map=r6, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) signalfd(r7, &(0x7f0000000000)={[0x5]}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) ptrace$poke(0x4, r1, &(0x7f0000000100), 0x8000000000000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x101, 0x70bd25, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1ff}]}, 0x28}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 22.990504346s ago: executing program 1 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x3, 0xf5ffffff, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x20040800) 22.989653444s ago: executing program 1 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000180)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000100), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r8, 0x800455d1, 0xfffffffffffffffd) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r7, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x4, 0x16, 0x0, 0x12754f40, 0x0, {0x2, 0x7, 0xc, 0x2, 0x3, 0x1, 0xf2, 0x800, 0xff3, 0xc000, 0x7fffffff, r6, r7, 0x0, 0x49}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.789201725s ago: executing program 1 (id=1541): ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 22.711001605s ago: executing program 1 (id=1544): syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x2f, 0x10, 0x50, 0xda7a, 0x1b, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x8000, 0x1, 0x9}}) 22.670371189s ago: executing program 33 (id=1544): syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x2f, 0x10, 0x50, 0xda7a, 0x1b, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x8000, 0x1, 0x9}}) 18.498702113s ago: executing program 0 (id=1608): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x2, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.338630805s ago: executing program 0 (id=1615): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chmod(&(0x7f0000000080)='./cgroup\x00', 0x8) 17.540949477s ago: executing program 5 (id=1623): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3c, 0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r5}, 0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0x6}, 0x8) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) 17.5408205s ago: executing program 5 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000e001000390400"/20, @ANYRES32=r2, @ANYBLOB="019800000313000024001280090001006970697000000000140002800c000300", @ANYRES32=r2], 0x44}}, 0x0) 17.481182668s ago: executing program 5 (id=1625): r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x7, &(0x7f0000000140)={0x100}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="24000000010006", 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) 17.48101637s ago: executing program 0 (id=1626): r0 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$inet6(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x40, &(0x7f0000000040)={0xa, 0x4e20, 0xc3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7}, 0x1c) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='fd', 0x0, r1) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 17.42112358s ago: executing program 0 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8cffffffffffffff) 17.420288186s ago: executing program 0 (id=1628): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b120500ab0a0000240012800b00010069703667726500001400028008000100", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) r8 = socket(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x4a66, &(0x7f0000000200)={0x0, 0xa7bf, 0x20, 0x1, 0x31}, &(0x7f0000000280), &(0x7f0000000340)) io_uring_enter(r9, 0x5882, 0x8b86, 0x4, &(0x7f00000005c0)={[0x200]}, 0x8) r10 = socket$packet(0x11, 0x2, 0x300) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0xf0b, 0x10, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0)="68fe3019677b9125ca6e5cd165584f172d7474dc18fc", &(0x7f00000004c0)=@tcp6=r0, 0x4}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) 17.420010568s ago: executing program 5 (id=1629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xe, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000040000001813000040f53541deda39eb67cf9c06dd5a0a693d90b64a6c5aabdd8cae00ea4168afb25f58b36da9bc719ed9d473fd64cca590e87e3c88d2974ca32208ef38cb9828a6101b664f48236b04a5c45bb30d178588f3afae84f91f34f5f386f5d6e82914d4540b20cae715dc29cdb4fbbb32", @ANYRES32=r2, @ANYBLOB="000000000000000085000000260000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000), &(0x7f0000000200)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00030214", 0x7, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800cc9c7f6d51afa3d23c687addbc6fc5fa00", @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="1c0023800800140060ffffff05001e000100000006000d0006000000"], 0x38}}, 0x0) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40010000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 17.339606445s ago: executing program 0 (id=1630): ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 17.009590505s ago: executing program 4 (id=1634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x16c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x27ce9ba0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xaec}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8d6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7b1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xac}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x36}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) close(r4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001540), 0x101000, 0x0) ioctl$CDROM_SET_OPTIONS(r9, 0x5320, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b529, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x7, 0x0, 0x5}}]}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.880899517s ago: executing program 4 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 16.880772753s ago: executing program 4 (id=1637): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002bc0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c00)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16.82987415s ago: executing program 4 (id=1638): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x69f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) init_module(0x0, 0x0, 0x0) (async) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (rerun: 32) syz_usb_connect$uac1(0x2, 0x10c, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x4, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x7c, '3'}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x4, 0x2, 0x6], 0xdc}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x2, 0x2, 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0xa, "ab26e42e"}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x8, "39e9c89aae84"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1002}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x2, 0x7, 0x2d, "1e50accaa8f44a4f3c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb, 0x3, 0x4, 0x3, "e2c4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7f, 0x81, {0x7, 0x25, 0x1, 0x80, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0xb, 0x9, 'b', "e8b837"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0xa5, 0x7, "1d3db25b120293bd"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x1, "5c6c81"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x6, 0x19, "b15182574b93"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xc, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0xe, 0xb2, {0x7, 0x25, 0x1, 0x80, 0x1, 0x101}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x0, 0x10, 0xb, 0xc, 0x40, 0x7f}, 0x68, &(0x7f0000000400)={0x5, 0xf, 0x68, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x0, 0xf00, 0x1, [0x3f00]}, @generic={0x3f, 0x10, 0x3, "7cfee435d1b4477366a975e7badd94f52ba14564bb433b4a312b8aeed52411dd56f4197b120243a806c92cb18cae264a5536045ad7b90ef78f7ce593"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "258dccb352cf21d85434c47660dfa9e4"}]}, 0x4, [{0x7b, &(0x7f0000000480)=@string={0x7b, 0x3, "bacccab611a4a0696b2552a9b33f13220dfee450edab945894f66ac56449323b6b1f712d64f66dc63724f905caf3c4ed5e0dbf0a7edcf73e4b82bfb671693c2f24f68659454d0236fc4ae2e51b051e59036fa1b56cc00117f9b5cc48a5dad641961264fd5a7d7a01f2fd3045159f784bbfbf23884e30ca6d22"}}, {0x4d, &(0x7f0000000500)=@string={0x4d, 0x3, "aa076188e59a943f1de8eee82977f314f07f8a068c0c000e68612cacf3b6828a8f164a7174854e0b6a4d0cab29dd1f92565682117d81830590732e8689106114c8a73abe14097d2bdb4680"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async, rerun: 32) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000140)=[0x859, 0x5]) (rerun: 32) 16.549739512s ago: executing program 5 (id=1640): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b120500ab0a0000240012800b00010069703667726500001400028008000100", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) r8 = socket(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x4a66, &(0x7f0000000200)={0x0, 0xa7bf, 0x20, 0x1, 0x31}, &(0x7f0000000280), &(0x7f0000000340)) io_uring_enter(r9, 0x5882, 0x8b86, 0x4, &(0x7f00000005c0)={[0x200]}, 0x8) r10 = socket$packet(0x11, 0x2, 0x300) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0xf0b, 0x10, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0)="68fe3019677b9125ca6e5cd165584f172d7474dc18fc", &(0x7f00000004c0)=@tcp6=r0, 0x4}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) 16.49053799s ago: executing program 5 (id=1641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') read$FUSE(r2, &(0x7f0000001440)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000030101020000000000000000030000083c001080080002400000005a080003400000ffff080003400000000108000140000000070800014000000003080002400004000008000241000000031400198008000100310900000800010044080000380001800c00028005000100060000001400018008000100ffffffff08000200ac1414aa1400018008000100ac14142908000200e00000023400108008000140000000040800024000000002080001400000000108000340000000080800014000000003080002400000000208000840000000091400170000000006000002000000000ffffffff6"], 0xec}, 0x1, 0x0, 0x0, 0x40080}, 0x20000804) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) flock(0xffffffffffffffff, 0xa422928b49da8f63) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x221809, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x88100) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x9, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x1, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400006}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) exit(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) 13.79046478s ago: executing program 4 (id=1651): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b120500ab0a0000240012800b00010069703667726500001400028008000100", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x40000) r6 = socket(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x4a66, &(0x7f0000000200)={0x0, 0xa7bf, 0x20, 0x1, 0x31}, &(0x7f0000000280), &(0x7f0000000340)) io_uring_enter(r7, 0x5882, 0x8b86, 0x4, &(0x7f00000005c0)={[0x200]}, 0x8) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x50, 0x24, 0xf0b, 0x10, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4080) 13.710952195s ago: executing program 4 (id=1652): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001540), 0x101000, 0x0) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x8) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x52, 0x0, 0x1}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) (async) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001540), 0x101000, 0x0) (async) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x8) (async) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x52, 0x0, 0x1}, 0x28) (async) 2.148046737s ago: executing program 34 (id=1630): ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.210211868s ago: executing program 35 (id=1641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') read$FUSE(r2, &(0x7f0000001440)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000030101020000000000000000030000083c001080080002400000005a080003400000ffff080003400000000108000140000000070800014000000003080002400004000008000241000000031400198008000100310900000800010044080000380001800c00028005000100060000001400018008000100ffffffff08000200ac1414aa1400018008000100ac14142908000200e00000023400108008000140000000040800024000000002080001400000000108000340000000080800014000000003080002400000000208000840000000091400170000000006000002000000000ffffffff6"], 0xec}, 0x1, 0x0, 0x0, 0x40080}, 0x20000804) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) flock(0xffffffffffffffff, 0xa422928b49da8f63) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x221809, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x88100) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001080), 0x88000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}, 0x8000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x9, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x1, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400006}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) exit(0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) 1.16079189s ago: executing program 3 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0) 1.160290745s ago: executing program 3 (id=1691): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x8a9d) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x3]}, 0x8, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x8, 0x8, 0xfffffffc, {{0x15, 0x4, 0x2, 0x25, 0x54, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @empty, {[@timestamp={0x44, 0x2c, 0xac, 0x0, 0x9, [0x5, 0x97f, 0x5, 0x8, 0x1, 0x1, 0x408, 0x4, 0xb, 0xff]}, @noop, @generic={0x86, 0x10, "3b1739574e5280b1c5c7198cf1d9"}]}}}}}) sendmsg$can_raw(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x3b, 0x0, 0x0, 0x0, "0f06ccb805d47ea6dbef7d505d40b10511072ba015e3da41441cef261671b2eb165b61b7a82aa8a97b179ae3dce8b294f738ed723e79bd356e652e128ad29e1b"}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x40000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x40, 0x0, 0xfffffffa, 0x10000, 0x2, "9d5ec65e75844ccdfd33cb5430d1455ecdfd6e", 0x6}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x9, 0x1, 0x40, 0x2, 0x5, 0xffffffffffffffff}) rt_sigqueueinfo(r3, 0x35, &(0x7f00000003c0)={0x2d, 0x80000001, 0x9}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0xc012}, 0x14) lstat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000029c0)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000002ac0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) fstat(r1, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000002d80)={0x8, 0x9, {r3}, {0x0}}) r11 = getgid() stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000003240)=0xe8) stat(&(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getuid() syz_fuse_handle_req(r1, &(0x7f0000000580)="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", 0x2000, &(0x7f0000003580)={&(0x7f0000002580)={0x50, 0xfffffffffffffffe, 0x7ff, {0x7, 0x2b, 0xb2f, 0x4000, 0x8000, 0x1ff, 0x9, 0x8, 0x0, 0x0, 0x1, 0x5}}, &(0x7f0000002600)={0x18, 0x0, 0x5, {0xffe0000000000}}, &(0x7f0000002640)={0x18, 0x0, 0x2, {0x3}}, &(0x7f0000002680)={0x18, 0x0, 0x5, {0x8}}, &(0x7f00000026c0)={0x18, 0xfffffffffffffff5, 0x8000000000000000, {0x40}}, &(0x7f0000002700)={0x28, 0x0, 0x3, {{0xffffffffffff7fff, 0xdd2, 0x1, r3}}}, &(0x7f0000002740)={0x60, 0x0, 0x9, {{0x5, 0x100000001, 0x6, 0xff, 0x4, 0x8df, 0x24000, 0x9}}}, &(0x7f00000027c0)={0x18, 0xfffffffffffffff5, 0x5, {0x6}}, &(0x7f0000002800)={0x18, 0x0, 0x6, {'gretap0\x00'}}, &(0x7f0000002840)={0x20, 0xfffffffffffffff5, 0xb9a, {0x0, 0x8}}, &(0x7f0000002940)={0x78, 0x0, 0x7, {0x4, 0x3ff, 0x0, {0x2, 0x2, 0x2, 0x6, 0x1, 0x8, 0xe5, 0xc205, 0x3, 0xa4c81814ca09bc5d, 0x2, r5, 0xee00, 0x4, 0x4}}}, &(0x7f0000002b00)={0x90, 0xfffffffffffffff5, 0x9, {0x5, 0x1, 0x9, 0xcd5, 0x6, 0xf, {0x1, 0x5, 0x1000, 0x4, 0x0, 0xfffffffffffffff7, 0x10001, 0x3, 0x3, 0x4000, 0x4, r6, 0xffffffffffffffff, 0x4, 0xb7b}}}, &(0x7f0000002bc0)={0xd0, 0x0, 0xa63, [{0x4, 0x40, 0xa, 0x6, '/dev/ptmx\x00'}, {0x4, 0x7, 0x0, 0x2}, {0x6, 0x0, 0xa, 0xfffffffc, '/dev/ptmx\x00'}, {0x6, 0xaa7b, 0x0, 0x80000001}, {0x6, 0x3, 0x8, 0x7, 'syztnl2\x00'}, {0x1, 0x0, 0x7, 0x12, '--*$/-('}]}, &(0x7f0000002e80)={0x298, 0x0, 0x10, [{{0x4, 0x0, 0x6, 0xd28, 0xfffffffa, 0xc86, {0x2, 0x8, 0x2, 0xbf, 0x8, 0x1, 0x3ff, 0x4, 0x8, 0xa000, 0x6a90, r8, r9, 0xffd, 0x80000001}}, {0x2, 0x3, 0x2, 0x1404d25, '=]'}}, {{0x3, 0x0, 0x0, 0x101, 0x7, 0x4, {0x6, 0x1ff, 0x10, 0x6, 0x4, 0x5, 0x3, 0x7, 0x200, 0x8000, 0xe8, r10, 0x0, 0x3, 0x8}}, {0x5, 0x7, 0xa, 0x7, '/dev/ptmx\x00'}}, {{0x6, 0x1, 0x9, 0x28e5, 0x10000, 0xee, {0x0, 0x10, 0x7, 0x1, 0x6, 0x61d, 0x5, 0x6, 0x8, 0xc000, 0x101, 0xffffffffffffffff, r11, 0x1}}, {0x5, 0x99, 0x2, 0x3, '\'&'}}, {{0x0, 0x1, 0xed, 0x800, 0x14c, 0x0, {0x2, 0x5, 0x9, 0x5cd, 0xb, 0x30, 0x6, 0x7, 0xfffeffff, 0xc000, 0x1, r12, r13, 0xffffffff, 0x1}}, {0x0, 0x14dd, 0x4, 0xfffffff9, '-@).'}}]}, &(0x7f0000003340)={0xa0, 0x0, 0x8, {{0x1, 0x3, 0x41e, 0x0, 0x4, 0x5, {0x1, 0x400, 0x9, 0x7, 0x0, 0x8, 0x3, 0x0, 0x4, 0x4000, 0x8e52, r14, r15, 0x2, 0x1000}}, {0x0, 0x12}}}, &(0x7f0000003400)={0x20, 0x0, 0x3, {0x9, 0x4, 0x7, 0x28}}, &(0x7f0000003440)={0x130, 0x0, 0x4, {0x1, 0x7a8, 0x0, '\x00', {0x40, 0x4b, 0x400, 0x0, r16, 0xee00, 0x1000, '\x00', 0x7fffffff, 0xfffffffffffffffd, 0xff, 0x7, {0x8, 0x9}, {0x709, 0x1ff}, {0x80000001, 0x1}, {0x5, 0x5}, 0x4, 0x6, 0x7, 0x9}}}}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000003640), &(0x7f0000003680)='./file0\x00', 0x8, 0x1) chdir(&(0x7f00000036c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000037c0)={'syztnl1\x00', &(0x7f0000003740)={'ip6_vti0\x00', r17, 0x29, 0x4, 0xc2, 0x9154, 0x31, @empty, @loopback, 0x10, 0x7800, 0x81, 0x1ff}}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000003800)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000003900)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r18, &(0x7f0000003940)='./file1\x00') getsockname(r7, &(0x7f0000003980)=@l2tp={0x2, 0x0, @private}, &(0x7f0000003a00)=0x80) 1.069816632s ago: executing program 3 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x240, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x80017, "5660359c3245d1c42317afad7d040000000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x1003, "340b32dadc6931b8e64b8c25f5980180000400000000000000001000eaffffff", 0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000001300)={"3c24139ad44aec57f2e2ad238a14fd00", r5, 0xffffffffffffffff}) ppoll(&(0x7f0000001280)=[{r7, 0x110}], 0x1, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000003000010025bd7000a84cb3fedbdf2500000000c9b8b1a07fdec96b03c8b2aed00175faecaa0eef9cb8eb7f11e6f1d0b43d0f6c8733c6020000006a2abfdf5fb7dcc5dfc73f295fd1080800000000000000c84102dc43eeb368ba3c4600000052d4e88300"/114, @ANYRES32=r2, @ANYBLOB="380100000300000008000400ffff0000"], 0x28}}, 0x20000800) 979.511411ms ago: executing program 3 (id=1693): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x13, 0x0, 0x310) syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) fanotify_mark(r2, 0x401, 0x1018, r3, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x521580, 0x0) fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r7}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)}) 801.079716ms ago: executing program 3 (id=1694): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd000000011000", [0x8, 0xfffffffffffffffc]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r5 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r7, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socket$alg(0x26, 0x5, 0x0) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd000000011000", [0x8, 0xfffffffffffffffc]}}) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r5, 0x0, 0x0) (async) fchdir(r6) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdirat(r7, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) renameat2(r7, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) socket$alg(0x26, 0x5, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$alg(r8, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841) (async) 748.596201ms ago: executing program 3 (id=1695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xe, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000040000001813000040f53541deda39eb67cf9c06dd5a0a693d90b64a6c5aabdd8cae00ea4168afb25f58b36da9bc719ed9d473fd64cca590e87e3c88d2974ca32208ef38cb9828a6101b664f48236b04a5c45bb30d178588f3afae84f91f34f5f386f5d6e82914d4540b20cae715dc29cdb4fbbb32", @ANYRES32=r2, @ANYBLOB="000000000000000085000000260000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000), &(0x7f0000000200)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00030214", 0x7, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800cc9c7f6d51afa3d23c687addbc6fc5fa00", @ANYRES16=r7, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="1c0023800800140060ffffff05001e000100000006000d0006000000"], 0x38}}, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40010000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 0s ago: executing program 6 (id=1686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffa2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000800)={r1, r0}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) prctl$PR_SET_FPEXC(0xc, 0x0) prctl$PR_SET_FPEXC(0xc, 0x2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={r9, 0x24}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r9, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x100, 0x4e20, 0x514e, 0x2, 0x20, 0x1a0, 0x33, 0x0, r6}, {0x80000001, 0x40, 0x9, 0xfff, 0x2, 0xd9, 0x6c, 0xb073}, {0x80, 0x4, 0x7, 0xe}, 0x5, 0x6e6bb8, 0x0, 0x1, 0x3, 0x1}, {{@in6=@private1, 0x4d4, 0x6c}, 0x2, @in6=@empty, 0x0, 0x1, 0x1, 0x10, 0x10000, 0x9, 0x7}}, 0xe8) kernel console output (not intermixed with test programs): device number 10 [ 126.988431][ T9276] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.993122][ T9276] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1142'. [ 126.993211][ T40] audit: type=1400 audit(1754546128.510:1527): avc: denied { nlmsg_read } for pid=9275 comm="syz.3.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.003993][ T40] audit: type=1400 audit(1754546128.520:1528): avc: denied { map } for pid=9275 comm="syz.3.1142" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 127.384964][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.494378][ T40] audit: type=1400 audit(1754546129.010:1529): avc: denied { connect } for pid=9291 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.501302][ T40] audit: type=1400 audit(1754546129.020:1530): avc: denied { getopt } for pid=9291 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.801221][ T40] audit: type=1400 audit(1754546129.320:1531): avc: denied { sqpoll } for pid=9300 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.331408][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 128.415108][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.432814][ T40] audit: type=1400 audit(1754546129.950:1532): avc: denied { map } for pid=9307 comm="syz.4.1153" path="pipe:[35783]" dev="pipefs" ino=35783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 128.735904][ T9314] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 128.844296][ T9] IPVS: starting estimator thread 0... [ 128.935031][ T9317] IPVS: using max 42 ests per chain, 100800 per kthread [ 129.455496][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.604426][ T9321] program syz.0.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.667946][ T9314] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.759850][ T9337] FAULT_INJECTION: forcing a failure. [ 129.759850][ T9337] name failslab, interval 1, probability 0, space 0, times 0 [ 129.769258][ T9337] CPU: 0 UID: 0 PID: 9337 Comm: syz.3.1163 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 129.769277][ T9337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.769284][ T9337] Call Trace: [ 129.769288][ T9337] [ 129.769293][ T9337] dump_stack_lvl+0x16c/0x1f0 [ 129.769332][ T9337] should_fail_ex+0x512/0x640 [ 129.769346][ T9337] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 129.769361][ T9337] should_failslab+0xc2/0x120 [ 129.769373][ T9337] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 129.769386][ T9337] ? vfs_parse_fs_string+0xc3/0x150 [ 129.769402][ T9337] kmemdup_nul+0x49/0xf0 [ 129.769414][ T9337] vfs_parse_fs_string+0xc3/0x150 [ 129.769427][ T9337] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 129.769444][ T9337] ? ovl_next_opt+0x143/0x1c0 [ 129.769455][ T9337] ? __pfx_ovl_next_opt+0x10/0x10 [ 129.769464][ T9337] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 129.769478][ T9337] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 129.769492][ T9337] ? alloc_fs_context+0x59b/0x9c0 [ 129.769507][ T9337] path_mount+0x1438/0x1fd0 [ 129.769523][ T9337] ? __pfx_path_mount+0x10/0x10 [ 129.769537][ T9337] ? kmem_cache_free+0x2d1/0x4d0 [ 129.769547][ T9337] ? putname+0x154/0x1a0 [ 129.769562][ T9337] ? putname+0x154/0x1a0 [ 129.769577][ T9337] ? __x64_sys_mount+0x28d/0x310 [ 129.769590][ T9337] __x64_sys_mount+0x28d/0x310 [ 129.769604][ T9337] ? __pfx___x64_sys_mount+0x10/0x10 [ 129.769618][ T9337] ? getname_flags.part.0+0x1c5/0x550 [ 129.769636][ T9337] do_syscall_64+0xcd/0x4c0 [ 129.769652][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.769664][ T9337] RIP: 0033:0x7f4bd2b8ebe9 [ 129.769674][ T9337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.769684][ T9337] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.769695][ T9337] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 129.769702][ T9337] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 129.769708][ T9337] RBP: 00007f4bd0df6090 R08: 0000200000000180 R09: 0000000000000000 [ 129.769714][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.769721][ T9337] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 129.769734][ T9337] [ 129.863734][ T40] audit: type=1400 audit(1754546131.380:1533): avc: denied { unmount } for pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 129.918985][ T9345] tipc: Enabled bearer , priority 10 [ 129.924794][ T9345] tipc: Enabled bearer , priority 0 [ 129.936841][ T9340] kvm: pic: non byte write [ 129.945379][ T9339] kvm: vcpu 0: requested 48 ns lapic timer period limited to 200000 ns [ 129.964997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.968739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.974277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.494983][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.916672][ T60] tipc: Node number set to 4293721857 [ 131.408090][ T40] audit: type=1400 audit(1754546132.930:1534): avc: denied { ioctl } for pid=9378 comm="syz.3.1176" path="socket:[39338]" dev="sockfs" ino=39338 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.418915][ T40] audit: type=1400 audit(1754546132.930:1535): avc: denied { create } for pid=9378 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 131.428112][ T9379] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 131.428142][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.430484][ T9379] vhci_hcd vhci_hcd.0: Device attached [ 131.444859][ T9381] vhci_hcd: connection closed [ 131.455299][ T40] audit: type=1400 audit(1754546132.960:1536): avc: denied { getattr } for pid=9378 comm="syz.3.1176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.466978][ T6428] vhci_hcd: stop threads [ 131.469431][ T6428] vhci_hcd: release socket [ 131.471106][ T6428] vhci_hcd: disconnect device [ 131.534956][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.541411][ T9397] FAULT_INJECTION: forcing a failure. [ 131.541411][ T9397] name failslab, interval 1, probability 0, space 0, times 0 [ 131.545894][ T9397] CPU: 0 UID: 0 PID: 9397 Comm: syz.4.1182 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 131.545910][ T9397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.545917][ T9397] Call Trace: [ 131.545921][ T9397] [ 131.545925][ T9397] dump_stack_lvl+0x16c/0x1f0 [ 131.545966][ T9397] should_fail_ex+0x512/0x640 [ 131.545980][ T9397] ? __kmalloc_noprof+0xbf/0x510 [ 131.545992][ T9397] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 131.546006][ T9397] should_failslab+0xc2/0x120 [ 131.546019][ T9397] __kmalloc_noprof+0xd2/0x510 [ 131.546032][ T9397] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 131.546048][ T9397] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 131.546060][ T9397] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 131.546076][ T9397] ? bpf_lsm_capable+0x9/0x10 [ 131.546092][ T9397] ? security_capable+0x7e/0x260 [ 131.546103][ T9397] ? ns_capable+0xd7/0x110 [ 131.546118][ T9397] genl_rcv_msg+0x55c/0x800 [ 131.546130][ T9397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.546142][ T9397] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 131.546155][ T9397] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 131.546167][ T9397] ? __pfx_nl80211_post_doit+0x10/0x10 [ 131.546182][ T9397] netlink_rcv_skb+0x155/0x420 [ 131.546198][ T9397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.546210][ T9397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.546232][ T9397] ? netlink_deliver_tap+0x1ae/0xd30 [ 131.546249][ T9397] genl_rcv+0x28/0x40 [ 131.546258][ T9397] netlink_unicast+0x5aa/0x870 [ 131.546277][ T9397] ? __pfx_netlink_unicast+0x10/0x10 [ 131.546294][ T9397] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 131.546314][ T9397] netlink_sendmsg+0x8d1/0xdd0 [ 131.546333][ T9397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.546354][ T9397] ____sys_sendmsg+0xa95/0xc70 [ 131.546366][ T9397] ? copy_msghdr_from_user+0x10a/0x160 [ 131.546381][ T9397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.546399][ T9397] ___sys_sendmsg+0x134/0x1d0 [ 131.546415][ T9397] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.546444][ T9397] ? __mutex_unlock_slowpath+0x100/0x800 [ 131.546470][ T9397] __sys_sendmsg+0x16d/0x220 [ 131.546485][ T9397] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.546509][ T9397] do_syscall_64+0xcd/0x4c0 [ 131.546520][ T9397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.546531][ T9397] RIP: 0033:0x7fe2dff8ebe9 [ 131.546541][ T9397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.546551][ T9397] RSP: 002b:00007fe2e0de3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.546561][ T9397] RAX: ffffffffffffffda RBX: 00007fe2e01b5fa0 RCX: 00007fe2dff8ebe9 [ 131.546568][ T9397] RDX: 0000000000040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 131.546574][ T9397] RBP: 00007fe2e0de3090 R08: 0000000000000000 R09: 0000000000000000 [ 131.546580][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.546589][ T9397] R13: 00007fe2e01b6038 R14: 00007fe2e01b5fa0 R15: 00007fff0222a988 [ 131.546602][ T9397] [ 131.975347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.977202][ T40] audit: type=1326 audit(1754546133.500:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.0.1186" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32cc58ebe9 code=0x0 [ 131.978245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.079853][ T5330] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 132.105242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.109809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.133725][ T9418] tipc: Enabled bearer , priority 10 [ 132.231986][ T9423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.236637][ T9423] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 132.403193][ T9431] tap0: tun_chr_ioctl cmd 1074812117 [ 132.560540][ T9436] tap0: tun_chr_ioctl cmd 1074025676 [ 132.562268][ T9436] tap0: owner set to 27 [ 132.584979][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.749139][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864006][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1197'. [ 132.870737][ T40] audit: type=1326 audit(1754546134.390:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.0.1197" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32cc58ebe9 code=0x0 [ 133.043729][ T9455] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 133.059198][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 133.062429][ T9456] netlink: 'syz.1.1203': attribute type 7 has an invalid length. [ 133.065552][ T9456] netlink: 'syz.1.1203': attribute type 8 has an invalid length. [ 133.068300][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 133.413497][ T9458] fuse: Unknown parameter 'ÒY¿#©ò‚È' [ 133.625039][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.675046][ T6051] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 133.793153][ T9463] kvm: pic: non byte write [ 133.824972][ T6051] usb 8-1: device descriptor read/64, error -71 [ 133.887478][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 133.897160][ T9474] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 133.924352][ T9474] bond5: (slave bridge2): making interface the new active one [ 133.927307][ T9474] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 133.966681][ T9479] loop6: detected capacity change from 0 to 7 [ 133.987398][ T9479] Dev loop6: unable to read RDB block 7 [ 133.989205][ T9479] loop6: unable to read partition table [ 133.991238][ T9479] loop6: partition table beyond EOD, truncated [ 133.993285][ T9479] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 133.999215][ T9479] tap0: tun_chr_ioctl cmd 1074025678 [ 134.001148][ T9479] tap0: group set to 0 [ 134.094993][ T6051] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 134.211532][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1216'. [ 134.220175][ T40] audit: type=1326 audit(1754546135.740:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.1.1216" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736ab8ebe9 code=0x0 [ 134.236775][ T6051] usb 8-1: device descriptor read/64, error -71 [ 134.355471][ T6051] usb usb8-port1: attempt power cycle [ 134.655361][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.705072][ T6051] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 134.725657][ T6051] usb 8-1: device descriptor read/8, error -71 [ 134.802956][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 134.806085][ T9490] IPVS: Unknown mcast interface: vcan0 [ 134.965015][ T6051] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 134.974721][ T9496] FAULT_INJECTION: forcing a failure. [ 134.974721][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 134.979507][ T9496] CPU: 3 UID: 0 PID: 9496 Comm: syz.0.1220 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 134.979525][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.979531][ T9496] Call Trace: [ 134.979536][ T9496] [ 134.979540][ T9496] dump_stack_lvl+0x16c/0x1f0 [ 134.979580][ T9496] should_fail_ex+0x512/0x640 [ 134.979594][ T9496] ? fs_reclaim_acquire+0xae/0x150 [ 134.979610][ T9496] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 134.979624][ T9496] should_failslab+0xc2/0x120 [ 134.979637][ T9496] __kmalloc_noprof+0xd2/0x510 [ 134.979651][ T9496] tomoyo_realpath_from_path+0xc2/0x6e0 [ 134.979688][ T9496] ? tomoyo_profile+0x47/0x60 [ 134.979707][ T9496] tomoyo_path_number_perm+0x245/0x580 [ 134.979718][ T9496] ? tomoyo_path_number_perm+0x237/0x580 [ 134.979731][ T9496] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.979743][ T9496] ? find_held_lock+0x2b/0x80 [ 134.979769][ T9496] ? find_held_lock+0x2b/0x80 [ 134.979782][ T9496] ? hook_file_ioctl_common+0x145/0x410 [ 134.979801][ T9496] ? __fget_files+0x20e/0x3c0 [ 134.979815][ T9496] security_file_ioctl+0x9b/0x240 [ 134.979829][ T9496] __x64_sys_ioctl+0xb7/0x210 [ 134.979846][ T9496] do_syscall_64+0xcd/0x4c0 [ 134.979862][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.979872][ T9496] RIP: 0033:0x7f32cc58ebe9 [ 134.979882][ T9496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.979893][ T9496] RSP: 002b:00007f32cd3e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.979908][ T9496] RAX: ffffffffffffffda RBX: 00007f32cc7b5fa0 RCX: 00007f32cc58ebe9 [ 134.979915][ T9496] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 134.979921][ T9496] RBP: 00007f32cd3e8090 R08: 0000000000000000 R09: 0000000000000000 [ 134.979927][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.979933][ T9496] R13: 00007f32cc7b6038 R14: 00007f32cc7b5fa0 R15: 00007fff3348c798 [ 134.979946][ T9496] [ 134.980201][ T9496] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.985570][ T6051] usb 8-1: device descriptor read/8, error -71 [ 135.156486][ T6051] usb usb8-port1: unable to enumerate USB device [ 135.412778][ T40] audit: type=1400 audit(1754546136.930:1540): avc: denied { execute } for pid=9509 comm="syz.0.1225" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.480810][ T40] audit: type=1400 audit(1754546137.000:1541): avc: denied { ioctl } for pid=9510 comm="syz.1.1226" path="/339/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 135.512151][ T9517] Process accounting resumed [ 135.695301][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.468674][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1231'. [ 136.471831][ T40] audit: type=1326 audit(1754546137.990:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9529 comm="syz.3.1231" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bd2b8ebe9 code=0x0 [ 136.622564][ T9539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.631592][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 136.735047][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.918965][ T9550] sctp: [Deprecated]: syz.4.1240 (pid 9550) Use of int in max_burst socket option deprecated. [ 136.918965][ T9550] Use struct sctp_assoc_value instead [ 136.923987][ T9551] sctp: [Deprecated]: syz.4.1240 (pid 9551) Use of int in max_burst socket option deprecated. [ 136.923987][ T9551] Use struct sctp_assoc_value instead [ 137.317047][ T9566] IPv6: sit1: Disabled Multicast RS [ 137.471089][ T9567] kvm: pic: non byte write [ 137.480380][ T40] audit: type=1400 audit(1754546139.000:1543): avc: denied { setopt } for pid=9572 comm="syz.3.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.524139][ T40] audit: type=1400 audit(1754546139.040:1544): avc: denied { setopt } for pid=9577 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 137.612765][ T9589] program syz.1.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.775036][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.453799][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 138.459648][ T40] audit: type=1326 audit(1754546139.980:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.4.1256" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2dff8ebe9 code=0x0 [ 138.502095][ T9602] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 138.506806][ T9602] cramfs: wrong magic [ 138.513512][ T9605] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 138.516541][ T9605] cramfs: wrong magic [ 138.547763][ T9609] random: crng reseeded on system resumption [ 138.572329][ T9609] IPv6: NLM_F_REPLACE set, but no existing node found! [ 138.713768][ T9614] FAULT_INJECTION: forcing a failure. [ 138.713768][ T9614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.718241][ T9614] CPU: 1 UID: 0 PID: 9614 Comm: syz.3.1261 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 138.718257][ T9614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.718264][ T9614] Call Trace: [ 138.718268][ T9614] [ 138.718272][ T9614] dump_stack_lvl+0x16c/0x1f0 [ 138.718314][ T9614] should_fail_ex+0x512/0x640 [ 138.718331][ T9614] _copy_from_user+0x2e/0xd0 [ 138.718343][ T9614] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 138.718359][ T9614] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 138.718379][ T9614] do_ipv6_getsockopt+0x217/0x2f50 [ 138.718395][ T9614] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 138.718409][ T9614] ? avc_has_perm_noaudit+0x117/0x3b0 [ 138.718428][ T9614] ? avc_has_perm_noaudit+0x149/0x3b0 [ 138.718445][ T9614] ? avc_has_perm+0x144/0x1f0 [ 138.718461][ T9614] ? __pfx_avc_has_perm+0x10/0x10 [ 138.718479][ T9614] ? __lock_acquire+0xb97/0x1ce0 [ 138.718498][ T9614] ? sock_has_perm+0x259/0x2f0 [ 138.718511][ T9614] ? ipv6_getsockopt+0x126/0x280 [ 138.718524][ T9614] ipv6_getsockopt+0x126/0x280 [ 138.718539][ T9614] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 138.718552][ T9614] ? __might_fault+0xe3/0x190 [ 138.718563][ T9614] ? __might_fault+0x13b/0x190 [ 138.718576][ T9614] udpv6_getsockopt+0x61/0xb0 [ 138.718593][ T9614] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 138.718604][ T9614] do_sock_getsockopt+0x34d/0x440 [ 138.718615][ T9614] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 138.718625][ T9614] ? __fget_files+0x204/0x3c0 [ 138.718643][ T9614] __sys_getsockopt+0x12f/0x260 [ 138.718661][ T9614] __x64_sys_getsockopt+0xbd/0x160 [ 138.718681][ T9614] ? do_syscall_64+0x91/0x4c0 [ 138.718694][ T9614] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.718709][ T9614] do_syscall_64+0xcd/0x4c0 [ 138.718719][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.718731][ T9614] RIP: 0033:0x7f4bd2b8ebe9 [ 138.718740][ T9614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.718751][ T9614] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 138.718762][ T9614] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 138.718769][ T9614] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 138.718775][ T9614] RBP: 00007f4bd0df6090 R08: 0000200000000280 R09: 0000000000000000 [ 138.718781][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.718787][ T9614] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 138.718799][ T9614] [ 138.825039][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.845534][ T40] audit: type=1400 audit(1754546140.370:1546): avc: denied { nlmsg_write } for pid=9615 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 138.856996][ T40] audit: type=1400 audit(1754546140.370:1547): avc: denied { audit_write } for pid=9615 comm="syz.3.1262" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.866846][ T40] audit: type=1107 audit(1754546140.380:1548): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 138.958677][ T9619] program syz.3.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.989882][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.708218][ T40] audit: type=1400 audit(1754546141.230:1549): avc: denied { map } for pid=9634 comm="syz.4.1272" path="socket:[42343]" dev="sockfs" ino=42343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.717703][ T40] audit: type=1400 audit(1754546141.230:1550): avc: denied { read } for pid=9634 comm="syz.4.1272" path="socket:[42343]" dev="sockfs" ino=42343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.854991][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.440559][ T9645] random: crng reseeded on system resumption [ 140.451985][ T9645] IPv6: NLM_F_REPLACE set, but no existing node found! [ 140.467327][ T9643] program syz.0.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.567681][ T9654] netlink: 'syz.0.1277': attribute type 1 has an invalid length. [ 140.570461][ T9654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1277'. [ 140.634237][ T40] audit: type=1400 audit(1754546142.150:1551): avc: denied { load_policy } for pid=9652 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.640711][ T9657] SELinux: failed to load policy [ 140.770579][ T9664] fuse: Bad value for 'user_id' [ 140.772807][ T9664] fuse: Bad value for 'user_id' [ 140.879912][ T9672] FAULT_INJECTION: forcing a failure. [ 140.879912][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.887008][ T9672] CPU: 2 UID: 0 PID: 9672 Comm: syz.1.1286 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 140.887024][ T9672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.887031][ T9672] Call Trace: [ 140.887035][ T9672] [ 140.887039][ T9672] dump_stack_lvl+0x16c/0x1f0 [ 140.887085][ T9672] should_fail_ex+0x512/0x640 [ 140.887102][ T9672] _copy_to_user+0x32/0xd0 [ 140.887117][ T9672] simple_read_from_buffer+0xcb/0x170 [ 140.887130][ T9672] proc_fail_nth_read+0x197/0x240 [ 140.887144][ T9672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.887157][ T9672] ? rw_verify_area+0xcf/0x6c0 [ 140.887175][ T9672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.887186][ T9672] vfs_read+0x1e1/0xc60 [ 140.887199][ T9672] ? __pfx___mutex_lock+0x10/0x10 [ 140.887254][ T9672] ? __pfx_vfs_read+0x10/0x10 [ 140.887269][ T9672] ? __fget_files+0x20e/0x3c0 [ 140.887285][ T9672] ksys_read+0x12a/0x250 [ 140.887306][ T9672] ? __pfx_ksys_read+0x10/0x10 [ 140.887320][ T9672] do_syscall_64+0xcd/0x4c0 [ 140.887331][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.887343][ T9672] RIP: 0033:0x7f736ab8d5fc [ 140.887353][ T9672] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.887364][ T9672] RSP: 002b:00007f736b981030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.887380][ T9672] RAX: ffffffffffffffda RBX: 00007f736adb5fa0 RCX: 00007f736ab8d5fc [ 140.887387][ T9672] RDX: 000000000000000f RSI: 00007f736b9810a0 RDI: 0000000000000003 [ 140.887394][ T9672] RBP: 00007f736b981090 R08: 0000000000000000 R09: 0000000000000000 [ 140.887400][ T9672] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 140.887406][ T9672] R13: 00007f736adb6038 R14: 00007f736adb5fa0 R15: 00007ffe1dece448 [ 140.887419][ T9672] [ 140.895116][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.009312][ T9676] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 141.030420][ T9678] program syz.4.1288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.091821][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1293'. [ 141.323593][ T9713] random: crng reseeded on system resumption [ 141.326070][ T9712] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1298'. [ 141.338564][ T9713] IPv6: NLM_F_REPLACE set, but no existing node found! [ 141.354374][ T9717] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 141.560603][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 141.560615][ T40] audit: type=1400 audit(1754546143.080:1553): avc: denied { write } for pid=9730 comm="syz.1.1308" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 141.758515][ T9742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.766308][ T9742] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 141.822574][ T40] audit: type=1400 audit(1754546143.340:1554): avc: denied { map } for pid=9745 comm="syz.0.1320" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.830450][ T40] audit: type=1400 audit(1754546143.340:1555): avc: denied { execute } for pid=9745 comm="syz.0.1320" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.880190][ T9748] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 141.945032][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.581877][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 142.585603][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 142.596643][ T9781] fuse: Bad value for 'fd' [ 142.692307][ T9792] bridge_slave_0: left allmulticast mode [ 142.694152][ T9792] bridge_slave_0: left promiscuous mode [ 142.696792][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.702624][ T9792] bridge_slave_1: left allmulticast mode [ 142.704540][ T9792] bridge_slave_1: left promiscuous mode [ 142.706772][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.711603][ T9792] bond0: (slave bond_slave_0): Releasing backup interface [ 142.742470][ T40] audit: type=1400 audit(1754546144.260:1556): avc: denied { setopt } for pid=9793 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.752304][ T9792] team0: Port device team_slave_0 removed [ 142.757106][ T9792] team0: Port device team_slave_1 removed [ 142.759361][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.761685][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.765222][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.767559][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.775984][ T9792] bond0: (slave wlan1): Releasing backup interface [ 142.813667][ T1143] tipc: Resetting bearer [ 142.832309][ T9800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.886195][ T9808] 9pnet_fd: Insufficient options for proto=fd [ 142.975045][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.028845][ T40] audit: type=1326 audit(1754546144.550:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736ab8ebe9 code=0x7ffc0000 [ 143.040132][ T40] audit: type=1326 audit(1754546144.550:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736ab8ebe9 code=0x7ffc0000 [ 143.050400][ T40] audit: type=1326 audit(1754546144.550:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f736ab8ebe9 code=0x7ffc0000 [ 143.059358][ T40] audit: type=1326 audit(1754546144.550:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736ab8ebe9 code=0x7ffc0000 [ 143.067028][ T40] audit: type=1326 audit(1754546144.550:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f736ab8ebe9 code=0x7ffc0000 [ 143.074694][ T40] audit: type=1326 audit(1754546144.550:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9818 comm="syz.1.1343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736ab8ebe9 code=0x7ffc0000 [ 143.597511][ T9851] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 143.788358][ T9859] netlink: 'syz.4.1355': attribute type 29 has an invalid length. [ 143.996643][ T9883] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 144.010825][ T9883] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 144.015124][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.055077][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.419712][ T9908] fuse: Unknown parameter 'fsuuid' [ 145.507972][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 145.682279][ T9942] binder_alloc: 9941: binder_alloc_buf, no vma [ 145.846869][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1396'. [ 145.886696][ T9971] binder: 9969:9971 ioctl c0306201 200000000300 returned -22 [ 145.972684][ T9981] zonefs (nbd1) ERROR: Not a zoned block device [ 145.978029][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 146.095093][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.141869][ T9997] FAULT_INJECTION: forcing a failure. [ 146.141869][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 146.146731][ T9997] CPU: 1 UID: 0 PID: 9997 Comm: syz.3.1410 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 146.146749][ T9997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.146755][ T9997] Call Trace: [ 146.146760][ T9997] [ 146.146766][ T9997] dump_stack_lvl+0x16c/0x1f0 [ 146.146807][ T9997] should_fail_ex+0x512/0x640 [ 146.146823][ T9997] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 146.146844][ T9997] should_failslab+0xc2/0x120 [ 146.146859][ T9997] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 146.146869][ T9997] ? genl_start+0x1e8/0x980 [ 146.146883][ T9997] ? __netlink_dump_start+0x60b/0x990 [ 146.146898][ T9997] ? __alloc_skb+0x2b2/0x380 [ 146.146914][ T9997] __alloc_skb+0x2b2/0x380 [ 146.146929][ T9997] ? __pfx___alloc_skb+0x10/0x10 [ 146.146948][ T9997] netlink_dump+0x19b/0xd30 [ 146.146966][ T9997] ? __pfx_netlink_dump+0x10/0x10 [ 146.146987][ T9997] ? __asan_memset+0x23/0x50 [ 146.147003][ T9997] ? genl_start+0x67f/0x980 [ 146.147015][ T9997] __netlink_dump_start+0x6d6/0x990 [ 146.147034][ T9997] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 146.147047][ T9997] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 146.147063][ T9997] ? __pfx_genl_get_cmd+0x10/0x10 [ 146.147072][ T9997] ? __pfx_genl_start+0x10/0x10 [ 146.147082][ T9997] ? __pfx_genl_dumpit+0x10/0x10 [ 146.147092][ T9997] ? __pfx_genl_done+0x10/0x10 [ 146.147104][ T9997] ? __radix_tree_lookup+0x21f/0x2c0 [ 146.147122][ T9997] genl_rcv_msg+0x46e/0x800 [ 146.147135][ T9997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 146.147147][ T9997] ? __pfx_smc_nl_get_fback_stats+0x10/0x10 [ 146.147200][ T9997] netlink_rcv_skb+0x155/0x420 [ 146.147225][ T9997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 146.147242][ T9997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.147266][ T9997] ? netlink_deliver_tap+0x1ae/0xd30 [ 146.147285][ T9997] genl_rcv+0x28/0x40 [ 146.147295][ T9997] netlink_unicast+0x5aa/0x870 [ 146.147313][ T9997] ? __pfx_netlink_unicast+0x10/0x10 [ 146.147330][ T9997] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 146.147351][ T9997] netlink_sendmsg+0x8d1/0xdd0 [ 146.147370][ T9997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.147392][ T9997] ____sys_sendmsg+0xa95/0xc70 [ 146.147406][ T9997] ? copy_msghdr_from_user+0x10a/0x160 [ 146.147422][ T9997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.147440][ T9997] ___sys_sendmsg+0x134/0x1d0 [ 146.147463][ T9997] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.147491][ T9997] ? __mutex_unlock_slowpath+0x100/0x800 [ 146.147520][ T9997] __sys_sendmsg+0x16d/0x220 [ 146.147536][ T9997] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.147561][ T9997] do_syscall_64+0xcd/0x4c0 [ 146.147572][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.147584][ T9997] RIP: 0033:0x7f4bd2b8ebe9 [ 146.147594][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.147605][ T9997] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.147616][ T9997] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 146.147623][ T9997] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 146.147629][ T9997] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.147636][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.147642][ T9997] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 146.147655][ T9997] [ 146.271948][ T9998] netlink: 'syz.1.1409': attribute type 39 has an invalid length. [ 146.392252][T10005] omfs: Invalid superblock (0) [ 146.424817][T10008] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 146.443467][T10008] FAULT_INJECTION: forcing a failure. [ 146.443467][T10008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.448463][T10008] CPU: 2 UID: 0 PID: 10008 Comm: syz.4.1414 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 146.448481][T10008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.448488][T10008] Call Trace: [ 146.448493][T10008] [ 146.448498][T10008] dump_stack_lvl+0x16c/0x1f0 [ 146.448518][T10008] should_fail_ex+0x512/0x640 [ 146.448531][T10008] _copy_from_user+0x2e/0xd0 [ 146.448544][T10008] copy_msghdr_from_user+0x98/0x160 [ 146.448561][T10008] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 146.448579][T10008] ? kfree+0x24f/0x4d0 [ 146.448598][T10008] ___sys_sendmsg+0xfe/0x1d0 [ 146.448617][T10008] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.448662][T10008] ? __pfx___might_resched+0x10/0x10 [ 146.448692][T10008] __sys_sendmmsg+0x200/0x420 [ 146.448717][T10008] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.448747][T10008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.448783][T10008] ? fput+0x9b/0xd0 [ 146.448799][T10008] ? ksys_write+0x1ac/0x250 [ 146.448809][T10008] ? __pfx_ksys_write+0x10/0x10 [ 146.448822][T10008] __x64_sys_sendmmsg+0x9c/0x100 [ 146.448838][T10008] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.448853][T10008] do_syscall_64+0xcd/0x4c0 [ 146.448865][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.448877][T10008] RIP: 0033:0x7fe2dff8ebe9 [ 146.448886][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.448898][T10008] RSP: 002b:00007fe2e0de3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.448909][T10008] RAX: ffffffffffffffda RBX: 00007fe2e01b5fa0 RCX: 00007fe2dff8ebe9 [ 146.448916][T10008] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 146.448923][T10008] RBP: 00007fe2e0de3090 R08: 0000000000000000 R09: 0000000000000000 [ 146.448930][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.448936][T10008] R13: 00007fe2e01b6038 R14: 00007fe2e01b5fa0 R15: 00007fff0222a988 [ 146.448954][T10008] [ 146.680391][T10021] FAULT_INJECTION: forcing a failure. [ 146.680391][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 146.684489][T10021] CPU: 3 UID: 0 PID: 10021 Comm: syz.4.1419 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 146.684505][T10021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.684512][T10021] Call Trace: [ 146.684517][T10021] [ 146.684522][T10021] dump_stack_lvl+0x16c/0x1f0 [ 146.684560][T10021] should_fail_ex+0x512/0x640 [ 146.684574][T10021] ? fs_reclaim_acquire+0xae/0x150 [ 146.684591][T10021] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 146.684605][T10021] should_failslab+0xc2/0x120 [ 146.684619][T10021] __kmalloc_noprof+0xd2/0x510 [ 146.684633][T10021] tomoyo_realpath_from_path+0xc2/0x6e0 [ 146.684649][T10021] ? tomoyo_profile+0x47/0x60 [ 146.684666][T10021] tomoyo_path_number_perm+0x245/0x580 [ 146.684678][T10021] ? tomoyo_path_number_perm+0x237/0x580 [ 146.684691][T10021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.684703][T10021] ? find_held_lock+0x2b/0x80 [ 146.684728][T10021] ? find_held_lock+0x2b/0x80 [ 146.684741][T10021] ? hook_file_ioctl_common+0x145/0x410 [ 146.684759][T10021] ? __fget_files+0x20e/0x3c0 [ 146.684774][T10021] security_file_ioctl+0x9b/0x240 [ 146.684789][T10021] __x64_sys_ioctl+0xb7/0x210 [ 146.684807][T10021] do_syscall_64+0xcd/0x4c0 [ 146.684823][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.684834][T10021] RIP: 0033:0x7fe2dff8ebe9 [ 146.684843][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.684854][T10021] RSP: 002b:00007fe2e0de3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.684869][T10021] RAX: ffffffffffffffda RBX: 00007fe2e01b5fa0 RCX: 00007fe2dff8ebe9 [ 146.684888][T10021] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 146.684896][T10021] RBP: 00007fe2e0de3090 R08: 0000000000000000 R09: 0000000000000000 [ 146.684902][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.684909][T10021] R13: 00007fe2e01b6038 R14: 00007fe2e01b5fa0 R15: 00007fff0222a988 [ 146.684922][T10021] [ 146.752108][ C3] vkms_vblank_simulate: vblank timer overrun [ 146.758522][T10021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.761757][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1420'. [ 146.945943][T10035] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.1423' resets device [ 147.135028][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.215001][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 147.269096][T10050] fuse: Bad value for 'fd' [ 147.384960][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 147.388679][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 147.391905][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.395662][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.399291][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.400576][T10058] random: crng reseeded on system resumption [ 147.402913][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.402956][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.409844][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.620582][ T9] usb 9-1: usb_control_msg returned -32 [ 147.622485][ T9] usbtmc 9-1:16.0: can't read capabilities [ 147.628140][ T9] usb 9-1: USB disconnect, device number 5 [ 148.169486][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 148.169504][ T40] audit: type=1400 audit(1754546149.690:1587): avc: denied { mount } for pid=10072 comm="syz.0.1437" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 148.181486][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.186591][ T40] audit: type=1400 audit(1754546149.690:1588): avc: denied { search } for pid=10072 comm="syz.0.1437" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.193832][T10076] FAULT_INJECTION: forcing a failure. [ 148.193832][T10076] name failslab, interval 1, probability 0, space 0, times 0 [ 148.198020][ T40] audit: type=1400 audit(1754546149.690:1589): avc: denied { search } for pid=10072 comm="syz.0.1437" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.200259][T10076] CPU: 1 UID: 0 PID: 10076 Comm: syz.3.1438 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 148.200277][T10076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.200283][T10076] Call Trace: [ 148.200287][T10076] [ 148.200293][T10076] dump_stack_lvl+0x16c/0x1f0 [ 148.200314][T10076] should_fail_ex+0x512/0x640 [ 148.200327][T10076] should_failslab+0xc2/0x120 [ 148.200340][T10076] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 148.200352][T10076] ? __alloc_skb+0x2b2/0x380 [ 148.200369][T10076] __alloc_skb+0x2b2/0x380 [ 148.200384][T10076] ? __pfx___alloc_skb+0x10/0x10 [ 148.200403][T10076] __netdev_alloc_skb+0x213/0x920 [ 148.200420][T10076] ieee80211_mgmt_tx+0x2a2/0x2310 [ 148.200441][T10076] cfg80211_mlme_mgmt_tx+0x7e8/0x1690 [ 148.200458][T10076] nl80211_tx_mgmt+0x804/0xd60 [ 148.200472][T10076] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 148.200493][T10076] ? nl80211_pre_doit+0x1b0/0xb10 [ 148.200508][T10076] genl_family_rcv_msg_doit+0x206/0x2f0 [ 148.200521][T10076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.200538][T10076] ? bpf_lsm_capable+0x9/0x10 [ 148.200553][T10076] ? security_capable+0x7e/0x260 [ 148.200564][T10076] ? ns_capable+0xd7/0x110 [ 148.200579][T10076] genl_rcv_msg+0x55c/0x800 [ 148.200592][T10076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.200603][T10076] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 148.200616][T10076] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 148.200627][T10076] ? __pfx_nl80211_post_doit+0x10/0x10 [ 148.200642][T10076] netlink_rcv_skb+0x155/0x420 [ 148.200659][T10076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.200671][T10076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.200699][T10076] ? netlink_deliver_tap+0x1ae/0xd30 [ 148.200717][T10076] genl_rcv+0x28/0x40 [ 148.200726][T10076] netlink_unicast+0x5aa/0x870 [ 148.200744][T10076] ? __pfx_netlink_unicast+0x10/0x10 [ 148.200761][T10076] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 148.200782][T10076] netlink_sendmsg+0x8d1/0xdd0 [ 148.200800][T10076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.200822][T10076] ____sys_sendmsg+0xa95/0xc70 [ 148.200835][T10076] ? copy_msghdr_from_user+0x10a/0x160 [ 148.200850][T10076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.200868][T10076] ___sys_sendmsg+0x134/0x1d0 [ 148.200884][T10076] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.200912][T10076] ? __mutex_unlock_slowpath+0x100/0x800 [ 148.200932][T10076] __sys_sendmsg+0x16d/0x220 [ 148.200948][T10076] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.200973][T10076] do_syscall_64+0xcd/0x4c0 [ 148.200983][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.200995][T10076] RIP: 0033:0x7f4bd2b8ebe9 [ 148.201005][T10076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.201015][T10076] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.201026][T10076] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 148.201032][T10076] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 148.201039][T10076] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.201045][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.201051][T10076] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 148.201064][T10076] [ 148.311744][ T40] audit: type=1400 audit(1754546149.690:1590): avc: denied { read open } for pid=10072 comm="syz.0.1437" path="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.320839][ T40] audit: type=1400 audit(1754546149.690:1591): avc: denied { search } for pid=10072 comm="syz.0.1437" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.327785][ T40] audit: type=1400 audit(1754546149.690:1592): avc: denied { search } for pid=10072 comm="syz.0.1437" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.334752][ T40] audit: type=1400 audit(1754546149.690:1593): avc: denied { search } for pid=10072 comm="syz.0.1437" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.391607][T10096] IPVS: Error connecting to the multicast addr [ 148.402695][T10094] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1444'. [ 148.424217][T10102] FAULT_INJECTION: forcing a failure. [ 148.424217][T10102] name failslab, interval 1, probability 0, space 0, times 0 [ 148.429836][T10102] CPU: 3 UID: 0 PID: 10102 Comm: syz.1.1447 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 148.429852][T10102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.429860][T10102] Call Trace: [ 148.429863][T10102] [ 148.429868][T10102] dump_stack_lvl+0x16c/0x1f0 [ 148.429889][T10102] should_fail_ex+0x512/0x640 [ 148.429899][T10102] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 148.429919][T10102] should_failslab+0xc2/0x120 [ 148.429931][T10102] __kmalloc_cache_noprof+0x6a/0x3e0 [ 148.429948][T10102] ? ieee802154_nl_fill_phy.constprop.0+0xa4/0x5e0 [ 148.429968][T10102] ieee802154_nl_fill_phy.constprop.0+0xa4/0x5e0 [ 148.429987][T10102] ? __pfx_ieee802154_nl_fill_phy.constprop.0+0x10/0x10 [ 148.430003][T10102] ? __nla_parse+0x40/0x60 [ 148.430019][T10102] ieee802154_list_phy+0x16e/0x310 [ 148.430035][T10102] genl_family_rcv_msg_doit+0x206/0x2f0 [ 148.430049][T10102] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.430060][T10102] ? genl_get_cmd+0x194/0x580 [ 148.430074][T10102] ? netlink_alloc_large_skb+0x69/0x130 [ 148.430090][T10102] ? netlink_sendmsg+0x6a1/0xdd0 [ 148.430105][T10102] ? __radix_tree_lookup+0x21f/0x2c0 [ 148.430123][T10102] genl_rcv_msg+0x55c/0x800 [ 148.430135][T10102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.430147][T10102] ? __pfx_ieee802154_list_phy+0x10/0x10 [ 148.430164][T10102] ? __lock_acquire+0x62e/0x1ce0 [ 148.430184][T10102] netlink_rcv_skb+0x155/0x420 [ 148.430200][T10102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.430212][T10102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.430234][T10102] ? netlink_deliver_tap+0x1ae/0xd30 [ 148.430249][T10102] ? selinux_netlink_send+0x578/0x830 [ 148.430261][T10102] ? is_vmalloc_addr+0x86/0xa0 [ 148.430273][T10102] genl_rcv+0x28/0x40 [ 148.430283][T10102] netlink_unicast+0x5aa/0x870 [ 148.430301][T10102] ? __pfx_netlink_unicast+0x10/0x10 [ 148.430318][T10102] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 148.430338][T10102] netlink_sendmsg+0x8d1/0xdd0 [ 148.430357][T10102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.430379][T10102] ____sys_sendmsg+0xa95/0xc70 [ 148.430392][T10102] ? copy_msghdr_from_user+0x10a/0x160 [ 148.430411][T10102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.430429][T10102] ___sys_sendmsg+0x134/0x1d0 [ 148.430445][T10102] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.430472][T10102] ? __mutex_unlock_slowpath+0x100/0x800 [ 148.430493][T10102] __sys_sendmsg+0x16d/0x220 [ 148.430509][T10102] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.430533][T10102] do_syscall_64+0xcd/0x4c0 [ 148.430543][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.430554][T10102] RIP: 0033:0x7f736ab8ebe9 [ 148.430565][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.430576][T10102] RSP: 002b:00007f736b981038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.430586][T10102] RAX: ffffffffffffffda RBX: 00007f736adb5fa0 RCX: 00007f736ab8ebe9 [ 148.430593][T10102] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 148.430599][T10102] RBP: 00007f736b981090 R08: 0000000000000000 R09: 0000000000000000 [ 148.430606][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.430612][T10102] R13: 00007f736adb6038 R14: 00007f736adb5fa0 R15: 00007ffe1dece448 [ 148.430626][T10102] [ 148.540424][ C3] vkms_vblank_simulate: vblank timer overrun [ 148.760713][T10116] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 148.843532][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 148.898035][ T40] audit: type=1400 audit(1754546150.420:1594): avc: denied { shutdown } for pid=10125 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.904179][ T40] audit: type=1400 audit(1754546150.420:1595): avc: denied { shutdown } for pid=10125 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.117231][ T6259] libceph: connect (1)[c::]:6789 error -22 [ 149.120098][ T6259] libceph: mon0 (1)[c::]:6789 connect error [ 149.125432][ T6259] libceph: connect (1)[c::]:6789 error -22 [ 149.127434][ T6259] libceph: mon0 (1)[c::]:6789 connect error [ 149.145261][ T6034] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 149.215039][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.295499][ T6034] usb 9-1: device descriptor read/64, error -71 [ 149.397717][ T6259] libceph: connect (1)[c::]:6789 error -22 [ 149.399733][ T6259] libceph: mon0 (1)[c::]:6789 connect error [ 149.421509][T10139] 9pnet: Unknown protocol version 9 [ 149.453566][T10142] tipc: Enabled bearer , priority 0 [ 149.457298][T10142] syzkaller0: entered promiscuous mode [ 149.459178][T10142] syzkaller0: entered allmulticast mode [ 149.463269][T10142] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.473142][T10142] syzkaller0: MTU too low for tipc bearer [ 149.475454][T10142] tipc: Disabling bearer [ 149.513226][T10145] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 149.517453][T10145] syzkaller0: entered promiscuous mode [ 149.519318][T10145] syzkaller0: entered allmulticast mode [ 149.523198][T10145] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.532265][T10145] FAULT_INJECTION: forcing a failure. [ 149.532265][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 149.535404][ T6034] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 149.536598][T10145] CPU: 3 UID: 0 PID: 10145 Comm: syz.3.1463 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 149.536616][T10145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.536623][T10145] Call Trace: [ 149.536628][T10145] [ 149.536633][T10145] dump_stack_lvl+0x16c/0x1f0 [ 149.536654][T10145] should_fail_ex+0x512/0x640 [ 149.536667][T10145] ? nsim_fib_event_nb+0x45e/0x10d0 [ 149.536681][T10145] should_failslab+0xc2/0x120 [ 149.536695][T10145] __kmalloc_noprof+0xd2/0x510 [ 149.536710][T10145] nsim_fib_event_nb+0x45e/0x10d0 [ 149.536725][T10145] ? lock_acquire+0x179/0x350 [ 149.536744][T10145] notifier_call_chain+0xbc/0x410 [ 149.536760][T10145] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 149.536777][T10145] atomic_notifier_call_chain+0x71/0x1c0 [ 149.536795][T10145] call_fib_notifiers+0x33/0x70 [ 149.536813][T10145] fib6_del+0xebe/0x1770 [ 149.536830][T10145] ? __pfx_fib6_del+0x10/0x10 [ 149.536844][T10145] ? fib6_ifdown+0xcd/0x8f0 [ 149.536860][T10145] fib6_clean_node+0x424/0x5b0 [ 149.536874][T10145] ? __pfx_fib6_clean_node+0x10/0x10 [ 149.536892][T10145] fib6_walk_continue+0x452/0x8d0 [ 149.536905][T10145] fib6_walk+0x182/0x370 [ 149.536917][T10145] ? __pfx_fib6_ifdown+0x10/0x10 [ 149.536928][T10145] fib6_clean_tree+0xd4/0x110 [ 149.536939][T10145] ? __pfx_fib6_clean_tree+0x10/0x10 [ 149.536953][T10145] ? __pfx_fib6_clean_node+0x10/0x10 [ 149.536966][T10145] ? __pfx_fib6_ifdown+0x10/0x10 [ 149.536982][T10145] ? __pfx_fib6_ifdown+0x10/0x10 [ 149.536994][T10145] __fib6_clean_all+0x107/0x2d0 [ 149.537008][T10145] rt6_disable_ip+0x2ec/0x990 [ 149.537026][T10145] ? __pfx___mutex_trylock_common+0x10/0x10 [ 149.537045][T10145] ? __pfx_rt6_disable_ip+0x10/0x10 [ 149.537062][T10145] ? trace_contention_end+0xdd/0x130 [ 149.537072][T10145] ? find_held_lock+0x2b/0x80 [ 149.537086][T10145] addrconf_ifdown.isra.0+0x11d/0x1aa0 [ 149.537105][T10145] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 149.537123][T10145] addrconf_notify+0x89a/0x19e0 [ 149.537138][T10145] ? ip6mr_device_event+0x1bc/0x230 [ 149.537157][T10145] notifier_call_chain+0xbc/0x410 [ 149.537172][T10145] ? __pfx_addrconf_notify+0x10/0x10 [ 149.537190][T10145] call_netdevice_notifiers_info+0xbe/0x140 [ 149.537203][T10145] netif_set_mtu_ext+0x590/0x7d0 [ 149.537220][T10145] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 149.537235][T10145] ? __lock_acquire+0xb97/0x1ce0 [ 149.537258][T10145] netif_set_mtu+0x98/0x140 [ 149.537273][T10145] ? __pfx_netif_set_mtu+0x10/0x10 [ 149.537294][T10145] ? full_name_hash+0xbc/0x110 [ 149.537310][T10145] dev_set_mtu+0xb2/0x260 [ 149.537322][T10145] dev_ifsioc+0xd28/0x1f70 [ 149.537338][T10145] ? __pfx_dev_ifsioc+0x10/0x10 [ 149.537358][T10145] ? __pfx___mutex_lock+0x10/0x10 [ 149.537380][T10145] ? dev_load+0x8e/0x240 [ 149.537396][T10145] dev_ioctl+0x223/0x10e0 [ 149.537412][T10145] sock_do_ioctl+0x19d/0x280 [ 149.537425][T10145] ? __pfx_sock_do_ioctl+0x10/0x10 [ 149.537440][T10145] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 149.537457][T10145] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 149.537475][T10145] sock_ioctl+0x227/0x6b0 [ 149.537487][T10145] ? __pfx_sock_ioctl+0x10/0x10 [ 149.537498][T10145] ? hook_file_ioctl_common+0x145/0x410 [ 149.537518][T10145] ? selinux_file_ioctl+0x180/0x270 [ 149.537531][T10145] ? selinux_file_ioctl+0xb4/0x270 [ 149.537545][T10145] ? __pfx_sock_ioctl+0x10/0x10 [ 149.537557][T10145] __x64_sys_ioctl+0x18e/0x210 [ 149.537574][T10145] do_syscall_64+0xcd/0x4c0 [ 149.537585][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.537596][T10145] RIP: 0033:0x7f4bd2b8ebe9 [ 149.537605][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.537616][T10145] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.537627][T10145] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 149.537634][T10145] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 149.537640][T10145] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.537646][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.537653][T10145] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 149.537665][T10145] [ 149.625674][ T40] audit: type=1400 audit(1754546151.150:1596): avc: denied { create } for pid=10148 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.695073][ T5330] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 149.756633][ T6034] usb 9-1: device descriptor read/64, error -71 [ 149.801328][T10155] FAULT_INJECTION: forcing a failure. [ 149.801328][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.806438][T10155] CPU: 2 UID: 0 PID: 10155 Comm: syz.3.1467 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 149.806466][T10155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.806493][T10155] Call Trace: [ 149.806500][T10155] [ 149.806507][T10155] dump_stack_lvl+0x16c/0x1f0 [ 149.806543][T10155] should_fail_ex+0x512/0x640 [ 149.806565][T10155] _copy_to_user+0x32/0xd0 [ 149.806588][T10155] simple_read_from_buffer+0xcb/0x170 [ 149.806610][T10155] proc_fail_nth_read+0x197/0x240 [ 149.806632][T10155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.806654][T10155] ? rw_verify_area+0xcf/0x6c0 [ 149.806681][T10155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.806701][T10155] vfs_read+0x1e1/0xc60 [ 149.806722][T10155] ? __pfx___mutex_lock+0x10/0x10 [ 149.806749][T10155] ? __pfx_vfs_read+0x10/0x10 [ 149.806774][T10155] ? __fget_files+0x20e/0x3c0 [ 149.806801][T10155] ksys_read+0x12a/0x250 [ 149.806819][T10155] ? __pfx_ksys_read+0x10/0x10 [ 149.806836][T10155] ? fput+0x9b/0xd0 [ 149.806861][T10155] do_syscall_64+0xcd/0x4c0 [ 149.806878][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.806895][T10155] RIP: 0033:0x7f4bd2b8d5fc [ 149.806906][T10155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.806917][T10155] RSP: 002b:00007f4bd0df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.806929][T10155] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8d5fc [ 149.806936][T10155] RDX: 000000000000000f RSI: 00007f4bd0df60a0 RDI: 0000000000000005 [ 149.806943][T10155] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.806949][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.806956][T10155] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 149.806970][T10155] [ 149.865418][ T6034] usb usb9-port1: attempt power cycle [ 149.882009][T10157] overlay: Bad value for 'workdir' [ 149.885297][T10157] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 149.905369][ T6259] libceph: connect (1)[c::]:6789 error -22 [ 149.907394][ T6259] libceph: mon0 (1)[c::]:6789 connect error [ 149.976052][T10129] ceph: No mds server is up or the cluster is laggy [ 150.071240][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 150.075915][T10162] warn_alloc: 1 callbacks suppressed [ 150.075926][T10162] syz.3.1470: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 150.082333][T10162] CPU: 0 UID: 0 PID: 10162 Comm: syz.3.1470 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 150.082351][T10162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.082360][T10162] Call Trace: [ 150.082365][T10162] [ 150.082371][T10162] dump_stack_lvl+0x16c/0x1f0 [ 150.082394][T10162] warn_alloc+0x248/0x3a0 [ 150.082408][T10162] ? __pfx_warn_alloc+0x10/0x10 [ 150.082420][T10162] ? __pfx_stack_trace_save+0x10/0x10 [ 150.082448][T10162] ? kasan_save_stack+0x42/0x60 [ 150.082461][T10162] ? kasan_save_stack+0x33/0x60 [ 150.082471][T10162] ? kasan_save_track+0x14/0x30 [ 150.082481][T10162] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 150.082494][T10162] ? __vb2_queue_alloc+0x8c9/0x1280 [ 150.082505][T10162] ? vb2_core_create_bufs+0x559/0xab0 [ 150.082519][T10162] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.082532][T10162] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 150.082557][T10162] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.082573][T10162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.082594][T10162] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.082607][T10162] vmalloc_user_noprof+0x9e/0xe0 [ 150.082623][T10162] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 150.082636][T10162] vb2_vmalloc_alloc+0x135/0x3f0 [ 150.082650][T10162] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 150.082663][T10162] __vb2_queue_alloc+0x8c9/0x1280 [ 150.082681][T10162] vb2_core_create_bufs+0x559/0xab0 [ 150.082696][T10162] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 150.082712][T10162] ? __mutex_trylock_common+0xe9/0x250 [ 150.082733][T10162] vb2_create_bufs+0x5e8/0x840 [ 150.082753][T10162] ? __pfx_vb2_create_bufs+0x10/0x10 [ 150.082770][T10162] ? v4l_sanitize_colorspace+0x213/0x400 [ 150.082790][T10162] vb2_ioctl_create_bufs+0x244/0x3e0 [ 150.082801][T10162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.082816][T10162] vidioc_create_bufs+0x7d/0xf0 [ 150.082834][T10162] v4l_create_bufs+0x156/0x270 [ 150.082849][T10162] __video_do_ioctl+0xb40/0xfc0 [ 150.082867][T10162] ? __might_fault+0xe3/0x190 [ 150.082878][T10162] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.082898][T10162] video_usercopy+0x4d0/0x1720 [ 150.082915][T10162] ? __pfx___video_do_ioctl+0x10/0x10 [ 150.082930][T10162] ? selinux_kernel_read_file+0xc0/0x130 [ 150.082946][T10162] ? __pfx_video_usercopy+0x10/0x10 [ 150.082971][T10162] v4l2_ioctl+0x1bd/0x250 [ 150.082987][T10162] ? __pfx_v4l2_ioctl+0x10/0x10 [ 150.083002][T10162] __x64_sys_ioctl+0x18e/0x210 [ 150.083022][T10162] do_syscall_64+0xcd/0x4c0 [ 150.083034][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.083046][T10162] RIP: 0033:0x7f4bd2b8ebe9 [ 150.083057][T10162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.083069][T10162] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.083081][T10162] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 150.083088][T10162] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000009 [ 150.083094][T10162] RBP: 00007f4bd2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 150.083100][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.083107][T10162] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 150.083122][T10162] [ 150.083127][T10162] Mem-Info: [ 150.189565][T10162] active_anon:19463 inactive_anon:0 isolated_anon:0 [ 150.189565][T10162] active_file:7768 inactive_file:51016 isolated_file:0 [ 150.189565][T10162] unevictable:1768 dirty:1250 writeback:0 [ 150.189565][T10162] slab_reclaimable:8750 slab_unreclaimable:71334 [ 150.189565][T10162] mapped:28013 shmem:11687 pagetables:1385 [ 150.189565][T10162] sec_pagetables:315 bounce:0 [ 150.189565][T10162] kernel_misc_reclaimable:0 [ 150.189565][T10162] free:439974 free_pcp:16630 free_cma:0 [ 150.204304][T10162] Node 0 active_anon:77852kB inactive_anon:0kB active_file:31072kB inactive_file:203860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:112052kB dirty:5000kB writeback:0kB shmem:43212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13648kB pagetables:5364kB sec_pagetables:1260kB all_unreclaimable? no Balloon:0kB [ 150.214539][T10162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.224827][T10162] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.225146][ T6034] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 150.234186][T10162] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 150.238559][T10162] Node 0 DMA32 free:158996kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77852kB inactive_anon:0kB active_file:31072kB inactive_file:203860kB unevictable:3536kB writepending:5000kB present:2080628kB managed:1263552kB mlocked:0kB bounce:0kB free_pcp:37028kB local_pcp:7440kB free_cma:0kB [ 150.248769][T10162] lowmem_reserve[]: 0 0 0 0 0 [ 150.252186][T10162] Node 1 Normal free:1585540kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:29652kB local_pcp:9632kB free_cma:0kB [ 150.255019][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.262440][T10162] lowmem_reserve[]: [ 150.262802][ T6034] usb 9-1: device descriptor read/8, error -71 [ 150.268111][T10162] 0 0 0 0 0 [ 150.269290][T10162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.273453][T10162] Node 0 DMA32: 507*4kB (UME) 131*8kB (ME) 247*16kB (UME) 261*32kB (UME) 179*64kB (UME) 84*128kB (UME) 58*256kB (UME) 24*512kB (UE) 30*1024kB (UME) 19*2048kB (UM) 6*4096kB (UM) = 158932kB [ 150.279513][T10162] Node 1 Normal: 7*4kB (ME) 9*8kB (UME) 16*16kB (UME) 17*32kB (UME) 12*64kB (UME) 12*128kB (UME) 3*256kB (UM) 3*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 384*4096kB (M) = 1585540kB [ 150.285138][T10162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.288175][T10162] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 150.291214][T10162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.294147][T10162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.297233][T10162] 70468 total pagecache pages [ 150.298729][T10162] 0 pages in swap cache [ 150.300065][T10162] Free swap = 124996kB [ 150.301657][T10162] Total swap = 124996kB [ 150.303008][T10162] 1048443 pages RAM [ 150.304250][T10162] 0 pages HighMem/MovableOnly [ 150.305853][T10162] 283242 pages reserved [ 150.307200][T10162] 0 pages cma reserved [ 150.495096][ T6034] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 150.515438][ T6034] usb 9-1: device descriptor read/8, error -71 [ 150.636295][ T6034] usb usb9-port1: unable to enumerate USB device [ 150.947937][T10186] netlink: 'syz.0.1479': attribute type 2 has an invalid length. [ 150.950476][T10186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1479'. [ 150.954554][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 150.957170][T10191] comedi comedi4: bad chanlist[0]=0x00000543 chan=1347 range length=2 [ 150.957657][T10186] chnl_net:caif_netlink_parms(): no params data found [ 151.063295][T10201] FAULT_INJECTION: forcing a failure. [ 151.063295][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 151.068842][T10201] CPU: 2 UID: 0 PID: 10201 Comm: syz.1.1484 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 151.068860][T10201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.068867][T10201] Call Trace: [ 151.068871][T10201] [ 151.068876][T10201] dump_stack_lvl+0x16c/0x1f0 [ 151.068897][T10201] should_fail_ex+0x512/0x640 [ 151.068908][T10201] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 151.068922][T10201] should_failslab+0xc2/0x120 [ 151.068935][T10201] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 151.068946][T10201] ? __alloc_skb+0x2b2/0x380 [ 151.068963][T10201] __alloc_skb+0x2b2/0x380 [ 151.068978][T10201] ? __pfx___alloc_skb+0x10/0x10 [ 151.068992][T10201] ? __pfx___mutex_trylock_common+0x10/0x10 [ 151.069011][T10201] ? __pfx___might_resched+0x10/0x10 [ 151.069028][T10201] netlink_dump+0x19b/0xd30 [ 151.069046][T10201] ? __pfx_netlink_dump+0x10/0x10 [ 151.069072][T10201] __netlink_dump_start+0x6d6/0x990 [ 151.069089][T10201] ? __pfx_tc_dump_tclass+0x10/0x10 [ 151.069101][T10201] rtnetlink_rcv_msg+0xb3e/0xe90 [ 151.069118][T10201] ? __pfx_tc_dump_tclass+0x10/0x10 [ 151.069130][T10201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.069146][T10201] ? __pfx_rtnl_dumpit+0x10/0x10 [ 151.069158][T10201] ? __pfx_tc_dump_tclass+0x10/0x10 [ 151.069171][T10201] ? ref_tracker_free+0x37c/0x830 [ 151.069184][T10201] netlink_rcv_skb+0x155/0x420 [ 151.069200][T10201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.069218][T10201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.069239][T10201] ? netlink_deliver_tap+0x1ae/0xd30 [ 151.069257][T10201] netlink_unicast+0x5aa/0x870 [ 151.069276][T10201] ? __pfx_netlink_unicast+0x10/0x10 [ 151.069292][T10201] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 151.069313][T10201] netlink_sendmsg+0x8d1/0xdd0 [ 151.069332][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.069354][T10201] ____sys_sendmsg+0xa95/0xc70 [ 151.069367][T10201] ? copy_msghdr_from_user+0x10a/0x160 [ 151.069382][T10201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.069400][T10201] ___sys_sendmsg+0x134/0x1d0 [ 151.069417][T10201] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.069444][T10201] ? __mutex_unlock_slowpath+0x100/0x800 [ 151.069466][T10201] __sys_sendmsg+0x16d/0x220 [ 151.069481][T10201] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.069506][T10201] do_syscall_64+0xcd/0x4c0 [ 151.069516][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.069528][T10201] RIP: 0033:0x7f736ab8ebe9 [ 151.069538][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.069549][T10201] RSP: 002b:00007f736b981038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.069560][T10201] RAX: ffffffffffffffda RBX: 00007f736adb5fa0 RCX: 00007f736ab8ebe9 [ 151.069566][T10201] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007 [ 151.069573][T10201] RBP: 00007f736b981090 R08: 0000000000000000 R09: 0000000000000000 [ 151.069579][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.069585][T10201] R13: 00007f736adb6038 R14: 00007f736adb5fa0 R15: 00007ffe1dece448 [ 151.069598][T10201] [ 151.295094][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.539453][T10212] syz.0.1487: attempt to access beyond end of device [ 151.539453][T10212] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 151.545022][T10212] hpfs: hpfs_map_sector(): read error [ 151.549587][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 151.775018][ T5330] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 151.928611][T10218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.052686][T10221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1490'. [ 152.181693][ T5972] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 152.185850][ T5972] Bluetooth: hci5: Injecting HCI hardware error event [ 152.190484][ T5972] Bluetooth: hci5: hardware error 0x00 [ 152.345018][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.380498][T10240] tipc: Resetting bearer [ 152.438330][T10248] FAULT_INJECTION: forcing a failure. [ 152.438330][T10248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.442729][T10248] CPU: 2 UID: 0 PID: 10248 Comm: syz.4.1498 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 152.442746][T10248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.442754][T10248] Call Trace: [ 152.442760][T10248] [ 152.442765][T10248] dump_stack_lvl+0x16c/0x1f0 [ 152.442787][T10248] should_fail_ex+0x512/0x640 [ 152.442799][T10248] strncpy_from_user+0x3b/0x2e0 [ 152.442817][T10248] getname_flags.part.0+0x8f/0x550 [ 152.442836][T10248] getname_flags+0x93/0xf0 [ 152.442847][T10248] user_path_at+0x24/0x60 [ 152.442859][T10248] __do_sys_pivot_root+0x242/0x1240 [ 152.442877][T10248] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.442896][T10248] ? __pfx___do_sys_pivot_root+0x10/0x10 [ 152.442915][T10248] ? __pfx_ksys_write+0x10/0x10 [ 152.442930][T10248] ? do_syscall_64+0xcd/0x4c0 [ 152.442939][T10248] do_syscall_64+0xcd/0x4c0 [ 152.442949][T10248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.442961][T10248] RIP: 0033:0x7fe2dff8ebe9 [ 152.442971][T10248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.442982][T10248] RSP: 002b:00007fe2e0dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 152.442993][T10248] RAX: ffffffffffffffda RBX: 00007fe2e01b6090 RCX: 00007fe2dff8ebe9 [ 152.443000][T10248] RDX: 0000000000000000 RSI: 00002000000043c0 RDI: 0000200000004380 [ 152.443006][T10248] RBP: 00007fe2e0dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 152.443012][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.443018][T10248] R13: 00007fe2e01b6128 R14: 00007fe2e01b6090 R15: 00007fff0222a988 [ 152.443031][T10248] [ 152.552107][T10254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10254 comm=syz.0.1503 [ 152.671959][T10256] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 153.178219][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 153.178231][ T40] audit: type=1400 audit(1754546154.700:1601): avc: denied { read } for pid=10266 comm="syz.3.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.385075][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.865120][ T5330] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 154.074374][ T40] audit: type=1400 audit(1754546155.590:1602): avc: denied { connect } for pid=10286 comm="syz.3.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.103391][T10289] FAULT_INJECTION: forcing a failure. [ 154.103391][T10289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.108205][T10289] CPU: 2 UID: 0 PID: 10289 Comm: syz.3.1517 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 154.108233][T10289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.108245][T10289] Call Trace: [ 154.108251][T10289] [ 154.108259][T10289] dump_stack_lvl+0x16c/0x1f0 [ 154.108290][T10289] should_fail_ex+0x512/0x640 [ 154.108313][T10289] _copy_from_user+0x2e/0xd0 [ 154.108331][T10289] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 154.108364][T10289] snd_rawmidi_write+0x26e/0xc10 [ 154.108396][T10289] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 154.108417][T10289] ? __import_iovec+0x1dd/0x650 [ 154.108434][T10289] ? avc_policy_seqno+0x9/0x20 [ 154.108459][T10289] ? selinux_file_permission+0x126/0x660 [ 154.108481][T10289] ? __pfx_default_wake_function+0x10/0x10 [ 154.108505][T10289] ? bpf_lsm_file_permission+0x9/0x10 [ 154.108528][T10289] ? security_file_permission+0x71/0x210 [ 154.108552][T10289] ? rw_verify_area+0xcf/0x6c0 [ 154.108582][T10289] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 154.108602][T10289] vfs_writev+0x5df/0xde0 [ 154.108625][T10289] ? __pfx_vfs_writev+0x10/0x10 [ 154.108642][T10289] ? find_held_lock+0x2b/0x80 [ 154.108679][T10289] ? __fget_files+0x20e/0x3c0 [ 154.108698][T10289] ? __fget_files+0x120/0x3c0 [ 154.108720][T10289] ? do_writev+0x28c/0x340 [ 154.108735][T10289] do_writev+0x28c/0x340 [ 154.108752][T10289] ? __pfx_do_writev+0x10/0x10 [ 154.108773][T10289] do_syscall_64+0xcd/0x4c0 [ 154.108793][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.108807][T10289] RIP: 0033:0x7f4bd2b8ebe9 [ 154.108823][T10289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.108840][T10289] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 154.108858][T10289] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 154.108867][T10289] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 154.108879][T10289] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.108890][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.108900][T10289] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 154.108923][T10289] [ 154.414954][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.417252][ T5972] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 154.485838][ T40] audit: type=1400 audit(1754546156.010:1603): avc: denied { setattr } for pid=10302 comm="syz.3.1523" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.585083][ T5972] Bluetooth: hci1: command 0xfc11 tx timeout [ 154.585290][ T5974] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 154.626555][ T40] audit: type=1400 audit(1754546156.150:1604): avc: denied { write } for pid=10306 comm="syz.3.1525" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.626609][T10308] random: crng reseeded on system resumption [ 154.819433][ T40] audit: type=1400 audit(1754546156.340:1605): avc: denied { watch } for pid=10316 comm="syz.0.1528" path="/389/file1" dev="autofs" ino=44975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 154.842574][T10319] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 154.852436][T10319] team0: Device ipvlan1 failed to register rx_handler [ 154.933072][T10333] 9pnet_fd: Insufficient options for proto=fd [ 154.993254][T10337] IPv6: Can't replace route, no match found [ 155.067676][T10341] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 155.134961][ T40] audit: type=1400 audit(1754546156.650:1606): avc: denied { accept } for pid=10344 comm="syz.3.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.377620][ T5972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.381904][ T5972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.386014][ T5972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.389285][ T5972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.392222][ T5972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.431307][T10359] (syz.4.1549,10359,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 155.435595][T10359] (syz.4.1549,10359,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 155.455114][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.497449][T10360] chnl_net:caif_netlink_parms(): no params data found [ 155.569043][T10370] geneve2: entered promiscuous mode [ 155.571288][T10370] geneve2: entered allmulticast mode [ 155.574164][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.577510][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.580204][T10360] bridge_slave_0: entered allmulticast mode [ 155.582983][T10360] bridge_slave_0: entered promiscuous mode [ 155.585884][ T6412] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.589142][ T6412] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.592190][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.594730][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.598199][T10360] bridge_slave_1: entered allmulticast mode [ 155.601462][T10360] bridge_slave_1: entered promiscuous mode [ 155.614863][ T40] audit: type=1326 audit(1754546157.130:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.4.1550" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2dff8ebe9 code=0x0 [ 155.626126][ T6412] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.629853][ T6412] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.650442][T10360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.657059][T10360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.691795][T10360] team0: Port device team_slave_0 added [ 155.696080][T10360] team0: Port device team_slave_1 added [ 155.731068][T10360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.733371][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.741513][T10360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.745859][T10360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.748057][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.756838][T10360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.797753][T10374] FAULT_INJECTION: forcing a failure. [ 155.797753][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.800832][T10360] hsr_slave_0: entered promiscuous mode [ 155.801972][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.4.1551 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 155.801989][T10374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.801996][T10374] Call Trace: [ 155.802001][T10374] [ 155.802006][T10374] dump_stack_lvl+0x16c/0x1f0 [ 155.802045][T10374] should_fail_ex+0x512/0x640 [ 155.802061][T10374] _copy_to_user+0x32/0xd0 [ 155.802075][T10374] simple_read_from_buffer+0xcb/0x170 [ 155.802089][T10374] proc_fail_nth_read+0x197/0x240 [ 155.802104][T10374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.802117][T10374] ? rw_verify_area+0xcf/0x6c0 [ 155.802133][T10374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.802146][T10374] vfs_read+0x1e1/0xc60 [ 155.802158][T10374] ? __pfx___mutex_lock+0x10/0x10 [ 155.802179][T10374] ? __pfx_vfs_read+0x10/0x10 [ 155.802193][T10374] ? __fget_files+0x20e/0x3c0 [ 155.802210][T10374] ksys_read+0x12a/0x250 [ 155.802220][T10374] ? __pfx_ksys_read+0x10/0x10 [ 155.802235][T10374] do_syscall_64+0xcd/0x4c0 [ 155.802246][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.802257][T10374] RIP: 0033:0x7fe2dff8d5fc [ 155.802267][T10374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.802279][T10374] RSP: 002b:00007fe2e0de3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.802289][T10374] RAX: ffffffffffffffda RBX: 00007fe2e01b5fa0 RCX: 00007fe2dff8d5fc [ 155.802296][T10374] RDX: 000000000000000f RSI: 00007fe2e0de30a0 RDI: 0000000000000004 [ 155.802303][T10374] RBP: 00007fe2e0de3090 R08: 0000000000000000 R09: 0000000000000000 [ 155.802309][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.802315][T10374] R13: 00007fe2e01b6038 R14: 00007fe2e01b5fa0 R15: 00007fff0222a988 [ 155.802329][T10374] [ 155.855945][T10360] hsr_slave_1: entered promiscuous mode [ 155.866354][T10360] debugfs: 'hsr0' already exists in 'hsr' [ 155.868207][T10360] Cannot create hsr debugfs directory [ 155.935236][ T5330] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 156.014148][T10360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.020693][T10360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.025012][T10360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.029550][T10360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.049343][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.051642][T10360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.054038][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.056462][T10360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.089406][T10360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.101489][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.105664][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.120402][T10360] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.124099][ T40] audit: type=1400 audit(1754546157.640:1608): avc: denied { relabelfrom } for pid=10394 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.131521][ T40] audit: type=1400 audit(1754546157.640:1609): avc: denied { relabelto } for pid=10394 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.133801][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.141040][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.144790][ T40] audit: type=1400 audit(1754546157.660:1610): avc: denied { attach_queue } for pid=10394 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.147807][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.154268][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.275202][T10360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.298401][T10401] syz.0.1558: attempt to access beyond end of device [ 156.298401][T10401] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 156.302489][T10401] EXT4-fs (nbd0): unable to read superblock [ 156.310489][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 156.409448][T10360] veth0_vlan: entered promiscuous mode [ 156.415299][T10360] veth1_vlan: entered promiscuous mode [ 156.431265][T10360] veth0_macvtap: entered promiscuous mode [ 156.436298][T10360] veth1_macvtap: entered promiscuous mode [ 156.446153][T10360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.453293][T10360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.459748][ T6432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.462703][ T6432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.466270][ T6432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.469405][ T6432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.495039][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.509427][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.511917][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.527652][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.530372][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.723419][T10419] block nbd5: not configured, cannot reconfigure [ 157.015271][T10437] FAULT_INJECTION: forcing a failure. [ 157.015271][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 157.019473][T10437] CPU: 3 UID: 0 PID: 10437 Comm: syz.3.1568 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 157.019496][T10437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.019506][T10437] Call Trace: [ 157.019515][T10437] [ 157.019523][T10437] dump_stack_lvl+0x16c/0x1f0 [ 157.019567][T10437] should_fail_ex+0x512/0x640 [ 157.019581][T10437] ? fs_reclaim_acquire+0xae/0x150 [ 157.019601][T10437] ? tomoyo_encode2+0x100/0x3e0 [ 157.019618][T10437] should_failslab+0xc2/0x120 [ 157.019635][T10437] __kmalloc_noprof+0xd2/0x510 [ 157.019649][T10437] ? d_absolute_path+0x136/0x1a0 [ 157.019672][T10437] tomoyo_encode2+0x100/0x3e0 [ 157.019692][T10437] tomoyo_encode+0x29/0x50 [ 157.019709][T10437] tomoyo_realpath_from_path+0x18f/0x6e0 [ 157.019732][T10437] tomoyo_path_number_perm+0x245/0x580 [ 157.019747][T10437] ? tomoyo_path_number_perm+0x237/0x580 [ 157.019764][T10437] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.019780][T10437] ? find_held_lock+0x2b/0x80 [ 157.019815][T10437] ? find_held_lock+0x2b/0x80 [ 157.019830][T10437] ? hook_file_ioctl_common+0x145/0x410 [ 157.019855][T10437] ? __fget_files+0x20e/0x3c0 [ 157.019874][T10437] security_file_ioctl+0x9b/0x240 [ 157.019892][T10437] __x64_sys_ioctl+0xb7/0x210 [ 157.019915][T10437] do_syscall_64+0xcd/0x4c0 [ 157.019929][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.019943][T10437] RIP: 0033:0x7f4bd2b8ebe9 [ 157.019956][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.019970][T10437] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.019984][T10437] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 157.019993][T10437] RDX: 0000200000000340 RSI: 00000000400454d9 RDI: 0000000000000003 [ 157.020001][T10437] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.020009][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.020017][T10437] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 157.020037][T10437] [ 157.020069][T10437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.203208][T10444] FAULT_INJECTION: forcing a failure. [ 157.203208][T10444] name failslab, interval 1, probability 0, space 0, times 0 [ 157.207739][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.3.1571 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 157.207755][T10444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.207763][T10444] Call Trace: [ 157.207767][T10444] [ 157.207772][T10444] dump_stack_lvl+0x16c/0x1f0 [ 157.207794][T10444] should_fail_ex+0x512/0x640 [ 157.207804][T10444] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 157.207818][T10444] should_failslab+0xc2/0x120 [ 157.207831][T10444] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 157.207846][T10444] ? shmem_alloc_inode+0x25/0x50 [ 157.207869][T10444] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 157.207886][T10444] shmem_alloc_inode+0x25/0x50 [ 157.207903][T10444] alloc_inode+0x64/0x240 [ 157.207924][T10444] new_inode+0x22/0x1c0 [ 157.207950][T10444] shmem_get_inode+0x19a/0xfb0 [ 157.207975][T10444] shmem_mknod+0x1a8/0x450 [ 157.208000][T10444] shmem_mkdir+0x31/0x80 [ 157.208023][T10444] vfs_mkdir+0x593/0x8c0 [ 157.208041][T10444] do_mkdirat+0x304/0x3e0 [ 157.208062][T10444] ? __pfx_do_mkdirat+0x10/0x10 [ 157.208080][T10444] ? getname_flags.part.0+0x1c5/0x550 [ 157.208102][T10444] __x64_sys_mkdirat+0x83/0xb0 [ 157.208115][T10444] do_syscall_64+0xcd/0x4c0 [ 157.208126][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.208137][T10444] RIP: 0033:0x7f4bd2b8ebe9 [ 157.208147][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.208158][T10444] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 157.208173][T10444] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 157.208184][T10444] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 157.208195][T10444] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.208206][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.208215][T10444] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 157.208239][T10444] [ 157.323276][T10450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1574'. [ 157.327683][T10450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1574'. [ 157.455187][ T5972] Bluetooth: hci1: command tx timeout [ 157.535092][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.910000][T10476] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1582'. [ 158.015315][ T5330] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 158.420025][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 158.428684][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 158.428696][ T40] audit: type=1400 audit(1754546159.950:1613): avc: denied { setattr } for pid=10506 comm="syz.3.1593" name="/" dev="configfs" ino=2151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.481930][ T40] audit: type=1400 audit(1754546160.000:1614): avc: denied { map } for pid=10508 comm="syz.4.1594" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 158.575236][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.099434][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1601'. [ 159.102642][T10529] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.265668][ T40] audit: type=1400 audit(1754546160.790:1615): avc: denied { unmount } for pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 159.464162][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 159.483274][ T40] audit: type=1400 audit(1754546161.000:1616): avc: denied { getattr } for pid=10555 comm="syz.3.1611" name="/" dev="9p" ino=35913941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 159.535396][ T5972] Bluetooth: hci1: command tx timeout [ 159.615261][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.687033][ T40] audit: type=1400 audit(1754546161.210:1617): avc: denied { connect } for pid=10566 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.095447][ T5330] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 160.395984][ T40] audit: type=1326 audit(1754546161.920:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.5.1625" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5758ebe9 code=0x0 [ 160.476969][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 160.487891][T10599] ip6gre1: entered allmulticast mode [ 160.655207][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.865134][T10610] tipc: Started in network mode [ 160.866970][T10610] tipc: Node identity cecad07913c8, cluster identity 4711 [ 160.869389][T10610] tipc: Enabled bearer , priority 0 [ 160.872159][T10610] syzkaller0: entered promiscuous mode [ 160.874009][T10610] syzkaller0: entered allmulticast mode [ 160.881418][T10610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 160.896189][T10610] tipc: Resetting bearer [ 160.900641][T10610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.907202][T10609] tipc: Resetting bearer [ 160.917282][T10609] tipc: Disabling bearer [ 161.285096][ T9] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 161.348667][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 161.457040][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.460456][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 161.464374][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.469026][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 161.475308][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.478213][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.480923][ T9] usb 9-1: Manufacturer: syz [ 161.483699][ T9] usb 9-1: config 0 descriptor?? [ 161.615460][ T5330] Bluetooth: hci1: command tx timeout [ 161.690540][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.695002][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.696900][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.701312][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.709401][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.713493][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.718267][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.723181][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.728555][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.732577][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.736031][ T9] rc_core: IR keymap rc-hauppauge not found [ 161.737421][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.739495][ T9] Registered IR keymap rc-empty [ 161.743406][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.765379][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.796247][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 161.801210][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input21 [ 161.807645][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.825842][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.845019][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.865050][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.885578][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.905002][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.925047][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.945057][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.965058][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 161.985125][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 162.006987][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 162.010701][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 162.340992][T10635] netlink: 'syz.3.1645': attribute type 1 has an invalid length. [ 162.343612][T10635] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 162.521864][T10641] program syz.3.1648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.735121][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.696585][ T5330] Bluetooth: hci1: command tx timeout [ 163.775106][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.066058][ T9] usb 9-1: USB disconnect, device number 10 [ 164.089894][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 164.098621][T10651] ip6gre1: entered allmulticast mode [ 164.795069][ T53] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 164.815184][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.951800][ T53] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.954552][ T53] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.958156][ T53] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.960982][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.964360][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.969726][ T53] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.972637][ T53] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.980337][ T53] usb 8-1: Product: syz [ 164.981813][ T53] usb 8-1: Manufacturer: syz [ 164.988911][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 164.990885][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 164.993730][ T53] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 164.996239][ T53] cdc_wdm 8-1:1.0: Unknown control protocol [ 165.191907][ T40] audit: type=1400 audit(1754546166.710:1619): avc: denied { read write } for pid=10654 comm="syz.3.1654" name="cdc-wdm0" dev="devtmpfs" ino=3021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 165.199519][ T40] audit: type=1400 audit(1754546166.710:1620): avc: denied { open } for pid=10654 comm="syz.3.1654" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 165.248141][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.250381][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.253342][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.255672][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.258067][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.260172][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.263410][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.265571][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.267731][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.269792][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.272255][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.274423][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.277329][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.279626][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.281776][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.283829][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.287056][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.289123][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.291259][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 165.293315][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 165.300193][ T53] usb 8-1: USB disconnect, device number 15 [ 165.302120][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 165.434307][T10662] FAULT_INJECTION: forcing a failure. [ 165.434307][T10662] name failslab, interval 1, probability 0, space 0, times 0 [ 165.441878][T10662] CPU: 0 UID: 0 PID: 10662 Comm: syz.3.1656 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 165.441896][T10662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.441904][T10662] Call Trace: [ 165.441908][T10662] [ 165.441913][T10662] dump_stack_lvl+0x16c/0x1f0 [ 165.441933][T10662] should_fail_ex+0x512/0x640 [ 165.441943][T10662] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 165.441957][T10662] should_failslab+0xc2/0x120 [ 165.441970][T10662] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 165.441980][T10662] ? __pfx_stack_trace_save+0x10/0x10 [ 165.441995][T10662] ? __kernfs_new_node+0xd2/0x8e0 [ 165.442012][T10662] __kernfs_new_node+0xd2/0x8e0 [ 165.442028][T10662] ? __pfx___kernfs_new_node+0x10/0x10 [ 165.442046][T10662] ? find_held_lock+0x2b/0x80 [ 165.442060][T10662] ? kernfs_root+0xee/0x2a0 [ 165.442077][T10662] kernfs_new_node+0x13c/0x1e0 [ 165.442096][T10662] kernfs_create_link+0xcc/0x240 [ 165.442111][T10662] sysfs_do_create_link_sd+0x90/0x140 [ 165.442126][T10662] sysfs_create_link+0x61/0xc0 [ 165.442140][T10662] device_add+0x50a/0x1aa0 [ 165.442153][T10662] ? lockdep_init_map_type+0x5c/0x280 [ 165.442163][T10662] ? __pfx_device_add+0x10/0x10 [ 165.442174][T10662] ? lockdep_init_map_type+0x5c/0x280 [ 165.442185][T10662] ? __init_waitqueue_head+0xca/0x150 [ 165.442201][T10662] tty_register_device_attr+0x38e/0x7c0 [ 165.442219][T10662] ? __pfx_tty_register_device_attr+0x10/0x10 [ 165.442241][T10662] rfcomm_dev_ioctl+0x16a0/0x1c90 [ 165.442254][T10662] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 165.442274][T10662] ? tomoyo_path_number_perm+0x18d/0x580 [ 165.442290][T10662] rfcomm_sock_ioctl+0xaa/0xd0 [ 165.442305][T10662] sock_do_ioctl+0x115/0x280 [ 165.442317][T10662] ? __pfx_sock_do_ioctl+0x10/0x10 [ 165.442332][T10662] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.442349][T10662] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.442367][T10662] sock_ioctl+0x227/0x6b0 [ 165.442379][T10662] ? __pfx_sock_ioctl+0x10/0x10 [ 165.442390][T10662] ? hook_file_ioctl_common+0x145/0x410 [ 165.442410][T10662] ? selinux_file_ioctl+0x180/0x270 [ 165.442423][T10662] ? selinux_file_ioctl+0xb4/0x270 [ 165.442437][T10662] ? __pfx_sock_ioctl+0x10/0x10 [ 165.442449][T10662] __x64_sys_ioctl+0x18e/0x210 [ 165.442466][T10662] do_syscall_64+0xcd/0x4c0 [ 165.442477][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.442488][T10662] RIP: 0033:0x7f4bd2b8ebe9 [ 165.442498][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.442508][T10662] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.442519][T10662] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 165.442526][T10662] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 165.442536][T10662] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.442543][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.442549][T10662] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 165.442562][T10662] [ 165.855053][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.802654][T10681] overlay: Unknown parameter 'workdirâqö%·“Èi^Z' [ 166.895086][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.899853][ T40] audit: type=1400 audit(1754546168.420:1621): avc: denied { mounton } for pid=10682 comm="syz.3.1665" path="/proc/1130/map_files" dev="proc" ino=48751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 167.935316][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.609511][ T40] audit: type=1804 audit(1754546170.130:1622): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1669" name="/newroot/461/file0" dev="tmpfs" ino=2497 res=1 errno=0 [ 168.610626][T10699] dlm: no locking on control device [ 168.625339][T10699] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1669'. [ 168.634985][ T40] audit: type=1800 audit(1754546170.130:1623): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1669" name="file0" dev="tmpfs" ino=2497 res=0 errno=0 [ 168.985046][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.668333][T10706] FAULT_INJECTION: forcing a failure. [ 169.668333][T10706] name failslab, interval 1, probability 0, space 0, times 0 [ 169.672312][T10706] CPU: 1 UID: 0 PID: 10706 Comm: syz.3.1672 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 169.672330][T10706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.672337][T10706] Call Trace: [ 169.672342][T10706] [ 169.672346][T10706] dump_stack_lvl+0x16c/0x1f0 [ 169.672367][T10706] should_fail_ex+0x512/0x640 [ 169.672377][T10706] ? __kmalloc_noprof+0xbf/0x510 [ 169.672390][T10706] ? drm_atomic_state_init+0x17b/0x320 [ 169.672403][T10706] should_failslab+0xc2/0x120 [ 169.672416][T10706] __kmalloc_noprof+0xd2/0x510 [ 169.672430][T10706] drm_atomic_state_init+0x17b/0x320 [ 169.672442][T10706] ? __kasan_kmalloc+0xaa/0xb0 [ 169.672454][T10706] drm_atomic_state_alloc+0xd3/0x120 [ 169.672468][T10706] drm_mode_atomic_ioctl+0x393/0x25f0 [ 169.672484][T10706] ? avc_has_extended_perms+0x33a/0x1090 [ 169.672503][T10706] ? avc_has_extended_perms+0x47c/0x1090 [ 169.672521][T10706] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 169.672535][T10706] ? __lock_acquire+0xb97/0x1ce0 [ 169.672561][T10706] ? drm_is_current_master+0x2c/0x40 [ 169.672575][T10706] ? do_raw_spin_unlock+0x172/0x230 [ 169.672589][T10706] drm_ioctl_kernel+0x1f4/0x3e0 [ 169.672600][T10706] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 169.672615][T10706] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 169.672630][T10706] drm_ioctl+0x5c9/0xc30 [ 169.672643][T10706] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 169.672658][T10706] ? __pfx_drm_ioctl+0x10/0x10 [ 169.672674][T10706] ? selinux_file_ioctl+0x180/0x270 [ 169.672687][T10706] ? selinux_file_ioctl+0xb4/0x270 [ 169.672701][T10706] ? __pfx_drm_ioctl+0x10/0x10 [ 169.672712][T10706] __x64_sys_ioctl+0x18e/0x210 [ 169.672730][T10706] do_syscall_64+0xcd/0x4c0 [ 169.672741][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.672752][T10706] RIP: 0033:0x7f4bd2b8ebe9 [ 169.672761][T10706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.672771][T10706] RSP: 002b:00007f4bd0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.672782][T10706] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8ebe9 [ 169.672789][T10706] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000e [ 169.672795][T10706] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.672802][T10706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.672808][T10706] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 169.672821][T10706] [ 170.015053][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.055232][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.105026][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.145021][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.980435][T10736] debugfs: 'ttyS3' already exists in 'caif_serial' [ 174.032779][T10738] netlink: 'syz.3.1683': attribute type 27 has an invalid length. [ 174.116106][T10738] tipc: Resetting bearer [ 174.175190][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.569188][ T6432] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.572471][ T6432] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.577186][ T6432] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.579917][ T6432] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.803748][T10741] usb usb8: usbfs: process 10741 (syz.3.1684) did not claim interface 0 before use [ 174.806945][T10741] FAULT_INJECTION: forcing a failure. [ 174.806945][T10741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.811028][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.3.1684 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 174.811045][T10741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.811052][T10741] Call Trace: [ 174.811057][T10741] [ 174.811061][T10741] dump_stack_lvl+0x16c/0x1f0 [ 174.811083][T10741] should_fail_ex+0x512/0x640 [ 174.811096][T10741] _copy_to_user+0x32/0xd0 [ 174.811109][T10741] simple_read_from_buffer+0xcb/0x170 [ 174.811122][T10741] proc_fail_nth_read+0x197/0x240 [ 174.811137][T10741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.811150][T10741] ? rw_verify_area+0xcf/0x6c0 [ 174.811167][T10741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.811179][T10741] vfs_read+0x1e1/0xc60 [ 174.811195][T10741] ? __pfx___mutex_lock+0x10/0x10 [ 174.811213][T10741] ? __pfx_vfs_read+0x10/0x10 [ 174.811227][T10741] ? __fget_files+0x20e/0x3c0 [ 174.811243][T10741] ksys_read+0x12a/0x250 [ 174.811253][T10741] ? __pfx_ksys_read+0x10/0x10 [ 174.811264][T10741] ? fput+0x9b/0xd0 [ 174.811280][T10741] do_syscall_64+0xcd/0x4c0 [ 174.811290][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.811302][T10741] RIP: 0033:0x7f4bd2b8d5fc [ 174.811312][T10741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.811323][T10741] RSP: 002b:00007f4bd0df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.811334][T10741] RAX: ffffffffffffffda RBX: 00007f4bd2db5fa0 RCX: 00007f4bd2b8d5fc [ 174.811341][T10741] RDX: 000000000000000f RSI: 00007f4bd0df60a0 RDI: 0000000000000004 [ 174.811347][T10741] RBP: 00007f4bd0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.811354][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.811360][T10741] R13: 00007f4bd2db6038 R14: 00007f4bd2db5fa0 R15: 00007fff36bf4ae8 [ 174.811373][T10741] [ 174.874793][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.225027][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.771767][T10749] usb usb8: usbfs: process 10749 (syz.3.1687) did not claim interface 0 before use [ 175.882673][ T5972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.887040][ T5972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.890262][ T5972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.894058][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.898122][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.037451][T10753] chnl_net:caif_netlink_parms(): no params data found [ 176.126498][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.128904][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.131192][T10753] bridge_slave_0: entered allmulticast mode [ 176.133817][T10753] bridge_slave_0: entered promiscuous mode [ 176.137374][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.139746][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.142038][T10753] bridge_slave_1: entered allmulticast mode [ 176.144663][T10753] bridge_slave_1: entered promiscuous mode [ 176.179067][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.183947][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.218088][T10753] team0: Port device team_slave_0 added [ 176.221349][T10753] team0: Port device team_slave_1 added [ 176.252472][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.254831][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.264470][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.265061][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.269949][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.274428][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.285113][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.326089][T10753] hsr_slave_0: entered promiscuous mode [ 176.328451][T10753] hsr_slave_1: entered promiscuous mode [ 176.330672][T10753] debugfs: 'hsr0' already exists in 'hsr' [ 176.332576][T10753] Cannot create hsr debugfs directory [ 176.475786][T10753] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.481865][T10753] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.487308][T10753] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.492176][T10753] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.507734][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.510567][T10753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.513577][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.516445][T10753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.547975][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.562213][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.568293][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.586694][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.598108][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.600634][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.609281][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.611713][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.618257][ T6432] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.718503][T10773] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1690'. [ 176.743538][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.841360][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.847034][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.856177][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.857670][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1692'. [ 176.861594][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.866311][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.931154][T10753] veth0_vlan: entered promiscuous mode [ 176.945447][T10753] veth1_vlan: entered promiscuous mode [ 177.011197][T10753] veth0_macvtap: entered promiscuous mode [ 177.016104][T10753] veth1_macvtap: entered promiscuous mode [ 177.025690][T10782] chnl_net:caif_netlink_parms(): no params data found [ 177.059543][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.072929][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.127237][ T6433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.131849][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.134376][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.137171][T10782] bridge_slave_0: entered allmulticast mode [ 177.140009][T10782] bridge_slave_0: entered promiscuous mode [ 177.143147][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.145902][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.148232][T10782] bridge_slave_1: entered allmulticast mode [ 177.151043][T10782] bridge_slave_1: entered promiscuous mode [ 177.153781][ T6433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.160659][ T6433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.193193][ T6433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.295054][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.498749][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.521964][ T6431] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.532419][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.571761][T10782] team0: Port device team_slave_0 added [ 177.575923][T10782] team0: Port device team_slave_1 added [ 177.614746][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.617293][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.626092][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.630517][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.633528][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.644108][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.669700][ T6431] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.717219][T10782] hsr_slave_0: entered promiscuous mode [ 177.719595][T10782] hsr_slave_1: entered promiscuous mode [ 177.721849][T10782] debugfs: 'hsr0' already exists in 'hsr' [ 177.723677][T10782] Cannot create hsr debugfs directory [ 177.726144][ T6412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.728626][ T6412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.780535][ T6431] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.810632][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.813328][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.863645][ T6431] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.937831][T10782] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 177.942410][T10782] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 177.945325][ T5972] Bluetooth: hci3: command tx timeout [ 177.951428][T10782] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 177.956864][T10782] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 177.973062][ T6034] ------------[ cut here ]------------ [ 177.975101][ T6034] refcount_t: underflow; use-after-free. [ 177.978616][ T6034] WARNING: CPU: 1 PID: 6034 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 177.982602][ T6034] Modules linked in: [ 177.986728][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: kworker/1:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 177.992064][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.996772][ T6034] Workqueue: md_misc mddev_delayed_delete SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.998784][ T6034] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 178.000134][ T40] audit: type=1400 audit(1754546179.520:1624): avc: denied { write } for pid=5882 comm="syz-executor" path="pipe:[5729]" dev="pipefs" ino=5729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 178.001556][ T6034] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 7c bf b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 57 bf b0 0b 31 [ 178.015642][ T6034] RSP: 0018:ffffc9000281fc10 EFLAGS: 00010286 [ 178.017603][ T6034] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 178.020336][ T6034] RDX: ffff88802d4a8000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 178.022960][ T6034] RBP: ffff888057e20130 R08: 0000000000000001 R09: 0000000000000000 [ 178.025653][ T6034] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057e20134 [ 178.028159][ T6034] R13: dffffc0000000000 R14: ffff888057e20130 R15: ffffc9000281fd10 [ 178.031730][ T6034] FS: 0000000000000000(0000) GS:ffff8880d67c4000(0000) knlGS:0000000000000000 [ 178.034675][ T6034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.037003][ T6034] CR2: 000000110c2fbdfe CR3: 000000003bcce000 CR4: 0000000000352ef0 [ 178.039575][ T6034] Call Trace: [ 178.040651][ T6034] [ 178.042001][ T6034] kobject_put+0x230/0x5a0 [ 178.043451][ T6034] process_one_work+0x9cc/0x1b70 [ 178.045396][ T6034] ? __pfx_process_one_work+0x10/0x10 [ 178.047133][ T6034] ? assign_work+0x1a0/0x250 [ 178.048623][ T6034] worker_thread+0x6c8/0xf10 [ 178.050099][ T6034] ? __kthread_parkme+0x19e/0x250 [ 178.051971][ T6034] ? __pfx_worker_thread+0x10/0x10 [ 178.053611][ T6034] kthread+0x3c5/0x780 [ 178.055260][ T6034] ? __pfx_kthread+0x10/0x10 [ 178.056819][ T6034] ? rcu_is_watching+0x12/0xc0 [ 178.058389][ T6034] ? __pfx_kthread+0x10/0x10 [ 178.059918][ T6034] ret_from_fork+0x5d4/0x6f0 [ 178.061420][ T6034] ? __pfx_kthread+0x10/0x10 [ 178.062941][ T6034] ret_from_fork_asm+0x1a/0x30 [ 178.064503][ T6034] [ 178.065603][ T6034] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.067943][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: kworker/1:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(full) [ 178.072001][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.075549][ T6034] Workqueue: md_misc mddev_delayed_delete [ 178.077459][ T6034] Call Trace: [ 178.078586][ T6034] [ 178.079586][ T6034] dump_stack_lvl+0x3d/0x1f0 [ 178.081134][ T6034] vpanic+0x6e8/0x7a0 [ 178.082477][ T6034] ? __pfx_vpanic+0x10/0x10 [ 178.084001][ T6034] ? refcount_warn_saturate+0x14a/0x210 [ 178.085845][ T6034] panic+0xca/0xd0 [ 178.087134][ T6034] ? __pfx_panic+0x10/0x10 [ 178.088617][ T6034] ? check_panic_on_warn+0x1f/0xb0 [ 178.090301][ T6034] check_panic_on_warn+0xab/0xb0 [ 178.091958][ T6034] __warn+0xf6/0x3c0 [ 178.093262][ T6034] ? preempt_schedule_notrace+0x62/0xe0 [ 178.095117][ T6034] ? refcount_warn_saturate+0x14a/0x210 [ 178.096963][ T6034] report_bug+0x3c3/0x580 [ 178.098404][ T6034] ? refcount_warn_saturate+0x14a/0x210 [ 178.100244][ T6034] handle_bug+0x184/0x210 [ 178.101680][ T6034] exc_invalid_op+0x17/0x50 [ 178.103196][ T6034] asm_exc_invalid_op+0x1a/0x20 [ 178.104834][ T6034] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 178.106865][ T6034] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 7c bf b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 57 bf b0 0b 31 [ 178.113116][ T6034] RSP: 0018:ffffc9000281fc10 EFLAGS: 00010286 [ 178.115096][ T6034] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 178.117736][ T6034] RDX: ffff88802d4a8000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 178.120362][ T6034] RBP: ffff888057e20130 R08: 0000000000000001 R09: 0000000000000000 [ 178.122835][ T6034] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057e20134 [ 178.125355][ T6034] R13: dffffc0000000000 R14: ffff888057e20130 R15: ffffc9000281fd10 [ 178.127875][ T6034] ? __warn_printk+0x198/0x350 [ 178.129410][ T6034] ? __warn_printk+0x1a5/0x350 [ 178.130945][ T6034] kobject_put+0x230/0x5a0 [ 178.132388][ T6034] process_one_work+0x9cc/0x1b70 [ 178.134134][ T6034] ? __pfx_process_one_work+0x10/0x10 [ 178.136061][ T6034] ? assign_work+0x1a0/0x250 [ 178.137585][ T6034] worker_thread+0x6c8/0xf10 [ 178.139098][ T6034] ? __kthread_parkme+0x19e/0x250 [ 178.140799][ T6034] ? __pfx_worker_thread+0x10/0x10 [ 178.142477][ T6034] kthread+0x3c5/0x780 [ 178.143808][ T6034] ? __pfx_kthread+0x10/0x10 [ 178.145324][ T6034] ? rcu_is_watching+0x12/0xc0 [ 178.146872][ T6034] ? __pfx_kthread+0x10/0x10 [ 178.148353][ T6034] ret_from_fork+0x5d4/0x6f0 [ 178.149821][ T6034] ? __pfx_kthread+0x10/0x10 [ 178.151302][ T6034] ret_from_fork_asm+0x1a/0x30 [ 178.152828][ T6034] [ 178.154362][ T6034] Kernel Offset: disabled [ 178.155922][ T6034] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:56:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffffff8e5c1160 RCX=000000006e375782 RDX=0000000000000000 RSI=0000000000000001 RDI=000000009fe9f5fa RBP=0000000000000002 RSP=ffffc90000007940 R8 =7b3fed768004c84b R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8197aa66 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555565b87500 ffffffff 00c00000 GS =0000 ffff8880d66c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555fe83808 CR3=0000000050fb3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff36bf4e70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff36bf4ff6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff36bf4ff6 00007fff36bf4ffc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd2c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd2c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd2c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd2c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd2c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bd2c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85636790 RDI=ffffffff9b106160 RBP=ffffffff9b106120 RSP=ffffc9000281f528 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3620c7e R15=dffffc0000000000 RIP=ffffffff856367b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2fbdfe CR3=000000003bcce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8922c236 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8922c236 00007ffd8922c23c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d4612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d4612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d4612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d4612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d4612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d4612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d47874a8 00007fa3d47874a0 00007fa3d4787498 00007fa3d4787470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d52ed100 00007fa3d4787460 00007fa3d4787478 00007fa3d47874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa3d47874b8 00007fa3d47874b0 00007fa3d47874a8 00007fa3d47874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff888024daa440 RCX=ffffffff81c378cf RDX=0000000000000000 RSI=0000000000000002 RDI=ffff888024daa440 RBP=0000000000000206 RSP=ffffc90006927be0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff90aafc97 R11=ffffffff9aff9278 R12=0000000000000001 R13=ffff88803877eb70 R14=dffffc0000000000 R15=1ffff92000d24f88 RIP=ffffffff8197a0dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558e316500 ffffffff 00c00000 GS =0000 ffff8880d68c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3d4574980 CR3=0000000047a0b000 CR4=00352ef0 DR0=0000000000000000 DR1=fffffffffffffffd DR2=fffffffffffffffd DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff02229c20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0222ae96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0222ae96 00007fff0222ae9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2e0012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2e0012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2e0012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2e0012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2e0012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2e0012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91459564 RDX=1ffffffff228b2ad RSI=0000000000000000 RDI=ffffffff90bf6ad0 RBP=ffffc90005a3f4c0 RSP=ffffc90005a3f408 R8 =ffffffff9145956a R9 =0000000000000000 R10=0000000000000000 R11=000000000000a6e0 R12=ffffc90005a3f4c8 R13=ffffc90005a3f478 R14=ffffc90005a3f4ad R15=ffffffff91459569 RIP=ffffffff816ae9bc RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556f6d7500 ffffffff 00c00000 GS =0000 ffff8880d69c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f629e4e35c0 CR3=0000000054440000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008208080 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe330bae80 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812e1b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812e13 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f629d812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f6d6c6e006e6f 6d6c6e0066766369 6e0030796d6d7564 00796d6d75640030 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6165740030646e 6f6200306e616376 0030656764697262 0030706174657267 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000