last executing test programs: 32.310920759s ago: executing program 0 (id=877): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="a7303d597be9230df42805ed41c14e1981608aadd840662fb17f7aef1c0f6fb158a5261fd43c8cb2d0771e913c652255fcdb10aedbffc071e70801db3d57666748a3cac3ec9f10d7345464c84894359ec634b8725ceea778b9c71902c174cae12ca462651e591996d3c90132484facd041bcd1e6"}, {&(0x7f0000000240)="d36f894dec0db454f905ce929bf1f32060566b499572a40d0ad37a7de2151337319a14837466becf1d065bb1c50b37ee6638c222eb4dec97f7950cf28be788a00c859e1877ff666295df0cdb17aad3d970034fdb46379684ef2dc049001813531d67a3a1e8f163f64cc440a3a3582bf6f38d61b43f8b70851516675a61165d476303fb7f037d2e3bcb98640dd29222b8b9d4ef545c67b8a03f4cace655f58e32a6d321711e0fa19c20f978e33b8114a2d9b7c552cb2f3f5171a0da5cdc518f13c6c234e7b431496c1f1204223dbcde75cbdc8013b2a7054f5af6d8b01e76637fe0e72c3779920ea352a1625932d5b19e"}, {&(0x7f0000000340)="369129f69ae693cf781481a9e1ae8c93076a0371f0f0fc4597c0c9c285dfe08e4506691c536a11adc6127d7b4884a6dd9c13acf794418a6144889eaca1d4a3d7a215710560f101e5d60afa7a75544b291a402b6ed01cbad90e87f2f0ada021a29a99faf11420890d45f85f58f16cc760714b240c2c6455d22b243ef43fe18ce78ee83a03610a5300602a6ba4b2c04032924cee2a467c53f5664ff5cce6a034b31a40a4119f8206e92f883d6bc2c38ae8ba01c4891cbeb44932894ed257b62c11b2c42d8fb31d52c2dba02fc67f52ebe2e814112ff2d7668b6906d29ae92f"}, {&(0x7f0000000440)="9e6f1f3d191d7fd8cf2334feb95059acc1f9da7af68b34312b0899707308ed1a783be02724b32b1032723ce0502129cd52a199a8f38cb9ef4c510e5cb126ab2444d025c6edcb0df373bf8a336ce8e26a835ecf839b0ddb71b2b28e537dd80aa6e4a7e1965a7642d4a17646245a9bbcd9638a3be78d96644af5641410491d4d5b6290d73e12d98cbf65fae3c31c296e8fa74e4eeb1aef1ca936ec7fb848d811f6e3f0"}, {&(0x7f0000000500)="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"}, {&(0x7f0000000600)="2e27b135045f267524a2db8473a061235c53edda4bc9b19825cefa08fb224d3c10c0e6d7ad56149da3494e09a2dcb598cd733d8535fa0ddae7240abb27308cd3db60324d83a42784b252fdc5accf1caa22893edc837ca6e8b633a6892e2f78be20d0d77ee6f93f45eb119ecb1398fea510e24c49ba32a0449aff326c2df2c0adb48fd7b4a079ba62a6799d9657ce10d4fad8f911f16c55473f38b9cdf454e378379758c567017bfe89062c84cb71d436ef68dbc594af"}, {&(0x7f00000006c0)="ce76cc566259cabd6ee44feea66a99bd8eed02a4b6afa5e9028186a67728c487c0191a6fe762cd01e7e733660bfd0625f09c0318ae344c5bcadafbf6e947026a88849b6d93484be40b145bebaa8616f2d4c8473dc6d83968e1b605b2dc6acc59cc8471dfe9e335c4d39a1235e6868afcb009e1969186973175d4f621cba370ff33208c1b7b6975fdc75601a25f689d823673f6d5174c360ac7e0eb965cb51d68a28414c48ba3d1eb5b0064"}, {&(0x7f0000000780)="03dc5e3dc8f195343e2b822ae26a695c5d252497c1a79cde7ff3e77825b5f980cb5e4105d9ebbbd5c1870fa6b37bb3e0e9543ec216dfd6cc5a1f977ae9d04b3a4eeb675c9545524a48ac04be11d21ba19d730e9d718e0a31c1b65282d9b2bf09d1a7787961a3d48dab35af4bd222964b1fad372807c9462739cda33dc1ca3bf233eda1971b3c0c7eca5f48fc"}, {&(0x7f0000000840)="7ff204b7e3a64ce597cb8d372faf1adcf7a658f8c5c9745f8194fb35406a6cd9a61b287a82f3c2b184d2217e1425405becef054d17b9a89cb958e017e983e66eb9d48d57d52b5cf39fff64d1ba9792fff05ccfd4b4e8c773ecb5fe254618a54ecede9646d82cf29dcd7b5ebcfce44bbcd1d9bf4326f8b526af0025d8"}], 0x0, 0x0, 0xd, 0x1f000801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2, 0x8, 0xb3, 0xfd, r3}, [@IFA_FLAGS={0x8, 0x8, 0x80}]}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x0) 32.297088914s ago: executing program 0 (id=881): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f0000000080), 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) lsm_set_self_attr(0x69, &(0x7f0000000240)={0x6c, 0x744, 0xae, 0x8e, "b9ad1f7a472269a8bd80d8b3c0b1c5fdd785a294ea35a9060e3d38ff782965e2b39b0006029a1ef2a23987dc364f6bf0e6bc672a00e81bd95cab1b84e76091bdd3ac91740f3ac1564b6de0283b9c9bb7560dbee20ed7f8164fac347c01053fb26407bd0f2a0a0c0f07cd79a0de39498c87b430010ab7178d3a4d6aeb55e2a2eab87bc9b8be18d17e6097afe1eeb8"}, 0xae, 0x0) 32.227539798s ago: executing program 0 (id=883): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x299c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000140)="4254772bec1be9cdb589668570c591fc40b1d66faf9c76fd6f631eafa4741b01e0da9ca0541bf01bda139b63bcd5015b9c1260cb22e00058dc076898018d1f5a08c80b07972acdc13c5d61e931ede288f0cb867a993245432f210511b52066c8973cc72505b9d61f23fdbd825d4e51e819c1c898dad88676") sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x2, 0x4, 0x0, 0x8, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_lifetime={0x4, 0x4, 0x7, 0x4, 0x91, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}]}, 0x40}}, 0x4c080) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14) 32.169672734s ago: executing program 0 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="97b5ee06edbce480b6bdc020061952fd", 0x10}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x10081) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000), 0x304000, 0x1000, 0x0, 0x5}, 0x20) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2906899, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 32.090798252s ago: executing program 0 (id=889): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011b0000f300402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011b0000f300402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) (async) socket$inet(0x2, 0x3, 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 31.739886904s ago: executing program 0 (id=899): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000001c0)=0xff, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f0000000400)='O4W', 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @local, 0x0, 0x200000001, 'sh\x00', 0x0, 0x821, 0x21}, 0x2c) 31.648911256s ago: executing program 32 (id=899): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000001c0)=0xff, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f0000000400)='O4W', 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @local, 0x0, 0x200000001, 'sh\x00', 0x0, 0x821, 0x21}, 0x2c) 4.089340664s ago: executing program 4 (id=1409): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000050003001100000004c270"], 0x20}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f4"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x2, 0x0, 0x203c, "ff04010000003ecae80000ffe100", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000040)={0x5, 0x1, 0x2, 0x3ae9, 0xc6, 0x4, "02f8ffff070000fbb4883d45f400", 0x8, 0xaa, 0x6, 0x8, 0x2, 0x0, 0xe8}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x12c, 0x24, 0x100, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x7}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x9ebecd37e94dc99a}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x43}}, @TCA_RATE={0x6, 0x5, {0x7f}}, @qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{0xa, 0x7, 0x5, 0x81, 0x7ff, 0x2}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0xffffffff, 0xfffffff8, 0x0, 0x2}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x466}}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x3ae, 0x1}}, @TCA_NETEM_DELAY_DIST={0x41, 0x2, "f13b703979b3cf4c9b23dc204368fe23bd661d51afa328b20f800d944772f9ef6ea03a0ccb6cefc4297008a13f3849fdf3a95f12f94452ffdf0fed8c9d"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xaa4}, @TCA_NETEM_CORR={0x10, 0x1, {0x4, 0xfffffffa, 0x7}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x10001], 0x10000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r9, &(0x7f00000004c0)="24c2bf8b605c5c01c9623a90f13b160559fe71d3b6aeba64d8cfd42db2f690816e09faa543af64c47b15", &(0x7f0000000580)=""/231}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000029f30900020073797a310000000009fd010073797a30000002000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fbfffff73c0000000c0a010100000000000000000900020073797a31000000000900010073797a3000000000100003800c00000002140000001000010000b30e000000000000000084000a00000000"], 0xe0}}, 0x0) 2.298343486s ago: executing program 1 (id=1425): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x35f}, &(0x7f0000000340), &(0x7f0000000280)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = socket(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x8a) close(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x204a) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f, 0xffffffff, 0x240009, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000007, 0x14, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000, 0x8000, r10, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) io_uring_enter(r3, 0x3512, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="8c7d648ef3aec4f925ad6316b8b9b3eba4c83aee0219e8447ffe7358464783d8afdf64483dececdfd4608c8a6eb7c880c5df2a447d6a863fb6c84c30ba2732503853203a234079c2046dd9c31505622add6d774e0ec4cdfe6442f19d562cb0b156736ec97d753b6d400c7b43e579da7068ce855d28cf7124ca64821831518f2cd6351fc31faf68611832c55254655a8ff872a24a8dfff4cef83d2026c45178075592"], 0x44}, 0x1, 0xba01, 0x0, 0x4007}, 0x61) 1.420057831s ago: executing program 1 (id=1438): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000001440)={0xbcb4, 0x7}, 0x0) llistxattr(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x54) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4, 0x0, 0x3ff}, 0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.419612015s ago: executing program 1 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) modify_ldt$write(0x1, &(0x7f00000001c0)={0x7, 0xffffffffffeff7ff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffda3) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7}, [@exit, @jmp={0x5, 0x0, 0xd, 0x8, 0x1, 0xffffffffffffffe0, 0x10}, @alu={0x4, 0x0, 0xc, 0x2, 0x1, 0x80}, @call={0x85, 0x0, 0x0, 0xbd}, @alu={0x4, 0x1, 0x3, 0x9, 0xb, 0x8, 0x1}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, r1, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) madvise(&(0x7f0000352000/0xd000)=nil, 0xd000, 0xe) ptrace$cont(0x20, r2, 0xfffffffffffffffa, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x264081) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 1.340738845s ago: executing program 1 (id=1440): socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0x11, 0xd, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4d9f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) 998.271138ms ago: executing program 4 (id=1441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r1, 0x100, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff004) 810.767124ms ago: executing program 4 (id=1442): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}}}, &(0x7f00000000c0)=0x84) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xa0, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x8000, 0x7, 0x3, 0x8}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={r2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}}, 0xc) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x1, 0x5, 0x10001, 0x100, 0x60, 0x10, 0x2}, &(0x7f00000002c0)=0x9c) (rerun: 64) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={0x0, @bcast, @rose={'rose', 0x0}, 0x4, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10000, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null]}) (async) r5 = accept$netrom(r4, &(0x7f00000003c0)={{0x3, @default}, [@netrom, @remote, @bcast, @null, @default, @netrom, @bcast, @netrom]}, &(0x7f0000000440)=0x48) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000480)=0xb7, 0x4) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r6, 0x200, 0x9, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2b4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7fff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000007c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r10, 0x641e) (async) ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000000800)) futex(&(0x7f0000000840)=0x2, 0x6, 0x0, &(0x7f0000000880)={0x0, 0x3938700}, &(0x7f00000008c0)=0x1, 0x1) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040881}, 0x0) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000a80), r8) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r11, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbf96795cd93a0184}, 0x8081) (async) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000b80)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f0000000bc0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000c00)={r12}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r13, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x6c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000001) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001580)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000e00)={0x720, r14, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcd, 0x4, "968daa23426aa4a66fac021a37bb8ad940f43de3924b229892af7788cd0e2ee3da825888a8352e1433b01fc34e31864c380df35d57587f1d3bf029864bd6c58fb607826ffa5bc4e47b5ab392f0faf85358cf9b5b79195101252a791d41f84ff7054beb01c5f3e452167f21b5839bb76ad3be181398990c9c6f83180d761bf39ce38a1b8cd8f756580ce44106f1c03ebe3c66b481d4f482debc5a62c0de685fb46e4f57b50742d61d70da34d06c04397c3073061e85dbf825222328c02e59757b452f821fc8f1e71cb4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "684aa46e4c897451fb1942305a19121a7b7b85c98329f5a7d3fadadbfe9bd23a971deff64815828955749c4ade5a84b2a938dec1e18b7cecc0e9ff9daf90f490898e7e7055696075e001124aa341d24fe41a01234122d2609b46920d717fc92d6b302cfbe09e6ba1e7940dddb9041305eb17522d9574e8d3cac6ac298aa499"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x26, 0x5, "37091a2188584a45e03caf1db4c0e746c0239e656eaf7dc3710b0e966202003cdb8b"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "79c9cfc72b7a6f9fa416d2c24a320dae050e2f1fcecd6d84262eee9902aeea09cff25d4f475cc1ba737f681786046aaf3bfbf84588883ef51638782fc69b441952a9defb7f5aebbb8915edf9deb675eed80fe75755c81e4e8d0c4bb83c91a0f0c56cb89bfbcc8ffcc0058150d6322e7bcb0ec1b991518b952b9b50364b1ddc0ee2a8aa4059a6a4c308761744bd514613d9d5009732e7e030146d87701e145f249a8984e26f52d219b3c059d59f0b20a4e5db9a1cd8c58eff244fcd8aa5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc94}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fd}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#+\\{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'rose'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "7b98ddc82a36cf3a98757406cdefac532f3affaf7d5c1602d3fb14c4fd8ec4019f07900948b5a861ee34bd2bc14537a71ab65b10c990"}, @ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "1b0890c82fd5b0ca9f861b47a0b7d0316137a0f6cf9e8a05a380596ddf033f347db4406eb0908c29dcb6b8e487abd8f9e4a46c044894ad445bb6191b7a5ac341c005cb5404053ffbadc92264b46b47513cf4fb60ee56da2dad8dc8bcfea5ec9e0680840fa3259edf615a6d34ae33f8aa991f0a3c17f125f2abb55706811af26ce4174e875d984e1ed74fc781cc8524f2167f1c558644ccd6389947c6a609c363e7778be0aecadd4597ab00da6f3ff80b77083a7aabfc8538b5e7cee6e31856cb1f3d8b54bf4cbab0c44793e68cd073bcaa9a"}, @ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "62460f95c89799c3d358952467c73109986a7d82e58a86b22c80edf577946d2d6a9c0df52efd73abfbcb05f759791a6d5ae0065dc54a5d8faf106056465cb8548d689fc78e3c5493e2d5c86f539787d93eec50417cb8e97ccce9de5f2cee1395a8b300535a520f618b111a4927503b06aa597143610130eb94d917ec44e75d06f356046a8668090de7242c38e8f4bc7ffb64eb64ddd7a79f4602c8582104328e6ccb7279689145d9cc6b5aefe34d1dbd3df9c22ea394ec5e36"}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "c8f8e04278559e5902677203c3f4b9f913156c59f79d0c9713215bd6972ce44d3b33706e794904ea1e37fda93dc78ec1e33bf24a9a4b43b1b5de15fb34dd716b6e7c79831b4b7a65a203cdf35a0c1d965d6ed761832d912edb03972a511f04b49cb0cc35f9727aea4a2f56e5d7a2da49bec8699ff5378c9640183c2a2e1880b97f91ee9abc1cc29b2281af46dcee2424e38b5ca3373c024322838f29f7aa5347053654ef233d917de70b91ea7e67bdf85c4b5114ef88177ed1a7c2b93400836004971a724ef500d34cf324a247c1f4b2fc8c0e9da522569a6b45881afcd772fa5f0055d2ca671d0b"}]}]}, 0x720}, 0x1, 0x0, 0x0, 0x81}, 0x80000) 710.04823ms ago: executing program 4 (id=1443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000300)) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 707.745851ms ago: executing program 4 (id=1445): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x71) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 648.184679ms ago: executing program 4 (id=1449): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@loopback]}]}}}], 0x18}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x109, 0x0, 0x25dfdc00, {0xb}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000004bc0)=[{{&(0x7f00000024c0)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000002540)=""/182, 0xb6}, {&(0x7f0000002600)=""/103, 0x67}], 0x2, &(0x7f0000002680)=""/60, 0x3c}, 0x1}, {{&(0x7f00000026c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002740)=""/67, 0x43}, {&(0x7f00000027c0)=""/99, 0x63}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/153, 0x99}, {&(0x7f0000003900)=""/128, 0x80}], 0x5, &(0x7f0000003a00)=""/95, 0x5f}, 0x18}, {{&(0x7f0000003a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b00)=""/223, 0xdf}], 0x1, &(0x7f0000003c40)=""/38, 0x26}, 0x5}, {{&(0x7f0000003c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d00)=""/246, 0xf6}], 0x1}, 0x10}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003e40)=""/161, 0xa1}], 0x1, &(0x7f0000003f40)=""/87, 0x57}, 0x2}, {{&(0x7f0000003fc0)=@phonet, 0x80, &(0x7f0000004140)=[{&(0x7f0000004040)=""/42, 0x2a}, {&(0x7f0000004080)=""/157, 0x9d}], 0x2, &(0x7f0000004180)=""/246, 0xf6}, 0xffffffff}, {{&(0x7f0000004280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004300)=""/167, 0xa7}], 0x1, &(0x7f0000004400)=""/87, 0x57}, 0x7}, {{&(0x7f0000004480)=@caif=@rfm, 0x80, &(0x7f0000004680)=[{&(0x7f0000004500)=""/227, 0xe3}, {&(0x7f0000004600)=""/97, 0x61}], 0x2, &(0x7f00000046c0)=""/66, 0x42}, 0x9}, {{&(0x7f0000004740)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/189, 0xbd}, {&(0x7f0000004880)=""/31, 0x1f}, {&(0x7f00000048c0)=""/80, 0x50}], 0x3}, 0xfffffe03}, {{&(0x7f0000004980)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004a00)=""/243, 0xf3}, {&(0x7f0000004b00)=""/39, 0x27}], 0x2, &(0x7f0000004b80)=""/13, 0xd}, 0x1ff}], 0xa, 0x120, &(0x7f0000004e40)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006111680000000000950000000000000068dd253aa0e2332c817c5e9376eaf9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r10, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r10, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0x4}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x10}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffb}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5b}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x54}}, 0x4) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r13, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) socket(0x10, 0x803, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 459.328703ms ago: executing program 1 (id=1455): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{}, [@bcast, @bcast, @rose, @null, @null, @remote, @bcast, @rose]}, &(0x7f00000002c0)=0x48, 0x80000) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) r1 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r1, 0x184) 454.818684ms ago: executing program 1 (id=1457): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x4000) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xfffffbff) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r2, 0x0, 0x1000, 0x10, 0x0) 400.693264ms ago: executing program 3 (id=1458): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000180), 0x0, 0x2fc}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x3, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[r11], &(0x7f0000000040), 0x0, 0x300}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={&(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x1}) r13 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r13, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r14}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r13, 0xc01064ab, &(0x7f0000000000)={0xe4, r15, r14}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000007c0)={0x4, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, r3, 0x0, r4, r5, 0x0], &(0x7f0000000480)=[0x6f0, 0x3, 0x6, 0x57], &(0x7f0000000800)=[r9, r11, r12, r15, r16], &(0x7f0000000840)=[0xffff, 0x0, 0x9, 0x3, 0xfbac, 0x80000001, 0x7], 0x0, 0xa7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, r0, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r17, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r18, r17, 0x25, 0x8, @val=@iter={0x0}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 377.284764ms ago: executing program 3 (id=1459): clock_getres(0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 375.736261ms ago: executing program 2 (id=1460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000440)="8725", 0x2}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1000000000000e000000000007000000"], 0x10}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) kexec_load(0x1, 0x0, 0x0, 0x3e0000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000100)) 289.865585ms ago: executing program 2 (id=1461): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000d1deac0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 190.490844ms ago: executing program 2 (id=1462): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0xa1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x43, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x34}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 188.966444ms ago: executing program 2 (id=1463): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x501000, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000280)=0x4) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x48004) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000480)=0x5) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f00000004c0)) r6 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000600)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000640)={@my=0x0, 0x8}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000740)={0x10, 0x30, 0xfa00, {&(0x7f0000000700)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x0, @remote, 0x2}, r2}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r7, &(0x7f0000000780)={0x11, 0x10, 0xfa00, {&(0x7f00000006c0), r8}}, 0x18) close_range(r7, r3, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000800)={0x1, 0x10, 0xfa00, {&(0x7f00000007c0), r2}}, 0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x5, 0xfff, 0x1, 0xfc000000, 0x9}, &(0x7f0000000900)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000940)={r9, @in={{0x2, 0x4e21, @broadcast}}, [0x76, 0x400000000000000, 0x0, 0x6, 0x5, 0x101, 0xffffffffffffffff, 0x2, 0xfffffffffffff801, 0x3, 0x0, 0x36d9198a, 0xb872, 0x1, 0x7fffffff]}, &(0x7f0000000a40)=0x100) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000ac0), &(0x7f0000000b00)={'L+', 0x8}, 0x16, 0x2) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000b40), 0x8001, 0x0) unlinkat(r11, &(0x7f0000000b80)='./file0\x00', 0x200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r11}, &(0x7f0000000bc0), &(0x7f0000000c00)=r3}, 0x20) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) 188.678969ms ago: executing program 3 (id=1464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18ed000000deff0000000000000000009504000000000000fc87989eb51d5fed12768de644efe6ef568e994833466079f95c29262e3fdf00db21473c3cf1bb2217f4d270a2cfa7e00c48748e3b831b119920185853852d7ba9233e57530fa0b08b689a7e539ff163a6e9df2a9038f19968e872cd572e0f5fc87fbf6470e92ee0a5561088cba81ab06387402cdeadbfab"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x100) mknodat(r3, &(0x7f0000000180)='./file0\x00', 0x200, 0x7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000003c0)="2b2bef4e6408d3bb81f67a98458896f81c34e781427d7e968a063e5870abafa9e33ef7ac22019139dfb2c4723c8cb4c2cc4f766b6ea3ec0ce41ef7ae44b95c0e9148064cecda5317505a1bb32732ecf876ba5b3f832205941e98bb8f204e25ee661232ac439757a448bb47fe5efa4bf8628cbef7adab811c3e658bc88a1a68ac625c0ed86cba277333e3b5429ee5b85f8debb04b2f6919c829d4d320c85d53e1b1a8a0a2f19141e2108d01a10b6f697bb34eefb642e632ce8132c705270ec1e8e2728a3b", 0xc4}, {&(0x7f00000004c0)="cee6719098d08f9697bec2dca74eb00c0b3718705c100b6ffb0e9f7f2796939fb032a1dff5253a60ceeba3ce0e379f75b008ada480db599d61b1189d37ad71d2ad17bf93d958821ed3ad83eda326564f8b5ce76c43f65a56586c557e946c95575c6a432d65e8143b5e6bac4f254e13710323d5a917a45826031acf18afda987a8029ef0608b455a4f375459cd9da10ae517d9b6bae3dbf315a6fe46930b3e0258c328d0c08a82de31d3ecccd08408a210776fe8328342681d417e57b8c41e398a7b2", 0xc2}, {&(0x7f00000005c0)="22cceef9f076d47759460a76cd9cf4ae81016bb4e7268965698e572b3fb6ba180fae4da9704af1d3e8520a3a3f3ab330e1ea6f459cfb8a2ca8fe0949c354a26ad5cfeece315600c6bec2335ceeffcae41efe0a3fbbfc192fb7ef609874d297c4fb016f16e4edca0f60872c0799a46f37243599284daa083ff7667f1a0618356f28f50901e8f2447ce56d1dd5", 0x8c}, {&(0x7f00000001c0)}, {&(0x7f0000000680)="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", 0xfb}], 0x5, &(0x7f0000002700)="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", 0x1000, 0x4000}, 0x0) (rerun: 32) r4 = io_uring_setup(0x332, &(0x7f0000000240)={0x0, 0xfffffffe, 0x80, 0x0, 0x195, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 119.985348ms ago: executing program 2 (id=1465): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000280001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1, 0x2, 0x2, 0xc) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x8080, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {}, {}, {0xe5, 0xfffffffc}, {}, {}, {0x0, 0x8c7}], 0xfc, 0xf2, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 118.922873ms ago: executing program 3 (id=1466): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = socket$inet(0xa, 0x801, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) (async) ioctl$TCSETS(r1, 0x8910, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r4, &(0x7f0000003b40)="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", 0x2000, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x8, {0x1, 0x2, 0x2, 0x6a08, 0x401, 0x80, {0x2, 0x4, 0x1, 0x1, 0x3bc4, 0xfffffffffffff8de, 0x2, 0xfffffff7, 0x8, 0x1000, 0x8, r6, r7, 0x3, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000005640)='./file1/file0\x00', &(0x7f0000005680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) statx(0xffffffffffffffff, &(0x7f0000005800)='./file0\x00', 0x4000, 0x1, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000005940)='./file0\x00', &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (rerun: 64) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000004c0)="0781f20f895dfe86df49a5bd5e600a097337de870882403c49099de3269a391070090d053442d483915680daf1611b5f5fc7393ad92fdba435e3d372386b6d433d14745fc4ac8154a29278bab73accd51bf40fe34eca0c1f13566d767a3366f7ff7ba3418c5b54c26a76c779520ba78e070b57c10dc98d994dfbf7321421ec2b20e1d2f0a508877829c929f9d613da319ffb5dfe471d4e0a3e0a580d4858ab22bb42d113b170308470662cab377ee7153e505c49efa9864f09e9e047e14a4d1c3b2e98dd4fd1a5d59a40c29866bc562b6d20817f25d75a274bddbd3a858b054164f5379d20f34c0305af9dafdd8c9a48f359512ecc7b44d0637389ddb1a88d8629e5608c50e960d2385b2cd9310266335752af1962e8fddc41127aa632ee2c989efea9957979a4b684f587a3cd276d9f8d474c4344b1ed9df3647ae88a4a6095ce4aeaaad9d79ff28eab12baddce1c42da9ac4acb1ca2304ac3083197addf5d3b9190fd427ce41d04d48f6d5d4ca4f24c00a79ae26edff09151943ae10b2b87d2b9fe21a05ed784d369731fbe5bdd75f075685ac00ef365fb649a0b404ba5a12dbb085d64b9c21309a2977a8918df18e55fd95e007d74364d2dd821e06616b3a0b2c9df0f4d01c0435dc0894ba9feceb4e86dd2102792f5d19ff3e11d31b2cb1b8ffe861bbd561a8939bc4f653a7341d48c30b97728aa25796485ad545a139b4c22a944f580fbac50613e08d24600e6de4545d39a7810b3a599879ba9010ff3a7aa74c2a9515e2397d0e7307a1af0b9e533ffb01f030d62d8ed644a02b53d9b693f51f7a3b739907afcefa3fcdb7daf3ea1164415d4db37994f3b489adf63e23c3cca94e0ab051024d51ede17985e6690a98a11857680b8bd9ea2b1c6f0edbc02ece10adf1fa70915f95f435102b12184565d9bc49e191ae30090a6a66530115737bb54a598244d8f22e0457efd1907506ea94d3a057bb348708a0f1dcf885f00af83f213b5c99adda9a57d429aeef734663eeabb9826a69ff2c0f1db6a6ca0ccc2077832a89f1592642f81424ae4ccbad16fe307e09e0a0b3eca90c4ffec9ef5f19d6bd07a30f13bdc3f392542cb777051e7384f9df5fc3afe75ac1d7727c499b7d32ac0a4d56a67b1c31df77e73b6c5bfb277101f03d2e163a49f892a7f170938bdc1cf43d34dcdc2c85222dc59ccc10e424ebf58044fd7a38acabe75a3d03d84b9db42abe1febd4c0cce68b132a967673e60c37078c9215c7f820cfa61e8567b42e1a91fb1e8f80618df943ddad69077a12545fde9764f5da7e7e8071c1e0633010b293e8d31f5943c4e7388395dbaf382866147c86f00975477f34e5a44a8e16bfbba1e228097d7ddd74bc2c1c46fb83a6650f3b65aec71e496887e22c1b12287df39932cfa1013128f5da8d05d26351cc787360e9a8a2c6f6fdce7fc0287c32ed49cca03a7ac92a943a9a408d1eedf5fade944b07e1f03fe1faf3c067c3a4a30f685415e394a0b77b1461c35ecbd0799e35263aaa6fa5b92d05fba398f46c435de2476398d0c9db319ca0c6c43a339e224fa69694cb243701cac367795ef7a4337dfbaf454a105bc6d00cf5c722583684443536f979844d7a5df78a4ea43dc29e7b211a400aa188ce99d0db4472c563b51f4b6728ad65c502b84c1c93415f27f54ec8f9e54732ef194b355a64acf1c7716e00466267130ecc71de77a759a759873216667fd442f757c1041b4eafe3302e1623ac6d02f3a99a4d8298ed4a150b31975f7fccc544bb545a9399fb7181ece4c7d42ae000aa0b9b8f48dba2794e189b25fab739dcd6a71de6ce5ff4c71210058ea188d5c183691c7133203197172c17363a2df9e27c48140ba9e333ad26934ec9eabf7fe2c1afd531bb2cd02aeb48fcc9bf1793d1b29ecd52b3476f450a6a74dbec27034bbc73e8809b6ab524540a5c2af2b6a9528e18c956f67bdf7f7d6b282c5c5a72f4316b1c9d43893f63a08be28f928cdc7495b52df24433f6a9a06434a06b5f485744ea816141c24bd7fea17faa5c804404d9eae72f7de9e9a4258312ebce0cf66080de9b01a6735e3df78e7b9c2c1f323628dff55785080d1dcc8e65bf3aa3f9949c3a18276722a1b664114bc011423cee6381a2dd2a3002f5c527609175f7e3c29fc339d4cb557a5ea2929f77b0a84a3a436ff3d312deb752b2767fb0a281a843511e2652cb73a982ddd1cca770c991523f60ded89e4f672c1bbd912671a0dcc001c6b09beed5ff46d6a487e7fcba608013e9a5b0bec0fe337cb7c06f29a8c03697a99b9cd1746fec77f8b4407b27a2cd7551ae82c12889a2194ee9f075fa989a927013bc165d3e83228cd37d423fee13acac807e60a15410dc3fc009c93dfc822dc3ba2895dc2762edfd477c03042f12337686222705fc7f7620f12640f14b693bdbb4ab96f747e04959010e9a135607bb46afa7f66e96b6737cd3b1d32699b784a33cece1d3ac4be06b0987d97aad9a1d6bd4e802ab946619193197283aefa1b4653aeefabe71611cba76288a5b3e15b1b90e6f2f30016b2514009fbe120f5d490fe0d14bba375fac39a996172156ea3aa9e02a6e19228cb30ce8f054decc84fbd9ad61718b9a7c384c54f0a53e65217b55204434e9478032ba6b5c12dcba0b8caf79ee8b613a4c4b18ddbb26638497ddb58f6afbc63b82fc7d8655c851e8253791c2e1a3f2c0a0ce3185231d6edd14e3a67cbc9f490b64177156be3dc221b0c381dd3baa31cc3f58d8087f215d0eae20fb156e70052232cc61d834a3074feb851bf7228cdd2a5189d24be4dcea44da810531ab267676c44c71865d680d088772d8e3f23036d13741560c663eb09a2e6db1958120d87d4cb0140b75e621d2f2849fcc15ab4d83920899c48e176c3fc98c9c95b8d8e46297e52fa5443481bbbef44dbab5e38d6ef9faa1b12dbff148373d3e6766d959d703ed11f9e33a10b5f22552d0484d0fd0879efecdfa3290cd2f069db6d79273805fa498dec9e8890105e4b52aec9aae47e912d1321b045d17fd7a7f828ccc43b4ecc3cbc97f3ccfa6d6b503085adea4481954c925f61f5aa32785156a60310a1fdb5d5f57f7c3fa2fdeda94416a929f8fe1089e5952789d42359a68319cfca86449f718483228e193a657bc98e7e2e0f1992a81a1545b46d4c53d339db84a157f44a072c2c1de7485d64a95c2480964f999511fefc99c5720b533f35644938546ae76025fd6a33a32c8f127d92b5e473a6a49f7900f79153305690bc1f31ba7ccf9b3f9c0058062d57ba540472cb01fc4abf0e63d40588b897705a3f5b1237a44e276ce53845358a8cdda7a2b493a86a4b76ef798d25ee8abd35dfa3bd2f4e275e9a1cf95f53422328195408cb19603d59d1a1ac16824279fb3bff325591c9c1a6dfe1370f12e13bb600d5b51ce4603a260266c61e0a192b9e180962e76740131fc263cb979d5ecde9f013377dceccb875728b150fd36291bab33fbd97654d920c29c74fa6b2f33a8cfe41356bdfe36f5b062d5d36f95ad78715be72693ad1e62ee17b0d66aa5446c0b57ff1541aa0bb54e752596e030bc89687dc651629214c9100aa8de2c8bbe07e436112e01755fc59f867e818133b1e953c407964a30807a07cc222b3416c901b920602e4dd046f956ccffdd9cefc43c5780d7eb6ea226e4101d7643a64e6012fc50e89526e7f5b1863982349134ee87157e6ffb4b21b7d355cc7a6c7ff331da30732a10e61f77757e83655dac6274ecbe1d2af96495f89abbcdc05ff6eae0e6940079a808e78a95140eaf402fe3774af89f74c12b281d078f711f509cf15785df3450de7b854488cffaf337ec0aa21ce53cb80b094f6d2b2cf0067b3987372e00605ee773249cc33293ce90fec94630234f679f2200b223b87b2b55103e3c842e7463420538f637b7b73ca7f6c4496cf221c260464bc9e612aecc1d59da5f9a64fcbe31e40121f6d2af63fa57cacef4a14c68ad2aa9daa9bcb7cfb1aa62c757410f5cef782a211aa4886e77867aeb8f3eedbe187863508a99c88ec0bc11749b87ec421ff4d39cc036300d3fe0fe6f1546efa72d29ab2ea327889958d7cc66b7783d589a59935c221d4c5d89e6952736443c341e2c8eec712977436add0f38ef91ff6557a9845aa48ba20b00b7827358eb37f52acc832b6d0ce3613394888b442572cbbdfbb2cdd576860af1af849c2ae3d96f22d25efb2e299f8fe96b0f3c24b126c869a10d250a4547b26fa06026eaeef385b8030f3f09c14604c0be1184a73e7ea036e526a3134924dd0cf6a3f81e04c4a2dab60669f25ef371b67ce2a3e86d25999e4d11d2210fc4feca5383f60ace5fd53585bd21e49247a9cf2a8a729dd8b5a326ac619e8a0b928b3e4657da38b32836f09c968c1031555fd81dcbe6f7e63e02ffc384189fffbf5e6ff0789add184d3ea4b1099cadcade0f39ca9e06534c581da8a28970cd2aa60a1a8c89b5b97b80d3a2cbda0d64ee3f78929fb096e157a46a82ef7287423d2855df5aa24b8f7068ebd3f9d0696bc202e5b14f18956fa9d4cd1b12c234b1a68f17f267820fa1c2946e17dfb38522a2f0f38ae5e05fcd9e0dea564249d379b18efd3c4bdffbfb42dc1f2dff9aa8e0d806a6a8598147baea679c8e9f8ea55417718634a3355c7c46b23fcc5e032d3285697579fe4d29d75254a21e5ffb8e39ed522b5dc01ffe89252530a2edba3dfe12154038518ab2f66b2c46485a2181547861d7a79870bb96ec4054c5275e84570636e79c7c83dc09ad176a3b2893ce43c76efc569d6637d819a89f484b8d6b2b4dccdcb8495013fed9d67e22a6d3ff6f5c2ed967039992a89fb50648527c322d85fa57b47c53e1f6c9d86f4cccedf4b2ed5cb6ff0d8b3fd5ce16bce3e63ffc210bcce912f1ce3dd27cb288e0a795909f9ccf41c6b0be2ddb5e5001f7c741665c3a3fe8efbece3988df1a2fc8aa3bd5a26eff79d91f0d17a309d32b16e42ebbfdf1f5f9db4b83cf8dfba733c9b1593e3382e3065d2acdd932f2e0926911cbfcb13779a41abd2f7a82ef12703a7e2bd8a3b8905b24fe9b770cb1c277757c5b2ab7d87c3b976dfd43b0afed8ed1b013c48345c484e0997774a0e9f1e44a58992b439a7c2196b91c18f9148d7639ebca72ce7ce343dd4074a1e0cd4ff1214192862d3738247839414fa4feb247ec5a1dae7af04c962f3c3f5be15eaf0c04e0c7b791b605fe03f176366b5d42dbb2aaf1073dbf11389e0c578c951fffc80ce359fd26074c35d3caf4822614d0168067ffdffce1693bda8b8bab5520ba5739e944425b7eab080c65b6117a347cf9a480370e9103445974787488b408b3bdfaa2b89fc4e1e792198ab6ee6f4773561a886c71f82547d5537d97133ff6e67b2c991bc4003568955675bf3d8306bffba52c467da2404e6b0c9cccd13c165d294fed034d7b93ab1a41045d68161a9b19babf4fd5dc46d5b8877669f9858ccf1b8e6b58f39d89ec6dde62e0325f07868084d9fded43b420b1c4cc16995eac5359d43d18fcf737f15d412a694bf435706d511dd0cb737f6396e49737ca74c92e5535a6971cc0903084e7baee36c60ea5f86626621b2ff28ead9674ad0c23abb10803112e480d74a6adb421e86039ac8a3af1a0b19dc59403a3d33a01cc9cceb319610dd22b2cc8bd22852a9f8a852c9fdcfd0ce9b39f8a57120ca5f85eb1303ac44c20b364948b5af8d6c85a6a518d78ff8ae7976a8c2198e69fa4c98bbc8504573c5a848e7cc40f5ac622ba6a8ff27ec622c22aba60d0772f4514a39b9cd408b7c2e692a2b7e1283d2adbd654b0574625d48bc3a6bc7b0c85394e1c0071e946b1fee97a4dc6d13fb0040a46f6f42dc098cde7aa8c7680904997ac3c13243f9aef924fd5af24bc593b6ef3469888701d8ed80015bcb58793165bdca275fdb6ade6eaac4787a4efbafa04e2dbe87962580005486b1a628414111d5f2e8e1fb8f2f050ff51a5b5ac132567b38ca720b022ebf4cd83fdc5f1b783ed29c3c92e899eab7c8326dfd5fdb87cdc1489a6cb4e16a0737fbc4c1b785eed5ec58680e93438a3bdc4c47a6aa5885b0483dc63bcf40cec6e3e28f123a5c3f9052d55ef8a515585e3e3e5bd72d9566cb09327ef9f8d9c84be3b39806fe600e9e552ce108a4a49b8b0670586390cd98494fc261ecf18cdac38faf524a5fb3b9db69e638b5d641541c88c2a8788a30d260fef3d8b48e53f61396a5a73730ea6932e9b1e85eddaa8ed32e8acabc1df15e6bf57e9bf1ae43a3f1bd8cc78f0722766d83ac483afe69a6d7cdc4d914f61a1d41bb844b88f98cf67a53a8223ce79a842716ddb6075497de76c5e3c08a44ef1f373fe918d96a63877c94eec945ad65ed8f27e4dea54740af6280dca7b35b64ef9ae5775b7fe9ef7efc94c4f995e38949d1314defd70faa44b460b9b7cdc4cfd45a74dfb4d8e8e2d9eca1fe0f46df9531fcfb18fff0f6efc0ffe9d873565ca52781bee8d8e9b148c46259581aa51757c29a7b260c3be53a6fd92906666492d09851484dd533c292647c4991ba410911fe5298c5bd74e0add1acdeb5e89af00f411661009b518d5639f285ff7b7a82189accad97bfa114c3c7bbbbef9d73782686cb5e805ad776ba1cbaf5ca30d7b390e5bfa63f38593229bfd26ae7a835919b05241ae8f75dbf60c6ef84082090c5ce7da2337b9b6a1d64acd511f8749f40e2aac4db764d08e35e14bce17eab2893498899fb011b6cc3095cbc69ffe1150b311cccc3917d65b7103e3f63ec98002c8ccaad550cc726eac84e19c11d4f3881932987feffc585fc9fba993b226fe01f15e1ba5d6db1b05817e7d9e1bc496a0811fbbd35b59b0b03159f1dd819b4c261d4d40a1deb7bc1739c008ca4b7456a809f2593d30582b12d4f31a7c4edd82dfa71b674a9a05c68875cde40c8913864999ec236805f017cb5af64c58f5dd822e73faf93ebbff93066d5b46820e1d6a90ff8d3a3ff2c81b87add1fbb7f53f68bd386c4dbe83f98ff7c1235133b5e2dd1a54bda2572081c29d61ced3f71bd2207f94b766f0a439ecd9f037d5fa23c70aad1a82f7ca60c3019ce1378438ac93fa579ba158486b3d51aa362214337bc2ac919e1a57e1896f2b9b0770b1a39317ef847819e90791bcc7bcf6de7fbf44cf19e1a39de7631a095c0b3d142a1b1e34a36d315ba3065b5071a1ddb06708cfbbca4cf3e5d219366471c13ef848cc8bb01f6cff5a11392146ad25ba2882fea7fcd0027516fb971696b65a0e29895519e4d28f3ca6066d1c2ec825b61f3a2518cbbacedcedc3b445e89454b5149703ec7d817f9db8bbd5f8050085c86af5eadf2a424c81ec15e7cc499ba792b480db03b86edf0d2934ec9fb5876f2eaa648b1d5c8996c6bd80d29bd635b91e09e8ea4e59f36e393ae62fb2f8d0cd7b7b9bbf56a4822173a61d76fa5a52c23d8f6034f2da702b37c64dd0465ad44ed85cf3433183cb7cbf0757414d19b5bc4b02d270d7893ee59ffa15bbd40e024d3605965f1e16710834ca5b98960697bdc964d7c0424edc75c97ec01f1cd1aa32550b654aa36729b197dea85b6a2bdea783287f7ff28244fee57d85822bed30a25609bfe7cb9c01d37ecb264b51f7a21e289e1fc1c728ff99cf1fec4c64880462dff0c59a290c6debc1d526f56a758e912160b3ed4b17ccac2df892999060ed16d233b2b3c8821e039f588c162ea9b532dfb94776852b50609ac28ef49f8861d5689b7ecb4f5a6078d266676545cbc85c624827b2699f3b30b12e071bd8625fab87031572fed4a38c5a5ca3ec20c9c32bc3c7d3909cd9d3f61b6de4d8768d60c01d84126e525c6b70b971063f9961e18120d313e8829a4003e90dc6da3add1176e09c358753b4a392a24251363c97ac641c0afdb1313e9506bf9abb00d283e087f59e5ffa884dfbf6f8c04920e21e6d8b69d94411dd9dbec553f0261398bbd515ca975cfa419e14e3193d5e0ef15688381308ad52ffba207aec67d3b70718b498fda85d6491e009a336b7820655c19442770a0be4cfcc799e4765dc8145dc166c41886882a81564c091ff11c9fd02212c0e1bff3d64e7ef1d5db092ad5ddbcf705b62b7ef73562ec677965aa48b55e370fff1f097af22e99d1fd8d483940df17e7b9d6e407d246e171e74e34d036cb614bf1f0602ef7f54414516319cf2204f8b95b9b1b2bbdf2654e23054b1221235f3749d601526c03c7999ee5ea6f521d00f2c845f31440c3107c069df62b17097307fc98783e14722dccd8971042e0d6427dfb8ca5356b45f09acdc11b65a24461d1755d352d5f87933bd45918f7ab66d45e85c1c7695a81a7ecdaa31742d4d7821179d0834837f83b3dd2ef8331cf4a4be3da967cb6970c25445470069be9fd67dfcd468a0b26d56d222f6d69fd700f4e94ddc54ae4cf97e117defc046ac23839a94c0085a05ec14493d16813db62ea57836ce02cad965ba6de983fbe3a4fffaf80e7b237f1773effee563e2be2d8fb8c360c58c1aa41d0eab7345cd3ef8229f12df2f8aba574ad19b0fb10e73adf182894771d3cf840e83f399d22d5f46a7522f45dd2f37de0c40c1177025f33983e89d8ef369b07087390ee00054a371bd7d33585436c9d17f3ce235c885b8c4101b1f33953b855885d47d38707692cef23828efb248672d29aa7b7691b58844bbe563a129c325ae406932a4c3852af15c388d19fc459f11d5ab038b93856b523ec459be4d245ce9261226f62e6434cac958c1c93a5b9909ff7682ef0047d2ed9e27cb1b5ccff1edae644e936b16b9bd458b5dc392ee324c0bbed101a403580282384e31f1bb49f919d02d869c2573933e66b881e3200184fadfa7d5bc3b03fc5898f8a16cdfb560211625b5686a3780c1d12fcd6ca95be71dbc55104fc7121a0f8fe19b47b132cfbb0a629b217a0b76cf1e91a447af37b6742ce0a32b7f8a3b1518ae91fdcca38d0dd2b7577115b0491df3e78f7f8b19d2592458e7b484e8b0633cf8d0c694b4ee3f975b57191589247b25da3f3a972b05acc61a936a0d68b21d7ecde1a1650446547e8daccb42d79b79ae5a01013feae6ebba022102697b4bc16c6411792d8aab42dd6c6d6bf636dbea6e442245d106a30b02e0af683393422ff13779948eb24e6908225f01b6a2f733bc3e21eeaea4e966e1219324fb91702b8b74bae00884da66898b7c321930a57aa450eb3a263fc97ccdad5b7ed0416838fda461e8ae8972474e24efd526f9a3d2d695cd0a0c9223b6f4381c8c07423874ab1f0c221bf655662f3944d09573369ea924a1a3a2b71fe40548791c5e303a1b48545fa712899d71e115649f0e248a350e2729b57ce3167c0bb71b3a30434001e054ac1b992f36e005979db4f27d0b4f751c285a81ecfebfdba70c658cc37ba7056d4c12091c39889f5fecc0c95310054cc3aa11d84410871595fed1bf7c5b83173c4d6ab1af711ffa9a0375a6db38c8f5c4b94843fe0ae8241234f223bb47f709a1d95dca298c78893b5025fa01867a57e0eac2fbbcdcf9e47fb4148afa5ddc975d67e5135de5539986e5194fededa8b8a470007f19598669151f019e6b6e6ad4629e10960f65dca2c3dcc0b39a0bc0f9c7dfbd82b889e8ca3e2537a81398ca9ef1f19cfbfa41870587a43245c587c3d26eb1fa546701133730dd482997f66fecdb155ded9bd0ef118be59f90f26fa1d3c93880a997837d18b7d29fa30b7d222daf93086add052da2c11f8672b0041130aec05677804df23515e764c70c8d9a311063da8c51a8092276c9877103939938a9b5fc4abf906568438b6b4a046828b3dec077b56551e23e6c061482089a4e6aa7bbd88484099677e14e885e563e75c1c58b4dfc313ea2447c2b4a7c48376dd249db7088cfd652921ca55d8ead1e0448398250c642105a86904af7ec25740b37985fa6cff9489f56bb894f949baf590dca1e9e8b2b5b37f2d78116387a56dcaef6a86f163a1b68bc522c0f54f5cafcf8725b6d6fd022910b2940dcd9a0475408bfdf9f40e56122a999aca0c3b6f012388d4eba7f2ece8b9eb463f678cf129bc0d7153b9cb6189d9d6d0ab5e0f82b6c4535b2e60a1bdfd2a2088cf89946dd53b7fbb9a09b8d94f966be4d27c9aa24af313cd0db4ccce67c2b7ae67cd8feaa36bed2b40691ac35ad529c9228b8ac1edcee9851c885e731727bcce39a90d43a764fdd933d5bcce25c995aa63757c20a7aa317c25508ba650e2e159540066aa6b491ea1f0c3afbf0194a50e2b80df7ef3cdb1f5be48cc25875b27edd6fb19eb26bc8f34a5a94d6c925f085620a7347a88c48840311554118423959302f2acd64a41dc612619c9514804926c9a4d17f71607e87547299a2b2a4a40d782610da6f22dde33457294bc90611bf3ecad7367cdeb26fa4f2fc2538faa98eb2fb8db15ea9b7a98dced3d8b537a1beb50262e639e7fd5ee7ac4b0293bb617a2ebe50ecb8243424f2349f9303a910c83f350c31107c44a897b59bdc1599810af193ec516ef71ee33725434ee01ead09c20f14cf6d9612d430a1a1619b4639373b231b274df2a52618fa5f08644a294d6c86a50df76826e3e5fd1a60f9841db9e018e75cd43a29636d3ad655ad9a2415795d4d9304d7c5f5c4ac5de204128f13d753bca09128e5901ba5a41d28c0b93eea287419c66649896a00c0e5b80892f799e4120d961333035d87965fd7902387e28f8669432669a9140f92db3758fc757146ed08ed43a95af8dd426ff545c0496b06d32fdfb85b5f33fb993aa550975bb62aef4c42b477121674ec45c48eb532de46973c0a6b73d54718fa2e0fa70e22d4ed7cb9c3e7dea5cefde7666b500d8d8982b31ae9b1978f926205c1250fd250a419d55486193b2448d89afcfebe322dabb449dd64a6846c9db65411da7fd310003bde276a2e6e2810cd58b9ff39b344ed1c1b46949327580d22153edb0752b54606cd8361ae63e084808baf595f436be1aac20c0c0677fa3fba07bdd1d9150a92525bf8cac3aa79fb5558929056ae223c8fffda7d7fc03658a18dd68fa38d9cd87afdae901643dcc6c5cca3415262382ef1a71c88392af6586542fb6d05a5b9c8e8f92d1dd41089b54e0a82f481a9de2e7e3ddd44c863043f84a09be5a8c39eb91ca4869ba7aba6bac7d1625f96d6f9662a7198d88a397b246bb50587fee8e6620814fbe027328537e4ae0eaf59ced8c7a56dee19426f331868a09a0a0f5d86b49a5d233dc694cce6bcadcec836cf101b7c5052323888e01745fed2f7a84de5293866a8861b4f113a708f09497c3d88136321180e688c55d55bcfec7560b3e2023d08d46bc8b81a8dacb518e7ebcf92eb5237deffa656fa951f5ca048da6a34fecdfb31032ae9ae1f8209e7dc7ee2d819a622c98fdc98db1b9db7f4d9ca8ee94557b74dcd22a6d930b8aaf220b8f1fa237d88f417b7f929dae126c5275f0c4351154e7b57b29d97302fbaef96911b1f16157cfe04e2cad43612310f9584958132ea1fcf052a597eaae4a1c85c9ee6aec62d366bece43015a67bad8a6bf18d70de783807ab0b8e9602bacb8d95ab85cb76", 0x2000, &(0x7f0000005b40)={&(0x7f00000024c0)={0x50, 0x0, 0x4, {0x7, 0x2b, 0xffff, 0x40000, 0x819, 0xc, 0x8, 0x72727f71, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)={0x18, 0x2f, 0xffffffffffffff81, {0x4}}, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x1, {0xce6}}, &(0x7f0000002540)={0x18, 0x0, 0x4}, &(0x7f0000002580)={0x18, 0x0, 0x1, {0x1}}, &(0x7f0000002640)={0x28, 0xfffffffffffffff5, 0x9, {{0x3, 0x3, 0x2}}}, &(0x7f0000002680)={0x60, 0x0, 0x45, {{0x5, 0x4, 0x3, 0x0, 0x1, 0xff, 0xfffffff7, 0x98a}}}, &(0x7f0000002700)={0x18, 0xfffffffffffffffe, 0x6, {0x3}}, &(0x7f0000002740)={0x11, 0x0, 0x8001, {'\x00'}}, &(0x7f0000002780)={0x20, 0x0, 0x1000, {0x0, 0x30}}, &(0x7f00000027c0)={0x78, 0x0, 0x2b0, {0x1, 0x4cd073f3, 0x0, {0x5, 0xfff, 0xe583, 0x4, 0x4, 0x7fff, 0x0, 0x800, 0x7, 0x2000, 0x8, 0xee00, 0x0, 0x400}}}, &(0x7f0000002980)={0x90, 0xffffffffffffffda, 0x5, {0x4, 0x2, 0x0, 0x9, 0xac26, 0x8, {0x5, 0x401, 0x78c, 0x8b69, 0x5, 0x2, 0x9, 0x1, 0x50e8bcea, 0x2000, 0x9, 0x0, 0x0, 0x3, 0x1ff}}}, &(0x7f0000002a40)={0xa8, 0xfffffffffffffff5, 0x10001, [{0x1, 0xc, 0x4, 0xffffffff, 'nbd\x00'}, {0x0, 0x6, 0x7, 0xe76, 'workdir'}, {0x1, 0x1, 0x0, 0x9}, {0x3, 0x8, 0x1, 0x8, ':'}, {0x2, 0x8, 0x7, 0x120, '+\xf3}\x93%%('}]}, &(0x7f0000004fc0)={0x658, 0xfffffffffffffffe, 0x1, [{{0x6, 0x3, 0xabc, 0x0, 0x5, 0xe, {0x3, 0x9, 0x8, 0x2, 0x2, 0x4, 0x8000, 0x8, 0x7f, 0x4000, 0xbd7a, 0x0, 0x0, 0x8, 0x9}}, {0x0, 0x7, 0x8, 0xb27c, 'lowerdir'}}, {{0x5, 0x2, 0xfffffffffffffffb, 0x1, 0x2, 0x5, {0x6, 0x4, 0x1000, 0x100000001, 0xfed, 0x1000, 0x6, 0x6, 0x7, 0x2000, 0x81, 0x0, 0xffffffffffffffff, 0x1, 0x200}}, {0x1, 0x100000001, 0x8, 0x5, 'overlay\x00'}}, {{0x5, 0x0, 0x7, 0x6, 0xa, 0xfff, {0x3, 0x3, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xfffffff8, 0x4, 0x6, 0xf000, 0x5, 0x0, 0x0, 0x4a, 0xfffffff9}}, {0x0, 0x780, 0x4, 0x800, 'nbd\x00'}}, {{0x2, 0x2, 0x1dbb, 0x80000001, 0xb, 0x9, {0x3, 0x9224988, 0xffff, 0x2, 0x9, 0x80000001, 0x1, 0x8, 0x7, 0xa000, 0x6, 0xee01, 0x0, 0x10}}, {0x6, 0x8000, 0x8, 0x9, ')&-!-//['}}, {{0x4, 0x1, 0x5, 0x8000000000000000, 0x1000, 0x9, {0x3, 0xf, 0x6, 0x4, 0xd2, 0x6, 0x0, 0x4, 0x7, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x36, 0x1ff}}, {0x3, 0x100000000, 0xa, 0x0, '\xe3\\{&{\'(,\x00$'}}, {{0x1, 0x1, 0xfffffffffffffbe0, 0x8906, 0x800, 0x1367800, {0x1, 0x4, 0x6, 0x1ff, 0x4, 0x8, 0x0, 0x5, 0xb, 0x2000, 0x23ff4bfa, 0x0, 0x0, 0x3, 0x37}}, {0x4, 0x4, 0x0, 0x1}}, {{0x1, 0x3, 0x8, 0xeb23, 0x4, 0x7, {0x5, 0x80, 0xfa, 0x6, 0x2bdf, 0x7ff, 0xff, 0x9, 0x7, 0x1000, 0x243056e0, 0x0, 0xffffffffffffffff, 0x0, 0x800}}, {0x5, 0x21, 0x1, 0xb, '&'}}, {{0x2, 0x3, 0x3, 0x0, 0x846a, 0x7, {0x6, 0x3, 0xb397, 0xfffffffffffffffd, 0x1, 0x0, 0xba8, 0xf4af, 0x98, 0x6000, 0x8, 0x0, 0x0, 0x10001, 0x7fffffff}}, {0x3, 0xc, 0xc, 0x4, '&,.-.\'.*$}/('}}, {{0x1, 0x1, 0xa, 0x1, 0x7ff, 0x2, {0x1, 0xbcb, 0x8000000000000000, 0x6, 0x1ee23d8f, 0x2, 0x4, 0x2, 0x9, 0x4000, 0xdf6, 0x0, 0x0, 0x9, 0x87}}, {0x4, 0x101, 0x1, 0x10001, '@'}}, {{0x5, 0x1, 0x6d65, 0x3, 0x0, 0x76, {0x4, 0x81a3, 0x7f, 0x8, 0xffffffffffff6a1d, 0x7, 0xfffffff8, 0x8001, 0x2, 0x4000, 0xfffffff9, 0x0, r3, 0x401, 0x4}}, {0x0, 0x6, 0x5, 0x4, '+/\\#!'}}]}, &(0x7f0000005700)={0xa0, 0xffffffffffffffda, 0xd, {{0x3, 0x3, 0x1, 0x2, 0x9, 0xc6, {0x3, 0xd88d, 0x5, 0x3, 0x0, 0x3, 0x2, 0x2, 0xbb, 0x1000, 0x800, r6, r8, 0x0, 0x8}}, {0x0, 0x1}}}, &(0x7f00000057c0)={0x20, 0x0, 0x0, {0x305, 0x0, 0xd7b}}, &(0x7f0000005a00)={0x130, 0x0, 0xfffffffffffffffd, {0x0, 0x7ff, 0x0, '\x00', {0x0, 0x7, 0xff, 0x6, r9, r10, 0xd59913e72663594d, '\x00', 0xfffffffffffffc01, 0x101, 0x463a2673, 0x3, {0x18e}, {0xccc, 0x4}, {0x0, 0x6}, {0x9, 0xa82}, 0x4, 0x9, 0x7fff, 0x5590}}}}) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="389d314baf88242a5db74364fd4e3b040100af8a4d6b4fe7391822a917065e165fd56aae0a9342ab3895c3ac1a79363afe2a433e8135af6c0346af66df5e2b77d81b3022d987601d8db7defcd44650f97a7bb3fa3ca0cd608cfb7d1c71bba0fd575bb75d89", @ANYRESDEC=r12, @ANYRES16=r12, @ANYBLOB="080001001bf15b29ed53f6ee4c94ab", @ANYRES32=r0], 0x90}}, 0x4000040) 70.714599ms ago: executing program 2 (id=1467): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000400)=0x1000, 0x4a9) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66]}, &(0x7f0000000080)={0x0, "7513d8d142f71a1a27cc314cc34550df469f6940256d42176fdb5e07236d4d68c5e76a78cd4ba68f8713c383ba230298e700b0030594d8fe6fe3abd5e70c12fc"}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) keyctl$read(0xf, r2, 0x0, 0x0) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private1, @in=@empty, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffa, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x80000000, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x149c00, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000380)={0xc7, 0x0, 0x1}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/147) (async) syz_emit_ethernet(0x1f, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0011c002bbd183f1bf62bd348052ca"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@supported_rates={0x1, 0x1, [{0x1b}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22040801}, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 391.786µs ago: executing program 3 (id=1468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x5, 0x53ed, {{0x38, 0x4, 0x0, 0x5, 0xe0, 0x67, 0x0, 0x7a, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0x8}]}, @end, @cipso={0x86, 0x50, 0x2, [{0x5, 0x9, "03ff9c7634f1b5"}, {0x6, 0x8, "bec4fdd3266c"}, {0x5, 0x10, "e17b1f53f629a3ad0c945339aad3"}, {0x0, 0xe, "6d17ca43a66964dd4a81ff76"}, {0x1, 0x7, "f2dc13097e"}, {0x7, 0x4, "47a9"}, {0x2, 0x10, "df397168fc252df1b4283ab9c3af"}]}, @cipso={0x86, 0x35, 0x2, [{0x1, 0x11, "f05d683f1406772545826baf098dc3"}, {0x9712bf9327c056e9, 0x9, "b02d408063b725"}, {0x6, 0x2}, {0x5, 0x7, "01a2dcd112"}, {0x2, 0xc, "6392a7876246cc6080ce"}]}, @lsrr={0x83, 0x13, 0x6e, [@local, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @remote]}, @lsrr={0x83, 0x17, 0x49, [@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @multicast2, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040005}, 0x4080) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000480)) r6 = getuid() quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r6, &(0x7f00000004c0)) r7 = signalfd4(r5, &(0x7f0000000540)={[0xfffffffeffffffff]}, 0x8, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r8, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r5) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r8, 0x218, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8005) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000a80)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, &(0x7f0000000b00)) writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)="1c53b28c275625bd4735dfd0cfdcd401eb0987a7e08d6cf21cce7814021b", 0x1e}, {&(0x7f0000000bc0)="fbe4d3405095423eb315cbdfb3d01bdd01d26233c27e1669ee3a26e8aa0cbc91116069876874775055169b7f57bf1f54ae6e7920bac9a72611827ee4d73dfb3024972d0d3294763aa09fe2a77ce9e04a5fd8c84084b86879f592cb9166c1948179a4dba1a46d920f087a106e84edd41a9e65cd79", 0x74}], 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000c80)={0x0, 0x0}) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x10100, 0x20) mkdirat(r12, &(0x7f0000000d40)='./file0\x00', 0x2) read$FUSE(r5, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r5, &(0x7f0000002dc0)={0x28, 0xfffffffffffffffe, r13, {{0x0, 0x6, 0x0, r11}}}, 0x28) writev(r2, &(0x7f0000003480)=[{&(0x7f0000002e00)="034d96c7a8c4f84f2dbab2ee8683c11d25dc18a0e4cd9724e454b850075344c4554f13c75d062f019f3fc2cde8a541680c8579398967934e0948c661e56bfdf4d8b116b67ff0098715d797eaf5aa94e2b1803ce991ab5337b247ff6c3779de2c33c1d657d220f4bc6c5271da400cf082cf73b4d6ec17afbdffc63c8ace45b1f68d1bee1d19777fa26f0797d526677cdaa8d7cc1cb21cf80e6855f9bd3cce377b69b5e904fdd1fd7e80475f9914f9d39adc4a091a1952a158d7254c7583663710bc9e28f0afd7e8f8f8995bd64b6e5f632c9cc3f40b1e56819c1a", 0xda}, {&(0x7f0000002f00)="86864d1c31af83a5ae1f585c2fa519e6c5857191ef34261deddd246dcc319482db49bfc0eb1372342a", 0x29}, {&(0x7f0000002f40)="5cfac0e8d6a4b8015973530edea3c91f098eb3d98f0b68feb2480bbcb245ab26ff3a3cc503381805a5e55505101bfbe15310ddaaea77a39cce0390a378a2ba36b45583f2f6cc677b41258d07d406a5066c96b73fa3180d026b4ae310a22dd21c8a85fa9d5b110b3a65554c9272bfd663e93c52259fe5b9c254", 0x79}, {&(0x7f0000002fc0)="e1aa7b4e6587d10b47ea8d973189802d22f28f11f4f46bf0c5cc4a5371237d604a760527f3cbb46ef463276803cf019208f0df1f9d2dc6e01ac66c2fb686eb806a42ee1799f84df9e0d9ac6b483b03ed", 0x50}, {&(0x7f0000003040)="3d353b068c62dadd406a852d6ffe075e10be48600137affcdd77d53a31f47c3669ddbce450f6bac50e2f2e917d3295e40c1e32c420e02924c8fcd64760134f80ad38198039b091865f00ad50c8f0941cbc04993aa687b9decdac1196c2e7f7673fe0bd5e1dd299e235f1b0d9e6f16cd637ac569b98e7b5bf85f3d3784782eeb5dfd87fd8741dd1d0b51108cd52ff24345fb95a1c3b00c13ee91b0b2eb0a8c71126d5db8d4ee220675b4d2db353c2735f1625b624f86608f23e3c8eb584e430b4c415c66c3d093cc23eaee8087136aa0766a9dfea1685a77eca8f5bb428b381294c2760022e4c2197e93f5a", 0xeb}, {&(0x7f0000003140)="c45c3291786dd3d19c96dfe48c73022f2741b45423c792abd766c85965557b6dcd1cf3d50b626e093c83b40c873749680d6fb30a7c842f39b319b1c77cd20b2f73fd7dc876d1de23909710184948e41e8a6c0a5994b52b57f1e6c2f1ed861e490b471a080e64ee9814bd2323f4b86e1f7230378793c3c02cd4d6107c2fb645e2405497e4faa4", 0x86}, {&(0x7f0000003200)="2ad16a17cdc7c316daa26941d976e2a675aa986608a33d776712da9967af18d5d329286517abf5c8433eed6d34ac4668bff03226c8e1f653ee116011a19086fa250c41", 0x43}, {&(0x7f0000003280)="6ebd54b22703610e700aa4c141cd312d269e67691998b9630971b703633cefdd78dcb073fd611e8d2f92aaea15736c5756859eb4d121fe5e40585bfc3e8ced14e05d28456ee49d0db88a5fea0b01dd55adab76a73c252f0e7c386f9851da93786dfcdf10e840fc273b5390f5d88ae782c06d35637ebeea7892611b1c81c80fdbfc0e939aaa8e57eba490c04d9603cab2270da20602a68e9605045d2efef5dbb1cb35497c550e9bc7c9755427a85064b7767d83ef7fe794fb7028b24de5b661abc218a9", 0xc3}, {&(0x7f0000003380)="4a9ade68515afffc94ff5ca822f8d52e61ba9f066f7280e0c71bf2be249f2b5ad218409f34d3d6792d073f128548d82813bc6525366b02c9e8b0d95e93cfcebf2e732a683016bd1a89243045f50109c29b48c42f909894ba14b31bdc7e40e8f20dd635da26c90c318eef01ac3b69ce1a9c1e4f6d7cc5f64323141e68ac73905f70e07ea7b4a92af1dfaf883f734dfb93dc0415aac89c78c186c18561708c6ea863394b3f761d815a4cca22756388efd25781cfb91e1f518cb29a03eaba5cc481ed3799294a5a7723e9", 0xc9}], 0x9) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r14, &(0x7f0000003680)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 0s ago: executing program 3 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001043, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x10, 0xf989, "cc11bc4d140c64aae8d4491b"}]}}}}}}}}, 0x0) 0s ago: executing program 2 (id=1470): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r4, 0x25, 0x2, @val=@perf_event={0xff}}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x1, 0x7, 0x2, 0xe, {{0x33, 0x4, 0x3, 0x6, 0xcc, 0x66, 0x0, 0x6, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0x7b, 0x0, 0x8, [0x1ff, 0x2, 0x4]}, @rr={0x7, 0x13, 0x4c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x19, [@rand_addr=0x64010102, @empty, @multicast2, @loopback, @broadcast]}, @timestamp={0x44, 0x8, 0x85, 0x0, 0x3, [0xfffffffa]}, @cipso={0x86, 0x66, 0x3, [{0x7, 0x11, "b52a003967d916fc48282d3f52887c"}, {0x2, 0x12, "d7b61de08a11c17c1856de3e450be0ec"}, {0x5, 0x4, "73f0"}, {0x0, 0x5, "68ab97"}, {0x0, 0xb, "780cd6f5745c6d8eb8"}, {0x5, 0xa, "768a39408d218017"}, {0x4, 0xf, "e2d7b1985b75541dd24165e75b"}, {0x7, 0x10, "4dcd07e1c9324c5d96817327cc28"}]}, @generic={0x83, 0x9, "f7bd3a5e7fa467"}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000300)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x25dfdbfd, {0x7, 0x0, 0x0, r10, 0x3, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@RTM_NEWMDB={0xf8, 0x54, 0x800, 0x70bd2b, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@ip4=@rand_addr=0x64010102}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x3, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2b199544b41c0e1a, 0x1, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x0, {@ip4=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x4, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x3, {@ip4=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x0, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}]}, 0xf8}}, 0x0) syz_emit_ethernet(0xfe53, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) kernel console output (not intermixed with test programs): audit(1750502749.667:433): avc: denied { mounton } for pid=7796 comm="syz.3.473" path="mnt:[4026533254]" dev="nsfs" ino=4026533254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.234059][ T7797] dns_resolver: Unsupported content type (234) [ 77.313277][ T40] audit: type=1400 audit(1750502749.747:434): avc: denied { mount } for pid=7800 comm="syz.3.475" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 77.392556][ T7760] can0 (unregistered): slcan off ptm0. [ 77.476609][ T7820] FAULT_INJECTION: forcing a failure. [ 77.476609][ T7820] name failslab, interval 1, probability 0, space 0, times 1 [ 77.480405][ T7820] CPU: 3 UID: 0 PID: 7820 Comm: syz.3.478 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 77.480421][ T7820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.480427][ T7820] Call Trace: [ 77.480431][ T7820] [ 77.480435][ T7820] dump_stack_lvl+0x16c/0x1f0 [ 77.480455][ T7820] should_fail_ex+0x512/0x640 [ 77.480470][ T7820] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 77.480484][ T7820] should_failslab+0xc2/0x120 [ 77.480500][ T7820] __kmalloc_cache_noprof+0x6a/0x3e0 [ 77.480511][ T7820] ? binder_inc_ref_for_node+0x2cd/0x10f0 [ 77.480523][ T7820] ? binder_inc_ref_for_node+0x302/0x10f0 [ 77.480536][ T7820] binder_inc_ref_for_node+0x302/0x10f0 [ 77.480547][ T7820] ? __might_fault+0xe3/0x190 [ 77.480560][ T7820] ? __might_fault+0x13b/0x190 [ 77.480577][ T7820] binder_thread_write+0x31d9/0x4e70 [ 77.480598][ T7820] ? __pfx_binder_thread_write+0x10/0x10 [ 77.480610][ T7820] ? binder_debug+0xde/0x1a0 [ 77.480628][ T7820] ? binder_debug+0xde/0x1a0 [ 77.480642][ T7820] ? __pfx_binder_debug+0x10/0x10 [ 77.480658][ T7820] ? find_held_lock+0x2b/0x80 [ 77.480672][ T7820] ? __might_fault+0xe3/0x190 [ 77.480684][ T7820] ? __might_fault+0x13b/0x190 [ 77.480702][ T7820] binder_ioctl+0x26a7/0x72c0 [ 77.480718][ T7820] ? tomoyo_path_number_perm+0x18d/0x580 [ 77.480734][ T7820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.480748][ T7820] ? __pfx_binder_ioctl+0x10/0x10 [ 77.480758][ T7820] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 77.480773][ T7820] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 77.480789][ T7820] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 77.480805][ T7820] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.480825][ T7820] ? hook_file_ioctl_common+0x145/0x410 [ 77.480839][ T7820] ? selinux_file_ioctl+0x180/0x270 [ 77.480853][ T7820] ? selinux_file_ioctl+0xb4/0x270 [ 77.480868][ T7820] ? __pfx_binder_ioctl+0x10/0x10 [ 77.480879][ T7820] __x64_sys_ioctl+0x18b/0x210 [ 77.480892][ T7820] do_syscall_64+0xcd/0x4c0 [ 77.480909][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.480921][ T7820] RIP: 0033:0x7f5eb958e929 [ 77.480929][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.480939][ T7820] RSP: 002b:00007f5eba3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.480950][ T7820] RAX: ffffffffffffffda RBX: 00007f5eb97b6080 RCX: 00007f5eb958e929 [ 77.480956][ T7820] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 77.480962][ T7820] RBP: 00007f5eba3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 77.480968][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.480974][ T7820] R13: 0000000000000001 R14: 00007f5eb97b6080 R15: 00007ffd73f78eb8 [ 77.480987][ T7820] [ 77.481007][ T7820] binder: 7812:7820 ioctl c0306201 200000000480 returned -14 [ 77.487484][ T40] audit: type=1400 audit(1750502749.917:435): avc: denied { remount } for pid=7821 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 77.489057][ T7793] vhci_hcd: connection reset by peer [ 77.496008][ T7822] binder: BINDER_SET_CONTEXT_MGR already set [ 77.498465][ T1140] vhci_hcd: stop threads [ 77.502335][ T7822] binder: 7821:7822 ioctl 4018620d 2000000001c0 returned -16 [ 77.503112][ T1140] vhci_hcd: release socket [ 77.624237][ T1140] vhci_hcd: disconnect device [ 77.633999][ T40] audit: type=1400 audit(1750502750.067:436): avc: denied { getopt } for pid=7830 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.636662][ T7831] autofs4:pid:7831:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 77.640284][ T40] audit: type=1400 audit(1750502750.067:437): avc: denied { read write } for pid=7830 comm="syz.1.481" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.652129][ T40] audit: type=1400 audit(1750502750.067:438): avc: denied { open } for pid=7830 comm="syz.1.481" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.660791][ T40] audit: type=1400 audit(1750502750.067:439): avc: denied { ioctl } for pid=7830 comm="syz.1.481" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.010081][ T7686] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 78.014221][ T40] audit: type=1400 audit(1750502750.447:440): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 78.036852][ T40] audit: type=1400 audit(1750502750.467:441): avc: denied { ioctl } for pid=7840 comm="syz.2.485" path="socket:[22279]" dev="sockfs" ino=22279 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.066807][ T7843] can0: slcan on ptm0. [ 78.191100][ T7686] usb 6-1: Using ep0 maxpacket: 8 [ 78.210848][ T7686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.215444][ T7686] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.219247][ T7686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.231103][ T7686] usb 6-1: config 0 descriptor?? [ 78.288832][ T7846] can0 (unregistered): slcan off ptm0. [ 78.306209][ T40] audit: type=1400 audit(1750502750.737:442): avc: denied { write } for pid=7852 comm="syz.3.487" path="socket:[19343]" dev="sockfs" ino=19343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.407978][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 78.418467][ T7868] binder: 7863:7868 ioctl c0306201 200000000480 returned -14 [ 78.439910][ T7871] overlayfs: failed to resolve './file0': -2 [ 78.559856][ T5986] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 78.639408][ T7686] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.644698][ T7686] usb 6-1: USB disconnect, device number 8 [ 78.709991][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 78.714725][ T5986] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 78.717913][ T5986] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.721845][ T5986] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.725687][ T5986] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.729593][ T5986] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.734758][ T5986] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.738450][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.946701][ T5986] usb 8-1: usb_control_msg returned -32 [ 78.948671][ T5986] usbtmc 8-1:16.0: can't read capabilities [ 79.253937][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 79.257205][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 79.267806][ T7889] FAULT_INJECTION: forcing a failure. [ 79.267806][ T7889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.271901][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.2.495 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 79.271916][ T7889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.271922][ T7889] Call Trace: [ 79.271926][ T7889] [ 79.271930][ T7889] dump_stack_lvl+0x16c/0x1f0 [ 79.271949][ T7889] should_fail_ex+0x512/0x640 [ 79.271966][ T7889] _copy_from_user+0x2e/0xd0 [ 79.271982][ T7889] binder_thread_write+0x13cd/0x4e70 [ 79.272001][ T7889] ? __pfx_binder_thread_write+0x10/0x10 [ 79.272012][ T7889] ? binder_debug+0xde/0x1a0 [ 79.272032][ T7889] ? find_held_lock+0x2b/0x80 [ 79.272045][ T7889] ? __might_fault+0xe3/0x190 [ 79.272058][ T7889] ? __might_fault+0x13b/0x190 [ 79.272076][ T7889] binder_ioctl+0x26a7/0x72c0 [ 79.272092][ T7889] ? tomoyo_path_number_perm+0x18d/0x580 [ 79.272108][ T7889] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.272121][ T7889] ? __pfx_binder_ioctl+0x10/0x10 [ 79.272132][ T7889] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 79.272147][ T7889] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 79.272163][ T7889] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 79.272179][ T7889] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.272198][ T7889] ? hook_file_ioctl_common+0x145/0x410 [ 79.272212][ T7889] ? selinux_file_ioctl+0x180/0x270 [ 79.272226][ T7889] ? selinux_file_ioctl+0xb4/0x270 [ 79.272241][ T7889] ? __pfx_binder_ioctl+0x10/0x10 [ 79.272252][ T7889] __x64_sys_ioctl+0x18b/0x210 [ 79.272265][ T7889] do_syscall_64+0xcd/0x4c0 [ 79.272282][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.272293][ T7889] RIP: 0033:0x7f1c2eb8e929 [ 79.272302][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.272312][ T7889] RSP: 002b:00007f1c2c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.272322][ T7889] RAX: ffffffffffffffda RBX: 00007f1c2edb6080 RCX: 00007f1c2eb8e929 [ 79.272328][ T7889] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 79.272334][ T7889] RBP: 00007f1c2c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 79.272341][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.272347][ T7889] R13: 0000000000000001 R14: 00007f1c2edb6080 R15: 00007ffc194ba0b8 [ 79.272359][ T7889] [ 79.272365][ T7889] binder: 7883:7889 ioctl c0306201 200000000480 returned -14 [ 79.423954][ T7892] overlay: Unknown parameter 'obj_user' [ 79.540861][ T62] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 79.540909][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.719900][ T5986] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 79.879816][ T5986] usb 5-1: Using ep0 maxpacket: 16 [ 79.885097][ T5986] usb 5-1: config 8 has an invalid interface number: 77 but max is 3 [ 79.888581][ T5986] usb 5-1: config 8 has an invalid interface number: 100 but max is 3 [ 79.892100][ T5986] usb 5-1: config 8 has an invalid interface number: 214 but max is 3 [ 79.895413][ T5986] usb 5-1: config 8 has an invalid interface number: 10 but max is 3 [ 79.898872][ T5986] usb 5-1: config 8 has no interface number 0 [ 79.902395][ T5986] usb 5-1: config 8 has no interface number 1 [ 79.904964][ T5986] usb 5-1: config 8 has no interface number 2 [ 79.907553][ T5986] usb 5-1: config 8 has no interface number 3 [ 79.910220][ T5986] usb 5-1: config 8 interface 77 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 79.914620][ T5986] usb 5-1: config 8 interface 100 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 79.919030][ T5986] usb 5-1: config 8 interface 214 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 79.923630][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 79.927923][ T5986] usb 5-1: config 8 interface 10 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 79.932298][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 79.936458][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 79.944461][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 79.948544][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 79.952869][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 79.957188][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 79.961632][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 79.965892][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 79.969987][ T5986] usb 5-1: config 8 interface 10 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 79.973096][ T5986] usb 5-1: config 8 interface 77 has no altsetting 0 [ 79.975112][ T5986] usb 5-1: config 8 interface 100 has no altsetting 0 [ 79.977129][ T5986] usb 5-1: config 8 interface 214 has no altsetting 0 [ 79.979117][ T5986] usb 5-1: config 8 interface 10 has no altsetting 0 [ 79.983765][ T5986] usb 5-1: New USB device found, idVendor=0db0, idProduct=a877, bcdDevice=a5.46 [ 79.986456][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.988812][ T5986] usb 5-1: Product: І [ 79.990141][ T5986] usb 5-1: Manufacturer: щ [ 79.991542][ T5986] usb 5-1: SerialNumber: 耺谣ë¾é§˜ë¢®ï˜½ëš¬å“§á›¹è›²í‚˜è¿Šæ¼¯é©¤à»ªëƒ´êª•éž„â“¿è®ï«®ë’…艹ìšã¼­ã½¤áµ³è¶¶ë™§ë²¥ë¬ˆîˆ‹ìª¬è´ã¸ã€é”䣭묞㈶ç·è¢à§‹Ý¬é¸šê²›à¿¡ë™˜ç¢šî‹´á£‰áƒ¼îž¸ï³’㸓ë¡åªªï°…çï°ì¸²ç¦ã©ŽçƒŒå‘³ï‘‘⩄씎戩ꨯ遼薓䯙䈺뿵걮᜔îˆíŠ´ãµ´Å™åŽ´å‰æž£â§¦á¾¶ážµè¡ªè¤’蘮å“唔è†â„‹à±‰æˆ«ì°’見腼儵俺秣é嵡戼㠸䋸ïã®âƒÕ¤â„¾çˆ‹î°˜å”¾ã…¸ïž— [ 80.087709][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 80.090062][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 80.207929][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.211723][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.225524][ T5986] asix 5-1:8.77 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.229172][ T5986] asix 5-1:8.77: probe with driver asix failed with error -71 [ 80.234767][ T5986] asix 5-1:8.100 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.238025][ T5986] asix 5-1:8.100: probe with driver asix failed with error -71 [ 80.243350][ T5986] asix 5-1:8.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.246638][ T5986] asix 5-1:8.214: probe with driver asix failed with error -71 [ 80.251621][ T5986] asix 5-1:8.10 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.254736][ T5986] asix 5-1:8.10: probe with driver asix failed with error -71 [ 80.263022][ T5986] usb 5-1: USB disconnect, device number 11 [ 80.270481][ T7910] Invalid source name [ 80.272229][ T7910] UBIFS error (pid: 7910): cannot open "/dev/sg0", error -22 [ 80.295806][ T7912] binder: 7906:7912 ioctl c0306201 200000000480 returned -14 [ 80.418411][ T7914] bond0: (slave bond_slave_0): Releasing backup interface [ 80.424213][ T7914] bond0: (slave bond_slave_1): Releasing backup interface [ 80.443483][ T7914] team0: Port device team_slave_0 removed [ 80.450845][ T7914] team0: Port device team_slave_1 removed [ 80.453395][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.455583][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.458837][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.462387][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.471677][ T7914] bond2: (slave gretap1): Releasing active interface [ 80.553047][ T7914] team0: Mode changed to "activebackup" [ 80.570573][ T7914] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 80.583889][ T7914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.635232][ T7919] netlink: 'syz.2.507': attribute type 4 has an invalid length. [ 80.803881][ T7935] FAULT_INJECTION: forcing a failure. [ 80.803881][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 80.807588][ T7935] CPU: 2 UID: 0 PID: 7935 Comm: syz.0.510 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 80.807603][ T7935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.807609][ T7935] Call Trace: [ 80.807613][ T7935] [ 80.807618][ T7935] dump_stack_lvl+0x16c/0x1f0 [ 80.807637][ T7935] should_fail_ex+0x512/0x640 [ 80.807652][ T7935] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 80.807667][ T7935] should_failslab+0xc2/0x120 [ 80.807682][ T7935] __kmalloc_cache_noprof+0x6a/0x3e0 [ 80.807694][ T7935] ? binder_transaction+0xad0/0x9af0 [ 80.807705][ T7935] ? binder_transaction+0xb85/0x9af0 [ 80.807718][ T7935] binder_transaction+0xb85/0x9af0 [ 80.807734][ T7935] ? __lock_acquire+0x622/0x1c90 [ 80.807752][ T7935] ? kasan_save_stack+0x42/0x60 [ 80.807765][ T7935] ? kasan_save_stack+0x33/0x60 [ 80.807778][ T7935] ? kasan_save_track+0x14/0x30 [ 80.807790][ T7935] ? __kasan_kmalloc+0xaa/0xb0 [ 80.807802][ T7935] ? binder_inc_ref_for_node+0x302/0x10f0 [ 80.807812][ T7935] ? binder_thread_write+0x31d9/0x4e70 [ 80.807822][ T7935] ? binder_ioctl+0x26a7/0x72c0 [ 80.807831][ T7935] ? __x64_sys_ioctl+0x18b/0x210 [ 80.807842][ T7935] ? do_syscall_64+0xcd/0x4c0 [ 80.807857][ T7935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.807870][ T7935] ? __pfx_binder_transaction+0x10/0x10 [ 80.807885][ T7935] ? __lock_acquire+0xb8a/0x1c90 [ 80.807900][ T7935] ? binder_debug+0xde/0x1a0 [ 80.807915][ T7935] ? __pfx_binder_debug+0x10/0x10 [ 80.807934][ T7935] ? __lock_acquire+0xb8a/0x1c90 [ 80.807956][ T7935] ? find_held_lock+0x2b/0x80 [ 80.807968][ T7935] ? __might_fault+0xe3/0x190 [ 80.807982][ T7935] ? __might_fault+0xe3/0x190 [ 80.807994][ T7935] ? __might_fault+0x13b/0x190 [ 80.808012][ T7935] binder_thread_write+0x1417/0x4e70 [ 80.808029][ T7935] ? __pfx_binder_thread_write+0x10/0x10 [ 80.808041][ T7935] ? binder_debug+0xde/0x1a0 [ 80.808060][ T7935] ? find_held_lock+0x2b/0x80 [ 80.808073][ T7935] ? __might_fault+0xe3/0x190 [ 80.808085][ T7935] ? __might_fault+0x13b/0x190 [ 80.808103][ T7935] binder_ioctl+0x26a7/0x72c0 [ 80.808133][ T7935] ? tomoyo_path_number_perm+0x18d/0x580 [ 80.808150][ T7935] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.808164][ T7935] ? __pfx_binder_ioctl+0x10/0x10 [ 80.808174][ T7935] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.808189][ T7935] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 80.808205][ T7935] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 80.808221][ T7935] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.808241][ T7935] ? hook_file_ioctl_common+0x145/0x410 [ 80.808255][ T7935] ? selinux_file_ioctl+0x180/0x270 [ 80.808269][ T7935] ? selinux_file_ioctl+0xb4/0x270 [ 80.808284][ T7935] ? __pfx_binder_ioctl+0x10/0x10 [ 80.808296][ T7935] __x64_sys_ioctl+0x18b/0x210 [ 80.808308][ T7935] do_syscall_64+0xcd/0x4c0 [ 80.808325][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.808336][ T7935] RIP: 0033:0x7f65a418e929 [ 80.808344][ T7935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.808355][ T7935] RSP: 002b:00007f65a5089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.808366][ T7935] RAX: ffffffffffffffda RBX: 00007f65a43b6080 RCX: 00007f65a418e929 [ 80.808372][ T7935] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 80.808379][ T7935] RBP: 00007f65a5089090 R08: 0000000000000000 R09: 0000000000000000 [ 80.808385][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.808391][ T7935] R13: 0000000000000001 R14: 00007f65a43b6080 R15: 00007ffcb9ff6428 [ 80.808408][ T7935] [ 80.808479][ T7935] binder: 7929:7935 ioctl c0306201 200000000480 returned -14 [ 81.102613][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 81.304759][ T7100] usb 8-1: USB disconnect, device number 2 [ 81.317370][ T7946] unknown channel width for channel at 909000KHz? [ 81.390199][ T7953] netlink: 'syz.3.518': attribute type 16 has an invalid length. [ 81.390984][ T60] cfg80211: failed to load regulatory.db [ 81.393156][ T7953] netlink: 'syz.3.518': attribute type 17 has an invalid length. [ 81.414164][ T7957] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 81.414619][ T7955] netlink: 232 bytes leftover after parsing attributes in process `syz.1.519'. [ 81.416806][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.3.518'. [ 81.427670][ T7957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.431071][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 81.445299][ T7957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.447455][ T7957] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 81.453164][ T7957] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 81.528628][ T7962] binder: 7959:7962 ioctl c0306201 200000000480 returned -14 [ 81.688162][ T7974] overlayfs: missing 'workdir' [ 81.740715][ T7997] binder: 7986:7997 ioctl c0306201 200000000480 returned -14 [ 81.774582][ T8001] binder_alloc: 7995: binder_alloc_buf, no vma [ 81.776587][ T8001] binder: 7995:8001 ioctl c0306201 200000000480 returned -14 [ 81.821317][ T8002] FAULT_INJECTION: forcing a failure. [ 81.821317][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 81.825776][ T8002] CPU: 2 UID: 0 PID: 8002 Comm: syz.3.532 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 81.825800][ T8002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.825811][ T8002] Call Trace: [ 81.825817][ T8002] [ 81.825824][ T8002] dump_stack_lvl+0x16c/0x1f0 [ 81.825854][ T8002] should_fail_ex+0x512/0x640 [ 81.825877][ T8002] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 81.825899][ T8002] should_failslab+0xc2/0x120 [ 81.825924][ T8002] __kmalloc_cache_noprof+0x6a/0x3e0 [ 81.825944][ T8002] ? binder_transaction+0xc65/0x9af0 [ 81.825967][ T8002] binder_transaction+0xc65/0x9af0 [ 81.825995][ T8002] ? __lock_acquire+0x622/0x1c90 [ 81.826024][ T8002] ? kasan_save_stack+0x42/0x60 [ 81.826043][ T8002] ? kasan_save_stack+0x33/0x60 [ 81.826063][ T8002] ? kasan_save_track+0x14/0x30 [ 81.826081][ T8002] ? __kasan_kmalloc+0xaa/0xb0 [ 81.826094][ T8002] ? binder_inc_ref_for_node+0x302/0x10f0 [ 81.826105][ T8002] ? binder_thread_write+0x31d9/0x4e70 [ 81.826114][ T8002] ? binder_ioctl+0x26a7/0x72c0 [ 81.826124][ T8002] ? __x64_sys_ioctl+0x18b/0x210 [ 81.826135][ T8002] ? do_syscall_64+0xcd/0x4c0 [ 81.826150][ T8002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.826168][ T8002] ? __pfx_binder_transaction+0x10/0x10 [ 81.826191][ T8002] ? __lock_acquire+0xb8a/0x1c90 [ 81.826217][ T8002] ? binder_debug+0xde/0x1a0 [ 81.826240][ T8002] ? __pfx_binder_debug+0x10/0x10 [ 81.826267][ T8002] ? __lock_acquire+0xb8a/0x1c90 [ 81.826305][ T8002] ? find_held_lock+0x2b/0x80 [ 81.826324][ T8002] ? __might_fault+0xe3/0x190 [ 81.826345][ T8002] ? __might_fault+0xe3/0x190 [ 81.826370][ T8002] ? __might_fault+0x13b/0x190 [ 81.826402][ T8002] binder_thread_write+0x1417/0x4e70 [ 81.826431][ T8002] ? __pfx_binder_thread_write+0x10/0x10 [ 81.826451][ T8002] ? binder_debug+0xde/0x1a0 [ 81.826500][ T8002] ? find_held_lock+0x2b/0x80 [ 81.826520][ T8002] ? __might_fault+0xe3/0x190 [ 81.826539][ T8002] ? __might_fault+0x13b/0x190 [ 81.826570][ T8002] binder_ioctl+0x26a7/0x72c0 [ 81.826598][ T8002] ? tomoyo_path_number_perm+0x18d/0x580 [ 81.826623][ T8002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.826646][ T8002] ? __pfx_binder_ioctl+0x10/0x10 [ 81.826663][ T8002] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 81.826688][ T8002] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 81.826713][ T8002] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 81.826738][ T8002] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.826770][ T8002] ? hook_file_ioctl_common+0x145/0x410 [ 81.826794][ T8002] ? selinux_file_ioctl+0x180/0x270 [ 81.826816][ T8002] ? selinux_file_ioctl+0xb4/0x270 [ 81.826841][ T8002] ? __pfx_binder_ioctl+0x10/0x10 [ 81.826859][ T8002] __x64_sys_ioctl+0x18b/0x210 [ 81.826881][ T8002] do_syscall_64+0xcd/0x4c0 [ 81.826908][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.826926][ T8002] RIP: 0033:0x7f5eb958e929 [ 81.826940][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.826957][ T8002] RSP: 002b:00007f5eba3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.826973][ T8002] RAX: ffffffffffffffda RBX: 00007f5eb97b6080 RCX: 00007f5eb958e929 [ 81.826984][ T8002] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 81.826994][ T8002] RBP: 00007f5eba3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 81.827004][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.827014][ T8002] R13: 0000000000000001 R14: 00007f5eb97b6080 R15: 00007ffd73f78eb8 [ 81.827038][ T8002] [ 81.827156][ T8002] binder: 7999:8002 ioctl c0306201 200000000480 returned -14 [ 82.100048][ T72] vhci_hcd: vhci_device speed not set [ 82.496148][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 82.496159][ T40] audit: type=1400 audit(1750502754.927:454): avc: denied { ioctl } for pid=8003 comm="syz.0.534" path="socket:[24782]" dev="sockfs" ino=24782 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.503871][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'. [ 82.510169][ T40] audit: type=1400 audit(1750502754.937:455): avc: denied { getopt } for pid=8005 comm="syz.1.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.562714][ T8014] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 82.584795][ T8014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.595212][ T40] audit: type=1400 audit(1750502755.027:456): avc: denied { mount } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.603592][ T40] audit: type=1400 audit(1750502755.037:457): avc: denied { search } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.611071][ T40] audit: type=1400 audit(1750502755.037:458): avc: denied { search } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.617950][ T40] audit: type=1400 audit(1750502755.037:459): avc: denied { read open } for pid=8017 comm="syz.0.538" path="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.625696][ T40] audit: type=1400 audit(1750502755.037:460): avc: denied { search } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.634313][ T40] audit: type=1400 audit(1750502755.037:461): avc: denied { search } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.641221][ T40] audit: type=1400 audit(1750502755.037:462): avc: denied { search } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.645904][ T8006] bond4: (slave veth5): Enslaving as an active interface with a down link [ 82.648131][ T40] audit: type=1400 audit(1750502755.037:463): avc: denied { search } for pid=8017 comm="syz.0.538" name="/" dev="configfs" ino=2179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.667601][ T8022] syzkaller1: entered promiscuous mode [ 82.669384][ T8022] syzkaller1: entered allmulticast mode [ 82.787827][ T8050] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 82.900758][ T1120] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 82.903767][ T1120] sr 2:0:0:0: [sr0] tag#21 Sense Key : Illegal Request [current] [ 82.906830][ T1120] sr 2:0:0:0: [sr0] tag#21 Add. Sense: Invalid command operation code [ 82.909345][ T1120] sr 2:0:0:0: [sr0] tag#21 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 82.913319][ T1120] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 82.917654][ T1120] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 82.918422][ T8061] FAULT_INJECTION: forcing a failure. [ 82.918422][ T8061] name failslab, interval 1, probability 0, space 0, times 0 [ 82.920589][ T8060] input: syz1 as /devices/virtual/input/input6 [ 82.924282][ T8061] CPU: 2 UID: 0 PID: 8061 Comm: syz.1.548 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 82.924305][ T8061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.924315][ T8061] Call Trace: [ 82.924320][ T8061] [ 82.924326][ T8061] dump_stack_lvl+0x16c/0x1f0 [ 82.924359][ T8061] should_fail_ex+0x512/0x640 [ 82.924380][ T8061] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 82.924403][ T8061] should_failslab+0xc2/0x120 [ 82.924426][ T8061] __kmalloc_cache_noprof+0x6a/0x3e0 [ 82.924446][ T8061] ? binder_alloc_new_buf+0x1c2/0x3270 [ 82.924468][ T8061] binder_alloc_new_buf+0x1c2/0x3270 [ 82.924498][ T8061] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 82.924516][ T8061] ? find_held_lock+0x2b/0x80 [ 82.924537][ T8061] ? binder_transaction+0x1051/0x9af0 [ 82.924557][ T8061] binder_transaction+0x13f6/0x9af0 [ 82.924588][ T8061] ? __lock_acquire+0x622/0x1c90 [ 82.924618][ T8061] ? kasan_save_track+0x14/0x30 [ 82.924641][ T8061] ? binder_inc_ref_for_node+0x302/0x10f0 [ 82.924657][ T8061] ? binder_thread_write+0x31d9/0x4e70 [ 82.924668][ T8061] ? binder_ioctl+0x26a7/0x72c0 [ 82.924677][ T8061] ? __x64_sys_ioctl+0x18b/0x210 [ 82.924688][ T8061] ? do_syscall_64+0xcd/0x4c0 [ 82.924704][ T8061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.924717][ T8061] ? __pfx_binder_transaction+0x10/0x10 [ 82.924732][ T8061] ? __lock_acquire+0xb8a/0x1c90 [ 82.924748][ T8061] ? binder_debug+0xde/0x1a0 [ 82.924764][ T8061] ? __pfx_binder_debug+0x10/0x10 [ 82.924780][ T8061] ? __lock_acquire+0xb8a/0x1c90 [ 82.924803][ T8061] ? find_held_lock+0x2b/0x80 [ 82.924815][ T8061] ? __might_fault+0xe3/0x190 [ 82.924828][ T8061] ? __might_fault+0xe3/0x190 [ 82.924840][ T8061] ? __might_fault+0x13b/0x190 [ 82.924859][ T8061] binder_thread_write+0x1417/0x4e70 [ 82.924876][ T8061] ? __pfx_binder_thread_write+0x10/0x10 [ 82.924888][ T8061] ? binder_debug+0xde/0x1a0 [ 82.924907][ T8061] ? find_held_lock+0x2b/0x80 [ 82.924920][ T8061] ? __might_fault+0xe3/0x190 [ 82.924932][ T8061] ? __might_fault+0x13b/0x190 [ 82.924950][ T8061] binder_ioctl+0x26a7/0x72c0 [ 82.924966][ T8061] ? tomoyo_path_number_perm+0x18d/0x580 [ 82.924982][ T8061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.924996][ T8061] ? __pfx_binder_ioctl+0x10/0x10 [ 82.925007][ T8061] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 82.925021][ T8061] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 82.925037][ T8061] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 82.925053][ T8061] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.925078][ T8061] ? hook_file_ioctl_common+0x145/0x410 [ 82.925125][ T8061] ? selinux_file_ioctl+0x180/0x270 [ 82.925146][ T8061] ? selinux_file_ioctl+0xb4/0x270 [ 82.925170][ T8061] ? __pfx_binder_ioctl+0x10/0x10 [ 82.925188][ T8061] __x64_sys_ioctl+0x18b/0x210 [ 82.925208][ T8061] do_syscall_64+0xcd/0x4c0 [ 82.925235][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.925251][ T8061] RIP: 0033:0x7f81b638e929 [ 82.925266][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.925282][ T8061] RSP: 002b:00007f81b726b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.925298][ T8061] RAX: ffffffffffffffda RBX: 00007f81b65b6080 RCX: 00007f81b638e929 [ 82.925310][ T8061] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 82.925321][ T8061] RBP: 00007f81b726b090 R08: 0000000000000000 R09: 0000000000000000 [ 82.925331][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.925342][ T8061] R13: 0000000000000001 R14: 00007f81b65b6080 R15: 00007ffc9e95b388 [ 82.925369][ T8061] [ 82.925416][ T8061] binder: 8058:8061 ioctl c0306201 200000000480 returned -14 [ 83.188457][ T8074] can0: slcan on ptm1. [ 83.451157][ T8081] can0 (unregistered): slcan off ptm1. [ 83.458740][ T8088] __nla_validate_parse: 4 callbacks suppressed [ 83.458752][ T8088] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.554'. [ 83.490734][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'. [ 83.493533][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 83.503356][ T8092] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 83.505468][ T8092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.508660][ T8092] vhci_hcd vhci_hcd.0: Device attached [ 83.514740][ T8094] vhci_hcd: connection closed [ 83.514893][ T1140] vhci_hcd: stop threads [ 83.517674][ T1140] vhci_hcd: release socket [ 83.519059][ T1140] vhci_hcd: disconnect device [ 83.816578][ T8106] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 83.895328][ T8119] netlink: 'syz.2.560': attribute type 13 has an invalid length. [ 83.902714][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 84.084652][ T8127] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.565'. [ 84.087767][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 84.157979][ T8135] binder: 8134:8135 ioctl 9361 18000000 returned -22 [ 84.170920][ T8135] binder: 8134:8135 ioctl 5317 200000000080 returned -22 [ 84.225710][ T8136] binder: 8134:8136 ioctl c0306201 200000000480 returned -14 [ 84.486249][ T8152] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 84.489544][ T8152] netlink: 152 bytes leftover after parsing attributes in process `syz.1.570'. [ 84.495612][ T8152] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.503139][ T8152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=8152 comm=syz.1.570 [ 84.509345][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.570'. [ 84.512935][ T8152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.570'. [ 84.579569][ T8160] overlayfs: failed to resolve './file1': -2 [ 84.674380][ T8166] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 84.806206][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 84.817665][ T8180] overlay: ./file1 is not a directory [ 84.863354][ T8186] ip_vti0: Master is either lo or non-ether device [ 84.866841][ T8186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8186 comm=syz.1.581 [ 84.866862][ T8187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8187 comm=syz.1.581 [ 84.901427][ T8191] syzkaller1: entered promiscuous mode [ 84.903291][ T8191] syzkaller1: entered allmulticast mode [ 85.034040][ T8197] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 85.037362][ T8197] openvswitch: netlink: IP tunnel TTL not specified. [ 85.181596][ T72] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 85.339819][ T72] usb 8-1: Using ep0 maxpacket: 32 [ 85.347993][ T72] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.351036][ T72] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 85.354041][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.358415][ T72] usb 8-1: config 0 descriptor?? [ 85.500897][ T8224] loop6: detected capacity change from 0 to 524287999 [ 85.542626][ T8232] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 85.546168][ T8232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.565754][ T72] usb 8-1: language id specifier not provided by device, defaulting to English [ 85.682409][ T62] Bluetooth: hci3: unexpected event for opcode 0x041b [ 85.776880][ T72] usb 8-1: USB disconnect, device number 3 [ 86.062843][ T8259] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=8259 comm=syz.1.608 [ 86.277749][ T8283] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 86.298624][ T8285] 9pnet_fd: Insufficient options for proto=fd [ 86.519147][ T8310] openvswitch: netlink: Port 748486660 exceeds max allowable 65535 [ 86.741098][ T72] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.768244][ T8329] overlay: filesystem on ./bus is read-only [ 86.889856][ T72] usb 7-1: Using ep0 maxpacket: 8 [ 86.893797][ T72] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.897842][ T72] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.901245][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.907427][ T72] usb 7-1: config 0 descriptor?? [ 86.979960][ T5941] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 87.008049][ T8342] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 87.010757][ T8342] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.013903][ T8342] vhci_hcd vhci_hcd.0: Device attached [ 87.016268][ T8343] vhci_hcd: connection closed [ 87.017350][ T81] vhci_hcd: stop threads [ 87.020279][ T81] vhci_hcd: release socket [ 87.022878][ T81] vhci_hcd: disconnect device [ 87.121229][ T72] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.252346][ T8348] netlink: 'syz.3.640': attribute type 2 has an invalid length. [ 87.255197][ T8348] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 87.257662][ T8349] netlink: 'syz.3.640': attribute type 2 has an invalid length. [ 87.260383][ T8349] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 87.509551][ T8359] nftables ruleset with unbound chain [ 87.521910][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.572411][ T8366] xt_cgroup: invalid path, errno=-2 [ 87.574246][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 87.574257][ T40] audit: type=1400 audit(1750502760.007:490): avc: denied { write } for pid=8365 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.578952][ T24] usb 7-1: USB disconnect, device number 3 [ 87.603378][ T40] audit: type=1400 audit(1750502760.037:491): avc: denied { create } for pid=8369 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.616052][ T8372] netlink: 'syz.1.648': attribute type 83 has an invalid length. [ 87.641321][ T40] audit: type=1400 audit(1750502760.077:492): avc: denied { read } for pid=8373 comm="syz.0.649" path="socket:[24160]" dev="sockfs" ino=24160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.691725][ T59] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.695739][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.699493][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.705503][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.711228][ T59] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.716296][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.730255][ T59] usb 8-1: config 0 descriptor?? [ 87.789573][ T8388] netlink: 'syz.0.655': attribute type 7 has an invalid length. [ 87.799315][ T40] audit: type=1400 audit(1750502760.227:493): avc: denied { create } for pid=8387 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 87.806010][ T40] audit: type=1400 audit(1750502760.237:494): avc: denied { write } for pid=8387 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 87.886040][ T8390] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 87.897628][ T8390] fuse: Unknown parameter 'roo∵‘&ÊJ000/00000040000000000000000000000' [ 87.997777][ T40] audit: type=1400 audit(1750502760.427:495): avc: denied { read } for pid=8394 comm="syz.0.659" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.008163][ T40] audit: type=1400 audit(1750502760.427:496): avc: denied { open } for pid=8394 comm="syz.0.659" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.088047][ T40] audit: type=1400 audit(1750502760.517:497): avc: denied { setopt } for pid=8411 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.088181][ T8413] openvswitch: netlink: Message has 16 unknown bytes. [ 88.088237][ T8412] openvswitch: netlink: Message has 16 unknown bytes. [ 88.101827][ T8412] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 88.104462][ T8412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.108009][ T8412] vhci_hcd vhci_hcd.0: Device attached [ 88.111779][ T8416] vhci_hcd: connection closed [ 88.112536][ T66] vhci_hcd: stop threads [ 88.116153][ T66] vhci_hcd: release socket [ 88.117933][ T66] vhci_hcd: disconnect device [ 88.222497][ T40] audit: type=1400 audit(1750502760.657:498): avc: denied { read } for pid=8426 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.350978][ T59] usbhid 8-1:0.0: can't add hid device: -71 [ 88.353571][ T59] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 88.360082][ T59] usb 8-1: USB disconnect, device number 4 [ 88.479706][ T40] audit: type=1400 audit(1750502760.907:499): avc: denied { associate } for pid=8440 comm="syz.2.669" name="blkio.throttle.io_service_bytes_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.980464][ T8463] binder: 8462:8463 ioctl c0306201 200000000080 returned -14 [ 88.983464][ T8464] binder_alloc_mmap_handler: 22 callbacks suppressed [ 88.983479][ T8464] binder_alloc: binder_alloc_mmap_handler: 8462 200000ffd000-200001000000 already mapped failed -16 [ 88.990709][ T8464] binder_alloc: 8462: binder_alloc_buf, no vma [ 88.992615][ T8463] binder: BINDER_SET_CONTEXT_MGR already set [ 88.995270][ T8464] __nla_validate_parse: 14 callbacks suppressed [ 88.995283][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 88.995772][ T8463] binder: 8462:8463 ioctl 4018620d 200000000040 returned -16 [ 89.217976][ T8490] xt_socket: unknown flags 0x50 [ 89.267117][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.685'. [ 89.270737][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 89.273538][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.685'. [ 89.276303][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.685'. [ 89.406519][ T8493] bridge_slave_0: left allmulticast mode [ 89.408910][ T8493] bridge_slave_0: left promiscuous mode [ 89.412346][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.418221][ T8493] bridge_slave_1: left allmulticast mode [ 89.420824][ T8493] bridge_slave_1: left promiscuous mode [ 89.422971][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.429519][ T8493] bond0: (slave bond_slave_0): Releasing backup interface [ 89.438764][ T8493] bond0: (slave bond_slave_1): Releasing backup interface [ 89.454383][ T8493] team0: Port device team_slave_0 removed [ 89.462026][ T8494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.467561][ T8493] team0: Port device team_slave_1 removed [ 89.470242][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.473072][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.476801][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.480281][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.487701][ T8493] bond0: (slave bond1): Releasing backup interface [ 89.516193][ T8493] team0: Mode changed to "loadbalance" [ 89.519270][ T8493] vlan0: entered promiscuous mode [ 89.525628][ T8493] team0: Port device vlan0 added [ 89.528679][ T8493] tipc: Started in network mode [ 89.531008][ T8493] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 89.534190][ T8493] tipc: Enabled bearer , priority 0 [ 89.575348][ T5941] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 89.575386][ T5941] Bluetooth: hci3: adv larger than maximum supported [ 89.578093][ T5941] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 89.581128][ T5941] Bluetooth: hci3: Malformed LE Event: 0x0d [ 89.662584][ T8500] vcan1: entered allmulticast mode [ 89.665296][ T8500] use of bytesused == 0 is deprecated and will be removed in the future, [ 89.668085][ T8500] use the actual size instead. [ 89.672957][ T8501] vcan2: entered allmulticast mode [ 89.722604][ T8507] binder: 8506:8507 ioctl 89e5 200000000400 returned -22 [ 89.808006][ T8511] mkiss: ax0: crc mode is auto. [ 90.078493][ T8526] block device autoloading is deprecated and will be removed. [ 90.101395][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 90.234579][ T8550] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 90.240383][ T8550] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 90.254799][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 90.259154][ T8556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.261530][ T8556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.320348][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 90.367109][ T8568] SELinux: Context system_u:object_r:dpkg_exec_t:s0 is not valid (left unmapped). [ 90.372110][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 90.376157][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.379632][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.514055][ T8586] wg1: entered promiscuous mode [ 90.516311][ T8586] wg1: entered allmulticast mode [ 90.525299][ T8586] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 90.528594][ T8587] vlan2: entered allmulticast mode [ 90.538492][ T8587] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 90.578587][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.714'. [ 90.640159][ T8596] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 90.644265][ T8596] bridge0: entered allmulticast mode [ 90.650590][ T72] tipc: Node number set to 11578026 [ 90.851613][ T8617] syz.2.725: attempt to access beyond end of device [ 90.851613][ T8617] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 90.855885][ T8617] syz.2.725: attempt to access beyond end of device [ 90.855885][ T8617] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 91.290864][ T8168] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 91.417937][ T8657] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 91.420274][ T8168] usb 7-1: device descriptor read/64, error -71 [ 91.438759][ T8657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.443013][ T8657] bond2: (slave bond3): making interface the new active one [ 91.445757][ T8657] bond2: (slave bond3): Enslaving as an active interface with an up link [ 91.491248][ T8661] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 91.560074][ T8665] netlink: 'syz.0.741': attribute type 4 has an invalid length. [ 91.643861][ T8668] overlay: ./file0 is not a directory [ 91.659789][ T8168] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 91.744736][ T8673] pimreg3: entered allmulticast mode [ 91.748544][ T8673] syz.0.743: attempt to access beyond end of device [ 91.748544][ T8673] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 91.752754][ T8673] syz.0.743: attempt to access beyond end of device [ 91.752754][ T8673] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 91.756775][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 91.759843][ T8673] syz.0.743: attempt to access beyond end of device [ 91.759843][ T8673] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 91.763763][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 91.767083][ T8673] syz.0.743: attempt to access beyond end of device [ 91.767083][ T8673] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 91.771209][ T8673] syz.0.743: attempt to access beyond end of device [ 91.771209][ T8673] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 91.775197][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 91.778248][ T8673] syz.0.743: attempt to access beyond end of device [ 91.778248][ T8673] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 91.782306][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 91.785471][ T8673] syz.0.743: attempt to access beyond end of device [ 91.785471][ T8673] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 91.789910][ T8168] usb 7-1: device descriptor read/64, error -71 [ 91.791186][ T8673] syz.0.743: attempt to access beyond end of device [ 91.791186][ T8673] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 91.795860][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 91.798900][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 91.802222][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 91.805126][ T8673] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 91.807916][ T8673] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 91.853343][ T8675] netdevsim netdevsim0: Direct firmware load for . [ 91.853343][ T8675] failed with error -2 [ 91.858480][ T8675] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 91.858480][ T8675] [ 91.900262][ T8168] usb usb7-port1: attempt power cycle [ 92.031516][ T8691] xt_hashlimit: size too large, truncated to 1048576 [ 92.251554][ T8168] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 92.254267][ T8714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 92.256336][ T8714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.258991][ T8714] vhci_hcd vhci_hcd.0: Device attached [ 92.272209][ T8168] usb 7-1: device descriptor read/8, error -71 [ 92.452128][ T8725] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 92.519832][ T5986] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 92.520023][ T8168] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 92.540306][ T8168] usb 7-1: device descriptor read/8, error -71 [ 92.650200][ T8168] usb usb7-port1: unable to enumerate USB device [ 92.703071][ T8749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=8749 comm=syz.1.766 [ 92.760818][ T8755] raw_sendmsg: syz.1.768 forgot to set AF_INET. Fix it! [ 92.987739][ T8715] vhci_hcd: connection reset by peer [ 92.990930][ T1140] vhci_hcd: stop threads [ 92.993112][ T1140] vhci_hcd: release socket [ 92.994566][ T1140] vhci_hcd: disconnect device [ 93.442046][ T8774] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 93.448860][ T8774] team0: Device ipvlan1 failed to register rx_handler [ 93.455680][ T8774] netlink: 'syz.3.772': attribute type 15 has an invalid length. [ 93.556789][ T8784] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 93.569315][ T8784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 93.598564][ T8784] bond4: (slave veth3): Enslaving as an active interface with a down link [ 93.931727][ T8804] overlay: Bad value for 'workdir' [ 93.966046][ T8806] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 94.082885][ T8809] tmpfs: Bad value for 'mpol' [ 94.143795][ T8813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8813 comm=syz.2.787 [ 94.225747][ T8816] __nla_validate_parse: 6 callbacks suppressed [ 94.225760][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.788'. [ 94.235428][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'. [ 94.416120][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 94.416135][ T40] audit: type=1326 audit(1750502766.847:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.0.794" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a418e929 code=0x0 [ 94.513126][ T8839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.795'. [ 94.560683][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'. [ 94.719110][ T40] audit: type=1400 audit(1750502767.147:532): avc: denied { create } for pid=8857 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 94.725762][ T40] audit: type=1400 audit(1750502767.147:533): avc: denied { write } for pid=8857 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 94.725932][ T8858] ip6t_rpfilter: unknown options [ 94.960806][ T8865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.966745][ T8865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.427339][ T8878] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 95.488575][ T40] audit: type=1400 audit(1750502767.917:534): avc: denied { write } for pid=8882 comm="syz.0.808" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.555286][ T8891] vlan0: entered promiscuous mode [ 95.564414][ T8891] team0: Port device vlan0 added [ 96.398605][ T40] audit: type=1400 audit(1750502768.827:535): avc: denied { create } for pid=8949 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 96.728767][ T40] audit: type=1400 audit(1750502769.157:536): avc: denied { map } for pid=8962 comm="syz.0.821" path="pipe:[28884]" dev="pipefs" ino=28884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 96.861995][ T40] audit: type=1400 audit(1750502769.297:537): avc: denied { read append } for pid=8968 comm="syz.0.824" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.870338][ T40] audit: type=1400 audit(1750502769.297:538): avc: denied { open } for pid=8968 comm="syz.0.824" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.917672][ T40] audit: type=1400 audit(1750502769.347:539): avc: denied { connect } for pid=8968 comm="syz.0.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.925990][ T40] audit: type=1400 audit(1750502769.347:540): avc: denied { ioctl } for pid=8968 comm="syz.0.824" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.940693][ T8975] netlink: 68 bytes leftover after parsing attributes in process `syz.1.826'. [ 96.944534][ T8975] netlink: 14 bytes leftover after parsing attributes in process `syz.1.826'. [ 97.344141][ T8995] binder: 8994:8995 ioctl c0306201 2000000003c0 returned -14 [ 97.465150][ T9006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.527721][ T59] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 97.533435][ T59] hid-generic 0005:10CF:0009.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 97.560537][ T9020] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 97.563110][ T9020] netlink: 'syz.3.841': attribute type 4 has an invalid length. [ 97.565582][ T9020] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.841'. [ 97.609807][ T5986] vhci_hcd: vhci_device speed not set [ 97.673347][ T9033] syz_tun: entered allmulticast mode [ 97.678876][ T9033] dvmrp0: entered allmulticast mode [ 97.683564][ T9032] dvmrp0: left allmulticast mode [ 97.685390][ T9032] syz_tun: left allmulticast mode [ 97.887685][ T9047] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 97.998121][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 98.145772][ T9058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9058 comm=syz.1.853 [ 98.245665][ T9083] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 98.257093][ T9087] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 98.260960][ T9083] 8021q: adding VLAN 0 to HW filter on device bond5 [ 98.264030][ T9088] 8021q: VLANs not supported on sit0 [ 98.275027][ T9083] bond5: (slave geneve2): making interface the new active one [ 98.279868][ T9083] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 98.357155][ T9093] could not allocate digest TFM handle sha512-arm64 [ 98.615037][ T9122] xt_hashlimit: overflow, rate too high: 0 [ 98.617166][ T9122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2081 sclass=netlink_route_socket pid=9122 comm=syz.0.873 [ 98.666601][ T9131] binder: BINDER_SET_CONTEXT_MGR already set [ 98.668902][ T9131] binder: 9130:9131 ioctl 4018620d 200000000040 returned -16 [ 98.719173][ T9138] fuse: Bad value for 'group_id' [ 98.721304][ T9138] fuse: Bad value for 'group_id' [ 98.747880][ T9138] overlayfs: workdir and upperdir must reside under the same mount [ 98.794607][ T9146] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 98.797635][ T9146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=91 sclass=netlink_route_socket pid=9146 comm=syz.2.882 [ 98.981864][ T9162] geneve2: entered promiscuous mode [ 98.983739][ T9162] geneve2: entered allmulticast mode [ 99.045798][ T9171] QAT: Invalid ioctl -2144835806 [ 99.106730][ T9176] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 99.223032][ T9183] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 99.234898][ T9186] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 99.278520][ T9190] binder: 9189:9190 ioctl c0306201 0 returned -14 [ 99.284115][ T9190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.897'. [ 99.288670][ T9190] netem: invalid attributes len -17 [ 99.291830][ T9190] netem: change failed [ 99.327006][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.330658][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.404962][ T9195] netlink: 'syz.1.901': attribute type 21 has an invalid length. [ 99.407403][ T9195] netlink: 156 bytes leftover after parsing attributes in process `syz.1.901'. [ 99.412476][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 99.415247][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 99.430524][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.433773][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.467274][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 99.467285][ T40] audit: type=1400 audit(1750502771.897:563): avc: denied { read } for pid=9203 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.490210][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.493595][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.560383][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.569220][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.573331][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.578887][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.583002][ T9214] overlayfs: failed to clone upperpath [ 99.585020][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.593433][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.596657][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.636959][ T9216] xt_hashlimit: size too large, truncated to 1048576 [ 99.691348][ T9220] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 99.693827][ T9220] netlink: 17 bytes leftover after parsing attributes in process `syz.1.907'. [ 99.798343][ T9230] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 99.800817][ T9230] netlink: 232 bytes leftover after parsing attributes in process `syz.2.908'. [ 99.803620][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 99.989646][ T1141] bond0 (unregistering): Released all slaves [ 100.047082][ T1141] bond1 (unregistering): Released all slaves [ 100.106753][ T1141] bond2 (unregistering): Released all slaves [ 100.114554][ T1141] bond3 (unregistering): Released all slaves [ 100.173081][ T1141] bond4 (unregistering): (slave veth3): Releasing active interface [ 100.176664][ T1141] bond4 (unregistering): Released all slaves [ 100.186249][ T9209] chnl_net:caif_netlink_parms(): no params data found [ 100.296345][ T1141] tipc: Disabling bearer [ 100.299170][ T1141] tipc: Left network mode [ 100.299522][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.302987][ T9250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.303233][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.308029][ T9209] bridge_slave_0: entered allmulticast mode [ 100.317720][ T9209] bridge_slave_0: entered promiscuous mode [ 100.320977][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.323343][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.325743][ T9209] bridge_slave_1: entered allmulticast mode [ 100.329531][ T9209] bridge_slave_1: entered promiscuous mode [ 100.437528][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.452997][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.503557][ T9209] team0: Port device team_slave_0 added [ 100.507745][ T9209] team0: Port device team_slave_1 added [ 100.542094][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.544184][ T9262] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 100.544294][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.556214][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 100.557069][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.570586][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.572955][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.581917][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.594114][ T1141] hsr_slave_0: left promiscuous mode [ 100.596199][ T1141] hsr_slave_1: left promiscuous mode [ 100.615884][ T1141] veth1_macvtap: left promiscuous mode [ 100.617902][ T1141] veth0_macvtap: left promiscuous mode [ 100.619682][ T1141] veth1_vlan: left promiscuous mode [ 100.705565][ T1141] pimreg3 (unregistering): left allmulticast mode [ 100.804492][ T1141] team0 (unregistering): Port device vlan0 removed [ 100.862692][ T9273] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.619933][ T62] Bluetooth: hci3: command tx timeout [ 101.776242][ T9209] hsr_slave_0: entered promiscuous mode [ 101.778528][ T9209] hsr_slave_1: entered promiscuous mode [ 101.783986][ T9209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.786562][ T9209] Cannot create hsr debugfs directory [ 101.810516][ T9280] xt_hashlimit: size too large, truncated to 1048576 [ 101.864849][ T40] audit: type=1400 audit(1750502774.297:564): avc: denied { ioctl } for pid=9279 comm="syz.2.920" path="socket:[27210]" dev="sockfs" ino=27210 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 101.954686][ T9209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.964900][ T9209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.970439][ T9209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.984484][ T9209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.065349][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.078850][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.087578][ T1141] IPVS: stop unused estimator thread 0... [ 102.092426][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.095269][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.126471][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.128831][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.191479][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 102.194266][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 102.234061][ T40] audit: type=1400 audit(1750502774.667:565): avc: denied { setattr } for pid=9335 comm="syz.2.931" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.245017][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.327397][ T59] hid-generic 3730:1B2E:07FF.0003: unknown main item tag 0x6 [ 102.333122][ T59] hid-generic 3730:1B2E:07FF.0003: item fetching failed at offset 3/4 [ 102.335944][ T59] hid-generic 3730:1B2E:07FF.0003: probe with driver hid-generic failed with error -22 [ 102.379020][ T5941] Bluetooth: hci4: sending frame failed (-49) [ 102.382376][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 102.424930][ T9209] veth0_vlan: entered promiscuous mode [ 102.433535][ T9209] veth1_vlan: entered promiscuous mode [ 102.453984][ T9209] veth0_macvtap: entered promiscuous mode [ 102.460473][ T9209] veth1_macvtap: entered promiscuous mode [ 102.474445][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.485864][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.493612][ T9209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.496864][ T9209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.500496][ T9209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.503358][ T9209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.553747][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.556927][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.574631][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.578018][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.585992][ T40] audit: type=1400 audit(1750502775.017:566): avc: denied { mounton } for pid=9209 comm="syz-executor" path="/syzkaller.GvgAI1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.599099][ T40] audit: type=1400 audit(1750502775.027:567): avc: denied { mounton } for pid=9209 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.756571][ T9384] macvlan3: entered promiscuous mode [ 102.758317][ T9384] bridge0: entered promiscuous mode [ 102.802269][ T40] audit: type=1400 audit(1750502775.237:568): avc: denied { bind } for pid=9393 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.825017][ T9397] tipc: Started in network mode [ 102.826647][ T9397] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 102.829655][ T9397] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 102.836987][ T9397] tipc: Enabled bearer , priority 10 [ 102.981082][ T8168] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 103.002546][ T40] audit: type=1400 audit(1750502775.437:569): avc: denied { execute } for pid=9413 comm="syz.2.948" path=2F6D656D66643A9D23202864656C6574656429 dev="hugetlbfs" ino=30722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 103.130776][ T8168] usb 9-1: Using ep0 maxpacket: 8 [ 103.134275][ T8168] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.137032][ T8168] usb 9-1: config 179 has no interface number 0 [ 103.139127][ T8168] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 103.142957][ T8168] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 103.146667][ T8168] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 103.150512][ T8168] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 103.154498][ T8168] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.159655][ T8168] usb 9-1: config 179 interface 65 has no altsetting 0 [ 103.163203][ T8168] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 103.166997][ T8168] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.190424][ T8168] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input10 [ 103.240155][ T5338] input input10: unable to receive magic message: -110 [ 103.246704][ T5338] input input10: unable to receive magic message: -32 [ 103.250056][ T5338] input input10: unable to receive magic message: -32 [ 103.254690][ T5338] input input10: unable to receive magic message: -32 [ 103.260819][ T5338] input input10: unable to receive magic message: -32 [ 103.264572][ T5338] input input10: unable to receive magic message: -32 [ 103.268594][ T5338] input input10: unable to receive magic message: -32 [ 103.382438][ T40] audit: type=1400 audit(1750502775.817:570): avc: denied { append } for pid=9380 comm="syz.4.940" name="event4" dev="devtmpfs" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.382666][ T9381] input input10: unable to receive magic message: -32 [ 103.395277][ T9381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.398282][ T9381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.402200][ T24] usb 9-1: USB disconnect, device number 2 [ 103.403321][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.406864][ T24] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 103.699976][ T62] Bluetooth: hci3: command tx timeout [ 103.843469][ T8168] tipc: Node number set to 1 [ 103.877509][ T9438] team0: Unable to change to the same mode the team is in [ 103.882712][ T40] audit: type=1400 audit(1750502776.317:571): avc: denied { write } for pid=9437 comm="syz.2.950" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.000702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.005261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.393088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.399926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.403996][ T40] audit: type=1400 audit(1750502776.837:572): avc: denied { write } for pid=9476 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.512155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.590054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.599877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.636554][ T9504] netlink: 'syz.1.968': attribute type 4 has an invalid length. [ 104.639396][ T9505] __nla_validate_parse: 5 callbacks suppressed [ 104.639405][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 104.649961][ T9505] netlink: 'syz.1.968': attribute type 30 has an invalid length. [ 104.669597][ T9505] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.672926][ T9505] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.676034][ T9505] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.678892][ T9505] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.700036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.847839][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 105.015320][ T9523] ip6gretap1: entered promiscuous mode [ 105.017100][ T9523] ip6gretap1: entered allmulticast mode [ 105.088931][ T9537] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.976'. [ 105.092260][ T9532] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.976'. [ 105.095880][ T9537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9537 comm=syz.4.976 [ 105.102461][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'. [ 105.108071][ T9532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9532 comm=syz.4.976 [ 105.168382][ T9551] Failed to get privilege flags for destination (handle=0x2:0x7) [ 105.187270][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 105.187280][ T40] audit: type=1400 audit(1750502777.617:574): avc: denied { mounton } for pid=9552 comm="syz.2.982" path="/syzcgroup/unified/syz2" dev="pstore" ino=1817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 105.189148][ T9553] bio_check_eod: 4 callbacks suppressed [ 105.189158][ T9553] syz.2.982: attempt to access beyond end of device [ 105.189158][ T9553] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 105.205516][ T9553] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 105.209307][ T9553] 9pnet_fd: Insufficient options for proto=fd [ 105.211927][ T9553] 9pnet_fd: Insufficient options for proto=fd [ 105.310822][ T40] audit: type=1400 audit(1750502777.737:575): avc: denied { write } for pid=9563 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 105.316963][ T40] audit: type=1400 audit(1750502777.747:576): avc: denied { read } for pid=9563 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 105.341996][ T9568] openvswitch: netlink: IPv6 tunnel dst address is zero [ 105.391994][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 105.394906][ T81] Bluetooth: hci4: Frame reassembly failed (-84) [ 105.454576][ T9580] netlink: 'syz.1.992': attribute type 21 has an invalid length. [ 105.457122][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.992'. [ 105.742798][ T40] audit: type=1400 audit(1750502778.177:577): avc: denied { module_load } for pid=9591 comm="syz.1.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 105.779904][ T5941] Bluetooth: hci3: command tx timeout [ 105.878785][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 105.882525][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 105.884800][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 105.929711][ T40] audit: type=1400 audit(1750502778.357:578): avc: denied { getopt } for pid=9605 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.941402][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 105.977272][ T9606] infiniband syz2: set down [ 105.979527][ T7100] vxcan1 speed is unknown, defaulting to 1000 [ 105.979798][ T9606] infiniband syz2: added vxcan1 [ 105.981496][ T7100] syz2: Port: 1 Link DOWN [ 105.999638][ T9606] RDS/IB: syz2: added [ 106.001781][ T9606] smc: adding ib device syz2 with port count 1 [ 106.003806][ T9606] smc: ib device syz2 port 1 has pnetid [ 106.006803][ T7100] vxcan1 speed is unknown, defaulting to 1000 [ 106.009589][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 106.129696][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 106.241452][ T9610] vxcan1 speed is unknown, defaulting to 1000 [ 106.322180][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 106.407523][ T9618] xt_hashlimit: size too large, truncated to 1048576 [ 106.465125][ T9606] vxcan1 speed is unknown, defaulting to 1000 [ 106.473988][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 106.687026][ T40] audit: type=1400 audit(1750502779.117:579): avc: denied { listen } for pid=9623 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.132096][ T1141] smc: removing ib device syz2 [ 107.460246][ T62] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 107.460330][ T5941] Bluetooth: hci4: command 0xfc11 tx timeout [ 107.517205][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 107.581486][ T9643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.743441][ T9658] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 107.765199][ T9658] bond6: entered promiscuous mode [ 107.766961][ T9658] bond6: entered allmulticast mode [ 107.858775][ T40] audit: type=1400 audit(1750502780.287:580): avc: denied { map } for pid=9672 comm="syz.4.1019" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.902252][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 107.948031][ T9685] netlink: 'syz.3.1025': attribute type 14 has an invalid length. [ 107.950652][ T9687] netlink: 'syz.3.1025': attribute type 14 has an invalid length. [ 107.973452][ T40] audit: type=1400 audit(1750502780.407:581): avc: denied { map } for pid=9695 comm="syz.2.1029" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.005684][ T9701] No such timeout policy "syz0" [ 108.008195][ T9704] netlink: 'syz.1.1031': attribute type 18 has an invalid length. [ 108.044976][ T9711] evm: overlay not supported [ 108.189694][ T9726] kernel profiling enabled (shift: 7) [ 108.289047][ T9744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.309033][ T40] audit: type=1400 audit(1750502780.737:582): avc: denied { connect } for pid=9739 comm="syz.2.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.345785][ T9744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.402700][ T9744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.609815][ T7099] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 108.771331][ T7099] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.774514][ T7099] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.777311][ T7099] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 108.780711][ T7099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.786326][ T7099] usb 7-1: config 0 descriptor?? [ 108.792538][ T7099] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 108.795565][ T7099] dvb-usb: bulk message failed: -22 (3/0) [ 108.807835][ T7099] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 108.820123][ T7099] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 108.823038][ T7099] usb 7-1: media controller created [ 108.827465][ T7099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.841807][ T7099] dvb-usb: bulk message failed: -22 (6/0) [ 108.844321][ T7099] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 108.851827][ T7099] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input12 [ 108.860886][ T7099] dvb-usb: schedule remote query interval to 150 msecs. [ 108.863635][ T7099] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 109.029296][ T40] audit: type=1400 audit(1750502781.457:583): avc: denied { read } for pid=9764 comm="syz.4.1046" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.031383][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 109.038845][ T7099] dvb-usb: error while querying for an remote control event. [ 109.059925][ T9771] trusted_key: encrypted_key: master key parameter 'tru%ëÆãsteO:s}z' is invalid [ 109.144589][ T9777] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 109.210217][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 109.212057][ T7099] dvb-usb: error while querying for an remote control event. [ 109.351354][ T9795] binfmt_misc: register: failed to install interpreter file ./file0 [ 109.371115][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 109.373032][ T7099] dvb-usb: error while querying for an remote control event. [ 109.408369][ T9801] IPVS: set_ctl: invalid protocol: 91 172.20.20.67:20002 [ 109.529877][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 109.532010][ T7099] dvb-usb: error while querying for an remote control event. [ 109.691336][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 109.694721][ T7099] dvb-usb: error while querying for an remote control event. [ 109.849849][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 109.852410][ T7099] dvb-usb: error while querying for an remote control event. [ 109.859906][ T62] Bluetooth: hci3: command tx timeout [ 110.009863][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.012337][ T7099] dvb-usb: error while querying for an remote control event. [ 110.139162][ T9813] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 110.148457][ T9813] team0: Device hsr_slave_0 failed to register rx_handler [ 110.169841][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.171699][ T7099] dvb-usb: error while querying for an remote control event. [ 110.222435][ T9816] __nla_validate_parse: 39 callbacks suppressed [ 110.222448][ T9816] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1065'. [ 110.329820][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.331716][ T7099] dvb-usb: error while querying for an remote control event. [ 110.335985][ T9816] kvm: apic: phys broadcast and lowest prio [ 110.397116][ T9838] binder: 9837:9838 ioctl c0306201 200000000100 returned -22 [ 110.404712][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 110.404728][ T40] audit: type=1400 audit(1750502782.837:590): avc: denied { read } for pid=9832 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.405116][ T9838] sctp: [Deprecated]: syz.4.1072 (pid 9838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.405116][ T9838] Use struct sctp_sack_info instead [ 110.425317][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 110.491473][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.494023][ T7099] dvb-usb: error while querying for an remote control event. [ 110.650233][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.653006][ T7099] dvb-usb: error while querying for an remote control event. [ 110.809940][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.812301][ T7099] dvb-usb: error while querying for an remote control event. [ 110.852914][ T9871] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.952947][ T9876] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.991143][ T9869] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1080'. [ 110.991744][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 110.996416][ T7099] dvb-usb: error while querying for an remote control event. [ 110.998021][ T9877] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1080'. [ 111.006710][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 111.149849][ T7099] dvb-usb: bulk message failed: -22 (1/0) [ 111.151837][ T7099] dvb-usb: error while querying for an remote control event. [ 111.167188][ T9883] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 111.170031][ T9883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.173644][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 111.174088][ T40] audit: type=1400 audit(1750502783.607:591): avc: denied { bind } for pid=9884 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.184192][ T9883] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1085'. [ 111.252036][ T9883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.257738][ T9883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.265115][ T9883] bond0 (unregistering): Released all slaves [ 111.270230][ T7099] usb 7-1: USB disconnect, device number 8 [ 111.293590][ T7099] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 111.439982][ T24] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 111.595162][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 111.599650][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 111.603282][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 111.609015][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 111.618787][ T24] usb 9-1: string descriptor 0 read error: -22 [ 111.623415][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.626852][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.641171][ T9900] syz_tun: entered promiscuous mode [ 111.645576][ T9900] batadv_slave_0: entered promiscuous mode [ 111.646186][ T9885] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.652432][ T9900] hsr1: entered allmulticast mode [ 111.656442][ T9900] syz_tun: entered allmulticast mode [ 111.659448][ T9900] batadv_slave_0: entered allmulticast mode [ 111.708882][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 111.741521][ T9898] bond0: entered promiscuous mode [ 111.743974][ T9898] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 111.762979][ T9898] bond0: left promiscuous mode [ 111.765322][ T9898] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 111.861347][ T24] cdc_ncm 9-1:1.0: bind() failure [ 111.883647][ T24] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 111.886976][ T24] cdc_ncm 9-1:1.1: bind() failure [ 111.903124][ T24] usb 9-1: USB disconnect, device number 3 [ 112.157752][ T9914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.217002][ T9914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.282589][ T9914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.391598][ T40] audit: type=1326 audit(1750502784.827:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.3.1098" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb958e929 code=0x0 [ 112.394887][ T9921] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1097'. [ 112.401626][ T9921] tipc: Started in network mode [ 112.403167][ T9921] tipc: Node identity 7, cluster identity 4711 [ 112.405091][ T9921] tipc: Node number set to 7 [ 112.474870][ T9926] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1099'. [ 112.524020][ T9932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.530447][ T9933] netlink: 'syz.2.1100': attribute type 10 has an invalid length. [ 112.534560][ T9933] hsr0: entered promiscuous mode [ 112.534990][ T9932] netlink: 'syz.2.1100': attribute type 10 has an invalid length. [ 112.540742][ T9933] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 112.544562][ T9933] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.548465][ T9933] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 112.560206][ T9932] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 112.563624][ T9932] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 112.567417][ T9932] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 112.977019][ T9953] xt_hashlimit: size too large, truncated to 1048576 [ 113.107055][ T9966] sch_tbf: burst 19872 is lower than device lo mtu (65525) ! [ 113.248654][ T9977] netlink: 'syz.1.1111': attribute type 32 has an invalid length. [ 113.251305][ T9977] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 113.700610][T10004] ip6tnl1: entered allmulticast mode [ 113.716831][T10011] ip6tnl1: entered allmulticast mode [ 113.977550][T10038] netlink: 'syz.2.1119': attribute type 10 has an invalid length. [ 114.060833][ T40] audit: type=1400 audit(1750502786.497:593): avc: denied { bind } for pid=10050 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.063085][T10051] autofs: Bad value for 'fd' [ 114.093843][T10054] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 114.259529][T10084] openvswitch: netlink: Duplicate key (type 0). [ 114.262935][ T40] audit: type=1400 audit(1750502786.687:594): avc: denied { mount } for pid=10081 comm="syz.1.1131" name="/" dev="9p" ino=35913820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.301996][ T40] audit: type=1400 audit(1750502786.737:595): avc: denied { execute } for pid=10086 comm="syz.4.1133" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=33351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 114.360102][ T40] audit: type=1400 audit(1750502786.797:596): avc: denied { listen } for pid=10088 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 114.360989][T10090] netlink: 'syz.2.1132': attribute type 32 has an invalid length. [ 114.368784][T10096] netlink: 'syz.2.1132': attribute type 32 has an invalid length. [ 114.420000][ T62] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 114.423115][ T62] Bluetooth: hci3: Injecting HCI hardware error event [ 114.426331][ T62] Bluetooth: hci3: hardware error 0x00 [ 114.496966][T10097] /dev/nullb0: Can't lookup blockdev [ 114.707129][T10123] hpfs: Bad magic ... probably not HPFS [ 114.715536][T10123] pimreg: entered allmulticast mode [ 114.742972][T10126] program syz.2.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.804685][T10136] input: syz1 as /devices/virtual/input/input14 [ 114.865910][T10142] usb usb8: usbfs: process 10142 (syz.4.1144) did not claim interface 0 before use [ 115.737449][T10190] tmpfs: Cannot enable quota on remount [ 116.077068][T10219] netlink: 'syz.3.1162': attribute type 13 has an invalid length. [ 116.082092][T10219] netlink: 'syz.3.1162': attribute type 21 has an invalid length. [ 116.085126][T10219] __nla_validate_parse: 8 callbacks suppressed [ 116.085138][T10219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1162'. [ 116.109885][ T8168] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 116.122759][ T40] audit: type=1400 audit(1750502788.557:597): avc: denied { ioctl } for pid=10223 comm="syz.1.1163" path="socket:[34982]" dev="sockfs" ino=34982 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.131637][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 116.260084][ T8168] usb 9-1: Using ep0 maxpacket: 8 [ 116.265035][ T8168] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 116.267870][ T8168] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.271295][ T8168] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.274332][ T8168] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.277367][ T8168] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.281527][ T8168] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.284314][ T8168] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.291922][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 116.303749][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.307415][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.315611][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.318660][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.322206][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.326408][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.330782][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.334062][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.338243][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.346629][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.351008][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.355494][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.359025][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.362529][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.365931][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.368838][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.372266][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.375802][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.378670][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.381955][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.385462][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.389264][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.393286][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.396663][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.402338][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.405314][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.407870][ T24] usb 7-1: Product: syz [ 116.409281][ T24] usb 7-1: Manufacturer: syz [ 116.412630][ T24] usb 7-1: SerialNumber: syz [ 116.417541][ T24] usb 7-1: config 0 descriptor?? [ 116.423984][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.475638][ T40] audit: type=1400 audit(1750502788.907:598): avc: denied { watch watch_reads } for pid=10251 comm="syz.1.1169" path="pipe:[33443]" dev="pipefs" ino=33443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 116.489193][T10252] 9pnet_fd: Insufficient options for proto=fd [ 116.499939][ T62] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 116.504092][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.510159][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.515884][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.520633][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.526221][ T8168] usb 9-1: GET_CAPABILITIES returned 0 [ 116.528030][ T8168] usbtmc 9-1:16.0: can't read capabilities [ 116.543040][T10256] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1169'. [ 116.626005][ T8168] usb 7-1: USB disconnect, device number 9 [ 116.632241][ T8168] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 116.911743][ T40] audit: type=1400 audit(1750502789.347:599): avc: denied { setopt } for pid=10207 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.388432][T10289] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.1173'. [ 117.392117][T10289] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.1173'. [ 117.485392][ T40] audit: type=1400 audit(1750502789.917:600): avc: denied { mount } for pid=10294 comm="syz.1.1175" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 117.652580][T10316] netlink: 'syz.1.1181': attribute type 4 has an invalid length. [ 117.716661][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 117.819617][T10331] all: renamed from lo [ 117.863792][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10333 comm=syz.3.1186 [ 117.918076][T10335] openvswitch: netlink: Key type 30 is not supported [ 117.966447][T10339] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 118.044285][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1191'. [ 118.055650][ T40] audit: type=1400 audit(1750502790.487:601): avc: denied { create } for pid=10351 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 118.124167][ T40] audit: type=1400 audit(1750502790.557:602): avc: denied { firmware_load } for pid=10356 comm="syz.3.1193" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 118.173778][T10357] syz.3.1193 (10357) used greatest stack depth: 19640 bytes left [ 118.214062][T10361] program syz.3.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.217106][T10361] ata1.00: non-matching transfer count (32/0) [ 118.309401][T10379] cgroup: none used incorrectly [ 118.317803][T10379] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 118.320435][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 118.410783][ T40] audit: type=1400 audit(1750502790.847:603): avc: denied { shutdown } for pid=10386 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.464697][T10391] netlink: 'syz.1.1203': attribute type 10 has an invalid length. [ 118.473859][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 118.483020][T10391] team0: Cannot enslave team device to itself [ 118.766620][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 118.870589][ T24] usb 9-1: USB disconnect, device number 4 [ 118.876851][ T40] audit: type=1400 audit(1750502791.307:604): avc: denied { execute } for pid=10433 comm="syz.2.1217" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.907880][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 118.916696][T10436] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 118.919202][T10436] netlink: 'syz.4.1218': attribute type 2 has an invalid length. [ 118.989965][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.023288][T10445] netlink: 'syz.4.1222': attribute type 4 has an invalid length. [ 119.023387][T10446] netlink: 'syz.4.1222': attribute type 4 has an invalid length. [ 119.032399][ T40] audit: type=1400 audit(1750502791.467:605): avc: denied { view } for pid=10442 comm="syz.4.1222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 119.032979][T10444] netlink: 'syz.4.1222': attribute type 32 has an invalid length. [ 119.041480][T10444] (unnamed net_device) (uninitialized): option coupled_control: invalid value (9) [ 119.069090][T10447] binder: 10439:10447 ioctl c0306201 200000000040 returned -22 [ 119.088160][T10452] ufs: You didn't specify the type of your ufs filesystem [ 119.088160][T10452] [ 119.088160][T10452] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 119.088160][T10452] [ 119.088160][T10452] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 119.100794][T10452] ufs: ufstype=old is supported read-only [ 119.103400][T10452] syz.4.1224: attempt to access beyond end of device [ 119.103400][T10452] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 119.114157][T10452] ufs: You didn't specify the type of your ufs filesystem [ 119.114157][T10452] [ 119.114157][T10452] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 119.114157][T10452] [ 119.114157][T10452] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 119.124290][T10452] ufs: ufstype=old is supported read-only [ 119.126167][T10452] syz.4.1224: attempt to access beyond end of device [ 119.126167][T10452] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 119.251723][T10469] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.256081][T10469] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 119.273681][ T72] hid (null): unknown global tag 0xd [ 119.275828][ T72] hid (null): report_id 0 is invalid [ 119.282973][ T72] hid-generic 000E:0008:FFFF.0004: unknown global tag 0xd [ 119.283169][ T40] audit: type=1400 audit(1750502791.717:606): avc: denied { read append open } for pid=10468 comm="syz.2.1228" path="/304/file0/pids.current" dev="9p" ino=35913968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.285781][ T72] hid-generic 000E:0008:FFFF.0004: item 0 1 1 13 parsing failed [ 119.286199][ T72] hid-generic 000E:0008:FFFF.0004: probe with driver hid-generic failed with error -22 [ 119.288152][T10469] netfs: Couldn't get user pages (rc=-14) [ 119.345816][T10472] ipvlan2: entered promiscuous mode [ 119.349439][T10472] bridge0: port 3(ipvlan2) entered blocking state [ 119.352984][T10472] bridge0: port 3(ipvlan2) entered disabled state [ 119.355896][T10472] ipvlan2: entered allmulticast mode [ 119.358149][T10472] bridge0: entered allmulticast mode [ 119.362203][T10472] ipvlan2: left allmulticast mode [ 119.364361][T10472] bridge0: left allmulticast mode [ 119.494385][T10482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 119.498635][T10482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=10482 comm=syz.2.1231 [ 119.506287][T10482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10482 comm=syz.2.1231 [ 119.516821][T10482] vlan2: entered allmulticast mode [ 119.518556][T10482] veth1: entered allmulticast mode [ 119.523034][T10482] bond7: (slave vlan2): making interface the new active one [ 119.526405][T10482] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 119.803685][T10499] input: syz1 as /devices/virtual/input/input15 [ 119.888568][T10502] Cannot find map_set index 0 as target [ 119.891148][T10504] tmpfs: Bad value for 'mpol' [ 119.899843][T10506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51200 sclass=netlink_route_socket pid=10506 comm=syz.3.1241 [ 119.986657][T10510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10510 comm=syz.3.1243 [ 119.997644][T10510] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 120.691912][T10557] hsr_slave_1 (unregistering): left promiscuous mode [ 120.993174][T10587] kAFS: No cell specified [ 121.127032][T10601] cgroup: Invalid name [ 121.128817][T10601] __nla_validate_parse: 5 callbacks suppressed [ 121.128826][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 121.133916][T10601] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 121.136253][T10601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.267720][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 121.345793][T10639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10639 comm=syz.1.1283 [ 121.352795][T10639] @: renamed from vlan0 (while UP) [ 121.484699][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 121.484716][ T40] audit: type=1400 audit(1750502793.917:619): avc: denied { create } for pid=10652 comm="syz.2.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.490057][ T5986] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 121.495780][ T40] audit: type=1400 audit(1750502793.927:620): avc: denied { bind } for pid=10652 comm="syz.2.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.503584][ T40] audit: type=1400 audit(1750502793.927:621): avc: denied { name_bind } for pid=10652 comm="syz.2.1288" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 121.505121][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 121.513316][ T40] audit: type=1400 audit(1750502793.927:622): avc: denied { node_bind } for pid=10652 comm="syz.2.1288" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 121.553610][T10659] tmpfs: User quota block hardlimit too large. [ 121.558595][ T40] audit: type=1400 audit(1750502793.987:623): avc: denied { setopt } for pid=10658 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.607921][T10666] bond5: (slave geneve2): Releasing active interface [ 121.615588][T10666] bond7: (slave vlan2): Releasing active interface [ 121.651453][T10672] 9pnet_fd: p9_fd_create_unix (10672): problem connecting socket: éq‰Y’3aK: -91 [ 121.661563][ T5986] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 121.664109][ T5986] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 121.666678][ T5986] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 121.669251][T10672] 9pnet: Could not find request transport: unixncer2 [ 121.669528][ T5986] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 121.677507][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 121.681008][ T5986] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 121.684336][ T5986] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 121.691762][ T5986] usb 9-1: string descriptor 0 read error: -22 [ 121.693855][ T5986] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 121.696634][ T5986] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.700989][ T5986] usb 9-1: config 0 descriptor?? [ 121.702954][T10627] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.703560][ T40] audit: type=1400 audit(1750502794.137:624): avc: denied { write } for pid=10681 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.706081][ T5986] hub 9-1:0.0: bad descriptor, ignoring hub [ 121.713924][ T5986] hub 9-1:0.0: probe with driver hub failed with error -5 [ 121.716551][ T40] audit: type=1400 audit(1750502794.137:625): avc: denied { setopt } for pid=10681 comm="syz.2.1297" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.719026][ T5986] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input16 [ 121.723033][ T40] audit: type=1400 audit(1750502794.137:626): avc: denied { nlmsg_write } for pid=10681 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 121.737174][ T40] audit: type=1400 audit(1750502794.147:627): avc: denied { getopt } for pid=10681 comm="syz.2.1297" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.746160][ T40] audit: type=1400 audit(1750502794.147:628): avc: denied { create } for pid=10681 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 121.778215][ C3] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 121.788191][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 121.812543][T10691] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 121.867222][T10692] hsr_slave_1 (unregistering): left promiscuous mode [ 121.972150][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.975627][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.993417][T10703] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 122.102177][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1305'. [ 122.115770][ T7099] usb 9-1: USB disconnect, device number 5 [ 122.193426][T10726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1308'. [ 122.242154][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 122.808067][T10797] syz.4.1321: attempt to access beyond end of device [ 122.808067][T10797] sr0: rw=4096, sector=0, nr_sectors = 4 limit=0 [ 122.809909][T10800] validate_nla: 2 callbacks suppressed [ 122.809919][T10800] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 122.812446][T10797] EXT4-fs (sr0): unable to read superblock [ 122.982640][T10811] Cannot find del_set index 4 as target [ 123.075866][T10835] bond0: option ad_select: unable to set because the bond device is up [ 123.121810][T10838] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 123.124268][T10838] netlink: 780 bytes leftover after parsing attributes in process `syz.4.1334'. [ 123.147243][T10830] delete_channel: no stack [ 123.178677][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1334'. [ 123.180747][T10841] binder: 10840:10841 ioctl c0306201 200000000640 returned -22 [ 124.534623][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'. [ 124.548639][T10894] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 124.565525][T10894] 8021q: adding VLAN 0 to HW filter on device bond8 [ 124.586295][T10894] veth5: entered promiscuous mode [ 124.591593][T10894] bond8: (slave veth5): Enslaving as an active interface with a down link [ 124.601598][T10894] vlan3: entered allmulticast mode [ 124.603362][T10894] bond8: entered allmulticast mode [ 124.606497][T10894] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 124.855523][T10926] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 125.016247][T10939] bond8: (slave veth5): Releasing active interface [ 125.075087][T10939] team0: Mode changed to "roundrobin" [ 125.419927][ T1467] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 125.570138][ T1467] usb 7-1: Using ep0 maxpacket: 8 [ 125.574115][ T1467] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 125.578157][ T1467] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.582563][ T1467] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.586599][ T1467] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.591521][ T1467] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.596853][ T1467] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.600844][ T1467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.614737][T10987] cgroup: Unknown subsys name 'cpuset' [ 125.685833][T11001] netem: incorrect gi model size [ 125.689111][T11001] netem: change failed [ 125.792030][T11009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.795383][T11009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.805709][T11009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.811167][ T1467] usb 7-1: usb_control_msg returned -32 [ 125.813555][ T1467] usbtmc 7-1:16.0: can't read capabilities [ 125.818337][T11009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.821565][T11009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.829196][T11009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.839042][T11009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.843279][T11021] overlayfs: missing 'lowerdir' [ 125.880852][T11026] bond0: Error: Cannot enslave bond to itself. [ 125.887071][T11026] 8021q: VLANs not supported on ip_vti0 [ 125.933633][T11033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=11033 comm=syz.1.1391 [ 126.008343][T11040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11040 comm=syz.1.1393 [ 126.370558][T11053] __nla_validate_parse: 39 callbacks suppressed [ 126.370572][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 126.419911][ T5941] Bluetooth: hci4: command 0xfc11 tx timeout [ 126.423224][ T62] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 126.483545][T11056] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20001 [ 126.586069][T11062] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1401'. [ 126.633703][T11065] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1401'. [ 126.879447][T11087] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 126.922658][T11087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.945565][T11090] bond4: (slave geneve2): making interface the new active one [ 126.952529][T11090] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 126.983757][T11087] veth5: entered promiscuous mode [ 126.991456][T11087] bond4: (slave veth5): Enslaving as an active interface with a down link [ 127.004665][T11087] vlan2: entered allmulticast mode [ 127.006888][T11087] bond4: entered allmulticast mode [ 127.008503][T11087] geneve2: entered allmulticast mode [ 127.015216][T11087] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 127.170417][ T5986] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 127.343070][ T5986] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.345934][ T5986] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.348440][ T5986] usb 9-1: Product: syz [ 127.349858][ T5986] usb 9-1: Manufacturer: syz [ 127.351300][ T5986] usb 9-1: SerialNumber: syz [ 127.374007][ T5986] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.395400][ T5986] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.611703][T11091] openvswitch: netlink: IP tunnel TTL not specified. [ 127.709685][T11108] netlink: 'syz.1.1414': attribute type 21 has an invalid length. [ 127.712553][T11108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1414'. [ 127.861376][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.861446][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.923073][T11123] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1417'. [ 127.970859][T11134] fuse: Unknown parameter 'rootmodeÏŽQZevSa0000000000100000' [ 128.129291][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 128.129302][ T40] audit: type=1400 audit(1750502800.557:639): avc: denied { setopt } for pid=11143 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 128.179929][ T5649] usb 7-1: USB disconnect, device number 10 [ 128.219638][T11153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 128.221755][T11153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.225216][T11153] vhci_hcd vhci_hcd.0: Device attached [ 128.228758][T11154] usbip_core: unknown command [ 128.232414][T11154] vhci_hcd: unknown pdu 0 [ 128.233954][T11154] usbip_core: unknown command [ 128.236149][ T81] vhci_hcd: stop threads [ 128.237651][ T81] vhci_hcd: release socket [ 128.239152][ T81] vhci_hcd: disconnect device [ 128.329825][T11159] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1409'. [ 128.332956][T11159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1409'. [ 128.420011][ T5986] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 128.422350][ T5986] ath9k_htc: Failed to initialize the device [ 128.442730][ T5986] usb 9-1: ath9k_htc: USB layer deinitialized [ 128.763207][T11164] TCP: TCP_TX_DELAY enabled [ 128.829572][T11166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.833916][ T40] audit: type=1400 audit(1750502801.267:640): avc: denied { ioctl } for pid=11165 comm="syz.2.1427" path="/347/file0/blkio.bfq.io_service_bytes_recursive" dev="9p" ino=35913975 ioctlcmd=0xae76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.081128][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 129.377848][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 129.585293][T11205] overlayfs: failed to clone upperpath [ 129.639881][ T7100] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 129.790008][ T7100] usb 7-1: Using ep0 maxpacket: 8 [ 129.792889][ T7100] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.795990][ T7100] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.799023][ T7100] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.802373][ T7100] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.806418][ T7100] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.809244][ T7100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.940061][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.940087][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.993424][ T5649] usb 9-1: USB disconnect, device number 6 [ 130.025095][ T7100] usb 7-1: GET_CAPABILITIES returned 0 [ 130.026854][ T7100] usbtmc 7-1:16.0: can't read capabilities [ 130.233775][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 130.248740][T11216] sctp: [Deprecated]: syz.4.1442 (pid 11216) Use of int in maxseg socket option. [ 130.248740][T11216] Use struct sctp_assoc_value instead [ 130.255572][ T40] audit: type=1400 audit(1750502802.687:641): avc: denied { accept } for pid=11215 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.303963][T11220] binder: 11219:11220 ioctl c0306201 200000000640 returned -22 [ 130.320140][ T5993] usb 7-1: USB disconnect, device number 11 [ 130.389426][ T40] audit: type=1400 audit(1750502802.817:642): avc: denied { watch } for pid=11231 comm="syz.3.1447" path="/309/file0" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.407372][ T40] audit: type=1400 audit(1750502802.837:643): avc: denied { setopt } for pid=11234 comm="syz.2.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.444552][T11239] netlink: 'syz.3.1450': attribute type 3 has an invalid length. [ 130.447656][T11239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1450'. [ 130.676668][T11267] netlink: 'syz.3.1459': attribute type 39 has an invalid length. [ 130.736937][T11271] loop2: detected capacity change from 0 to 7 [ 130.742490][ T6402] Dev loop2: unable to read RDB block 7 [ 130.744980][ T6402] loop2: AHDI p1 p2 p3 [ 130.748167][ T6402] loop2: partition table partially beyond EOD, truncated [ 130.751098][ T6402] loop2: p1 start 209 is beyond EOD, truncated [ 130.753639][ T6402] loop2: p3 start 335544320 is beyond EOD, truncated [ 130.768355][T11271] Dev loop2: unable to read RDB block 7 [ 130.770874][T11271] loop2: AHDI p1 p2 p3 [ 130.772728][T11271] loop2: partition table partially beyond EOD, truncated [ 130.776914][T11271] loop2: p1 start 209 is beyond EOD, truncated [ 130.779416][T11271] loop2: p3 start 335544320 is beyond EOD, truncated [ 130.893784][T11283] ksmbd: Unknown IPC event: 0, ignore. [ 130.900616][T11283] Mount JFS Failure: -22 [ 131.123831][T11309] BUG: Bad page state in process syz.2.1470 pfn:334fe [ 131.126265][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x334fe [ 131.131037][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.132610][ T40] audit: type=1400 audit(1750502803.567:644): avc: denied { read } for pid=5335 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 131.133285][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 131.140378][ T40] audit: type=1400 audit(1750502803.567:645): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.142782][T11309] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 131.149546][ T40] audit: type=1400 audit(1750502803.567:646): avc: denied { search } for pid=5335 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.152346][T11309] page dumped because: page_pool leak [ 131.152356][T11309] page_owner tracks the page as allocated [ 131.152363][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123676098, free_ts 131090156668 [ 131.152382][T11309] post_alloc_hook+0x1c0/0x230 [ 131.152411][T11309] get_page_from_freelist+0x1321/0x3890 [ 131.152425][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 131.152439][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 131.152453][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 131.152470][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 131.152482][T11309] page_pool_alloc_frag_netmem+0x219/0x9c0 [ 131.152494][T11309] skb_pp_cow_data+0x584/0xff0 [ 131.152505][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 131.152514][T11309] do_xdp_generic+0x530/0x1320 [ 131.152528][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.152543][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.152558][T11309] __netif_receive_skb+0x1d/0x160 [ 131.152571][T11309] netif_receive_skb+0x137/0x7b0 [ 131.152585][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.152603][T11309] tun_get_user+0x28a2/0x3b80 [ 131.161031][ T40] audit: type=1400 audit(1750502803.567:647): avc: denied { add_name } for pid=5335 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.161057][ T40] audit: type=1400 audit(1750502803.567:648): avc: denied { create } for pid=5335 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.162823][T11309] page last free pid 28 tgid 28 stack trace: [ 131.162833][T11309] __free_frozen_pages+0x7fe/0x1180 [ 131.162848][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 131.213456][T11309] rcu_core+0x799/0x14e0 [ 131.214809][T11309] handle_softirqs+0x216/0x8e0 [ 131.216326][T11309] run_ksoftirqd+0x3a/0x60 [ 131.217772][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 131.219360][T11309] kthread+0x3c2/0x780 [ 131.220740][T11309] ret_from_fork+0x5d4/0x6f0 [ 131.222255][T11309] ret_from_fork_asm+0x1a/0x30 [ 131.223778][T11309] Modules linked in: [ 131.225049][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 131.225064][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.225072][T11309] Call Trace: [ 131.225077][T11309] [ 131.225081][T11309] dump_stack_lvl+0x16c/0x1f0 [ 131.225101][T11309] bad_page+0xcf/0x220 [ 131.225118][T11309] ? __pfx_bad_page+0x10/0x10 [ 131.225135][T11309] ? page_bad_reason+0x9d/0x1f0 [ 131.225152][T11309] __free_frozen_pages+0x824/0x1180 [ 131.225166][T11309] ? mark_held_locks+0x49/0x80 [ 131.225185][T11309] page_frag_free+0x27f/0x2e0 [ 131.225201][T11309] __xdp_return+0x38e/0xa90 [ 131.225213][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 131.225229][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 131.225248][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 131.225258][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 131.225280][T11309] do_xdp_generic+0x8e6/0x1320 [ 131.225297][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.225323][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.225342][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.225357][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 131.225372][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.225392][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 131.225404][T11309] ? do_user_addr_fault+0x829/0x1370 [ 131.225424][T11309] ? do_user_addr_fault+0x843/0x1370 [ 131.225441][T11309] ? __lock_acquire+0x622/0x1c90 [ 131.225461][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.225477][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 131.225493][T11309] ? lock_acquire+0x179/0x350 [ 131.225515][T11309] __netif_receive_skb+0x1d/0x160 [ 131.225530][T11309] netif_receive_skb+0x137/0x7b0 [ 131.225544][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.225559][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 131.225580][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.225598][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 131.225618][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 131.225634][T11309] ? rcu_is_watching+0x12/0xc0 [ 131.225650][T11309] tun_get_user+0x28a2/0x3b80 [ 131.225666][T11309] ? io_schedule+0xe0/0x130 [ 131.225686][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 131.225702][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.225723][T11309] ? find_held_lock+0x2b/0x80 [ 131.225737][T11309] ? tun_get+0x191/0x370 [ 131.225755][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.225773][T11309] vfs_write+0x6c4/0x1150 [ 131.225789][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.225807][T11309] ? __pfx_vfs_write+0x10/0x10 [ 131.225820][T11309] ? find_held_lock+0x2b/0x80 [ 131.225842][T11309] ksys_write+0x12a/0x250 [ 131.225856][T11309] ? __pfx_ksys_write+0x10/0x10 [ 131.225874][T11309] do_syscall_64+0xcd/0x4c0 [ 131.225899][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.225911][T11309] RIP: 0033:0x7f1c2eb8d3df [ 131.225920][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.225932][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.225943][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 131.225950][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 131.225957][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.225963][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 131.225970][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 131.225983][T11309] [ 131.225987][T11309] Disabling lock debugging due to kernel taint [ 131.338712][T11309] BUG: Bad page state in process syz.2.1470 pfn:2a220 [ 131.340951][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a220000 pfn:0x2a220 [ 131.344070][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.346290][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 131.349002][T11309] raw: ffff88802a220000 0000000000000001 00000000ffffffff 0000000000000000 [ 131.351732][T11309] page dumped because: page_pool leak [ 131.353427][T11309] page_owner tracks the page as allocated [ 131.355214][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123669639, free_ts 131090165645 [ 131.360497][T11309] post_alloc_hook+0x1c0/0x230 [ 131.362033][T11309] get_page_from_freelist+0x1321/0x3890 [ 131.363774][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 131.365648][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 131.367419][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 131.369308][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 131.371071][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 131.372591][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 131.374240][T11309] do_xdp_generic+0x530/0x1320 [ 131.375754][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.377922][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.379831][T11309] __netif_receive_skb+0x1d/0x160 [ 131.381441][T11309] netif_receive_skb+0x137/0x7b0 [ 131.383025][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.384702][T11309] tun_get_user+0x28a2/0x3b80 [ 131.386199][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.387800][T11309] page last free pid 28 tgid 28 stack trace: [ 131.389772][T11309] __free_frozen_pages+0x7fe/0x1180 [ 131.391427][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 131.393096][T11309] rcu_core+0x799/0x14e0 [ 131.394451][T11309] handle_softirqs+0x216/0x8e0 [ 131.395978][T11309] run_ksoftirqd+0x3a/0x60 [ 131.397437][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 131.399026][T11309] kthread+0x3c2/0x780 [ 131.400387][T11309] ret_from_fork+0x5d4/0x6f0 [ 131.401863][T11309] ret_from_fork_asm+0x1a/0x30 [ 131.403387][T11309] Modules linked in: [ 131.404621][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 131.404651][T11309] Tainted: [B]=BAD_PAGE [ 131.404657][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.404664][T11309] Call Trace: [ 131.404668][T11309] [ 131.404672][T11309] dump_stack_lvl+0x16c/0x1f0 [ 131.404691][T11309] bad_page+0xcf/0x220 [ 131.404708][T11309] ? __pfx_bad_page+0x10/0x10 [ 131.404724][T11309] ? page_bad_reason+0x9d/0x1f0 [ 131.404740][T11309] __free_frozen_pages+0x824/0x1180 [ 131.404753][T11309] ? mark_held_locks+0x49/0x80 [ 131.404770][T11309] page_frag_free+0x27f/0x2e0 [ 131.404786][T11309] __xdp_return+0x38e/0xa90 [ 131.404797][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 131.404811][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 131.404827][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 131.404836][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 131.404854][T11309] do_xdp_generic+0x8e6/0x1320 [ 131.404869][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.404892][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.404910][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.404924][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 131.404937][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.404955][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 131.404967][T11309] ? do_user_addr_fault+0x829/0x1370 [ 131.404984][T11309] ? do_user_addr_fault+0x843/0x1370 [ 131.405001][T11309] ? __lock_acquire+0x622/0x1c90 [ 131.405019][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.405034][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 131.405050][T11309] ? lock_acquire+0x179/0x350 [ 131.405068][T11309] __netif_receive_skb+0x1d/0x160 [ 131.405083][T11309] netif_receive_skb+0x137/0x7b0 [ 131.405097][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.405112][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 131.405130][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.405146][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 131.405162][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 131.405178][T11309] ? rcu_is_watching+0x12/0xc0 [ 131.405192][T11309] tun_get_user+0x28a2/0x3b80 [ 131.405208][T11309] ? io_schedule+0xe0/0x130 [ 131.405225][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 131.405240][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.405258][T11309] ? find_held_lock+0x2b/0x80 [ 131.405271][T11309] ? tun_get+0x191/0x370 [ 131.405287][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.405304][T11309] vfs_write+0x6c4/0x1150 [ 131.405318][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.405336][T11309] ? __pfx_vfs_write+0x10/0x10 [ 131.405348][T11309] ? find_held_lock+0x2b/0x80 [ 131.405365][T11309] ksys_write+0x12a/0x250 [ 131.405378][T11309] ? __pfx_ksys_write+0x10/0x10 [ 131.405393][T11309] do_syscall_64+0xcd/0x4c0 [ 131.405411][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.405422][T11309] RIP: 0033:0x7f1c2eb8d3df [ 131.405431][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.405442][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.405452][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 131.405459][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 131.405466][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.405472][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 131.405479][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 131.405489][T11309] [ 131.405495][T11309] BUG: Bad page state in process syz.2.1470 pfn:21d12 [ 131.519942][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021d12fe0 pfn:0x21d12 [ 131.523073][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.525303][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 131.527988][T11309] raw: ffff888021d12fe0 0000000000000001 00000000ffffffff 0000000000000000 [ 131.530672][T11309] page dumped because: page_pool leak [ 131.532372][T11309] page_owner tracks the page as allocated [ 131.534177][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123663449, free_ts 131090174558 [ 131.539528][T11309] post_alloc_hook+0x1c0/0x230 [ 131.541226][T11309] get_page_from_freelist+0x1321/0x3890 [ 131.542988][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 131.544866][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 131.546620][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 131.548656][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 131.550424][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 131.551953][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 131.553561][T11309] do_xdp_generic+0x530/0x1320 [ 131.555088][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.557230][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.559071][T11309] __netif_receive_skb+0x1d/0x160 [ 131.560748][T11309] netif_receive_skb+0x137/0x7b0 [ 131.562312][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.563977][T11309] tun_get_user+0x28a2/0x3b80 [ 131.565478][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.567104][T11309] page last free pid 28 tgid 28 stack trace: [ 131.569000][T11309] __free_frozen_pages+0x7fe/0x1180 [ 131.570716][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 131.572354][T11309] rcu_core+0x799/0x14e0 [ 131.573706][T11309] handle_softirqs+0x216/0x8e0 [ 131.575249][T11309] run_ksoftirqd+0x3a/0x60 [ 131.576669][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 131.578248][T11309] kthread+0x3c2/0x780 [ 131.579538][T11309] ret_from_fork+0x5d4/0x6f0 [ 131.581062][T11309] ret_from_fork_asm+0x1a/0x30 [ 131.582580][T11309] Modules linked in: [ 131.583831][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 131.583849][T11309] Tainted: [B]=BAD_PAGE [ 131.583853][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.583861][T11309] Call Trace: [ 131.583865][T11309] [ 131.583870][T11309] dump_stack_lvl+0x16c/0x1f0 [ 131.583888][T11309] bad_page+0xcf/0x220 [ 131.583904][T11309] ? __pfx_bad_page+0x10/0x10 [ 131.583921][T11309] ? page_bad_reason+0x9d/0x1f0 [ 131.583937][T11309] __free_frozen_pages+0x824/0x1180 [ 131.583950][T11309] ? mark_held_locks+0x49/0x80 [ 131.583967][T11309] page_frag_free+0x27f/0x2e0 [ 131.583983][T11309] __xdp_return+0x38e/0xa90 [ 131.583994][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 131.584009][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 131.584024][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 131.584033][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 131.584051][T11309] do_xdp_generic+0x8e6/0x1320 [ 131.584070][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.584090][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.584107][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.584120][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 131.584134][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.584151][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 131.584163][T11309] ? do_user_addr_fault+0x829/0x1370 [ 131.584181][T11309] ? do_user_addr_fault+0x843/0x1370 [ 131.584198][T11309] ? __lock_acquire+0x622/0x1c90 [ 131.584215][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.584230][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 131.584246][T11309] ? lock_acquire+0x179/0x350 [ 131.584264][T11309] __netif_receive_skb+0x1d/0x160 [ 131.584279][T11309] netif_receive_skb+0x137/0x7b0 [ 131.584293][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.584308][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 131.584325][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.584341][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 131.584358][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 131.584374][T11309] ? rcu_is_watching+0x12/0xc0 [ 131.584388][T11309] tun_get_user+0x28a2/0x3b80 [ 131.584404][T11309] ? io_schedule+0xe0/0x130 [ 131.584421][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 131.584436][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.584455][T11309] ? find_held_lock+0x2b/0x80 [ 131.584467][T11309] ? tun_get+0x191/0x370 [ 131.584483][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.584500][T11309] vfs_write+0x6c4/0x1150 [ 131.584515][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.584532][T11309] ? __pfx_vfs_write+0x10/0x10 [ 131.584544][T11309] ? find_held_lock+0x2b/0x80 [ 131.584561][T11309] ksys_write+0x12a/0x250 [ 131.584574][T11309] ? __pfx_ksys_write+0x10/0x10 [ 131.584589][T11309] do_syscall_64+0xcd/0x4c0 [ 131.584607][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.584619][T11309] RIP: 0033:0x7f1c2eb8d3df [ 131.584628][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.584654][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.584666][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 131.584673][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 131.584679][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.584686][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 131.584692][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 131.584703][T11309] [ 131.584711][T11309] BUG: Bad page state in process syz.2.1470 pfn:52a61 [ 131.698636][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x52a61 [ 131.701794][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.703991][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 131.706644][T11309] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 131.709330][T11309] page dumped because: page_pool leak [ 131.711071][T11309] page_owner tracks the page as allocated [ 131.712855][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123657303, free_ts 131090183472 [ 131.718074][T11309] post_alloc_hook+0x1c0/0x230 [ 131.719585][T11309] get_page_from_freelist+0x1321/0x3890 [ 131.721373][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 131.723228][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 131.724969][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 131.726810][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 131.728496][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 131.730065][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 131.731648][T11309] do_xdp_generic+0x530/0x1320 [ 131.733172][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.735271][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.737113][T11309] __netif_receive_skb+0x1d/0x160 [ 131.738697][T11309] netif_receive_skb+0x137/0x7b0 [ 131.740319][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.741991][T11309] tun_get_user+0x28a2/0x3b80 [ 131.743481][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.745062][T11309] page last free pid 28 tgid 28 stack trace: [ 131.746931][T11309] __free_frozen_pages+0x7fe/0x1180 [ 131.748562][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 131.750267][T11309] rcu_core+0x799/0x14e0 [ 131.751618][T11309] handle_softirqs+0x216/0x8e0 [ 131.753148][T11309] run_ksoftirqd+0x3a/0x60 [ 131.754563][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 131.756120][T11309] kthread+0x3c2/0x780 [ 131.757423][T11309] ret_from_fork+0x5d4/0x6f0 [ 131.758900][T11309] ret_from_fork_asm+0x1a/0x30 [ 131.760471][T11309] Modules linked in: [ 131.761726][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 131.761744][T11309] Tainted: [B]=BAD_PAGE [ 131.761747][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.761755][T11309] Call Trace: [ 131.761759][T11309] [ 131.761764][T11309] dump_stack_lvl+0x16c/0x1f0 [ 131.761782][T11309] bad_page+0xcf/0x220 [ 131.761798][T11309] ? __pfx_bad_page+0x10/0x10 [ 131.761818][T11309] ? page_bad_reason+0x9d/0x1f0 [ 131.761834][T11309] __free_frozen_pages+0x824/0x1180 [ 131.761847][T11309] ? mark_held_locks+0x49/0x80 [ 131.761864][T11309] page_frag_free+0x27f/0x2e0 [ 131.761879][T11309] __xdp_return+0x38e/0xa90 [ 131.761891][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 131.761905][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 131.761921][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 131.761930][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 131.761948][T11309] do_xdp_generic+0x8e6/0x1320 [ 131.761962][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.761982][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.761999][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.762013][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 131.762026][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.762044][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 131.762056][T11309] ? do_user_addr_fault+0x829/0x1370 [ 131.762074][T11309] ? do_user_addr_fault+0x843/0x1370 [ 131.762090][T11309] ? __lock_acquire+0x622/0x1c90 [ 131.762108][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.762123][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 131.762139][T11309] ? lock_acquire+0x179/0x350 [ 131.762157][T11309] __netif_receive_skb+0x1d/0x160 [ 131.762172][T11309] netif_receive_skb+0x137/0x7b0 [ 131.762186][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.762200][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 131.762218][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.762234][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 131.762250][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 131.762266][T11309] ? rcu_is_watching+0x12/0xc0 [ 131.762281][T11309] tun_get_user+0x28a2/0x3b80 [ 131.762297][T11309] ? io_schedule+0xe0/0x130 [ 131.762314][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 131.762329][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.762347][T11309] ? find_held_lock+0x2b/0x80 [ 131.762360][T11309] ? tun_get+0x191/0x370 [ 131.762376][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.762393][T11309] vfs_write+0x6c4/0x1150 [ 131.762407][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.762424][T11309] ? __pfx_vfs_write+0x10/0x10 [ 131.762437][T11309] ? find_held_lock+0x2b/0x80 [ 131.762453][T11309] ksys_write+0x12a/0x250 [ 131.762466][T11309] ? __pfx_ksys_write+0x10/0x10 [ 131.762482][T11309] do_syscall_64+0xcd/0x4c0 [ 131.762499][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.762511][T11309] RIP: 0033:0x7f1c2eb8d3df [ 131.762520][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.762531][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.762542][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 131.762549][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 131.762556][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.762562][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 131.762569][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 131.762579][T11309] [ 131.762585][T11309] BUG: Bad page state in process syz.2.1470 pfn:5ddab [ 131.884030][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ddabf00 pfn:0x5ddab [ 131.887952][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.890797][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 131.894167][T11309] raw: ffff88805ddabf00 0000000000000001 00000000ffffffff 0000000000000000 [ 131.897539][T11309] page dumped because: page_pool leak [ 131.899632][T11309] page_owner tracks the page as allocated [ 131.901934][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123651148, free_ts 131090188782 [ 131.908523][T11309] post_alloc_hook+0x1c0/0x230 [ 131.910511][T11309] get_page_from_freelist+0x1321/0x3890 [ 131.912659][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 131.914986][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 131.917143][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 131.919477][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 131.921664][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 131.923552][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 131.925534][T11309] do_xdp_generic+0x530/0x1320 [ 131.927464][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.929967][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.932231][T11309] __netif_receive_skb+0x1d/0x160 [ 131.934213][T11309] netif_receive_skb+0x137/0x7b0 [ 131.936155][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.938257][T11309] tun_get_user+0x28a2/0x3b80 [ 131.940186][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.942162][T11309] page last free pid 28 tgid 28 stack trace: [ 131.944512][T11309] __free_frozen_pages+0x7fe/0x1180 [ 131.946569][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 131.948661][T11309] rcu_core+0x799/0x14e0 [ 131.950404][T11309] handle_softirqs+0x216/0x8e0 [ 131.952291][T11309] run_ksoftirqd+0x3a/0x60 [ 131.954066][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 131.956029][T11309] kthread+0x3c2/0x780 [ 131.957664][T11309] ret_from_fork+0x5d4/0x6f0 [ 131.959521][T11309] ret_from_fork_asm+0x1a/0x30 [ 131.961527][T11309] Modules linked in: [ 131.963068][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 131.963089][T11309] Tainted: [B]=BAD_PAGE [ 131.963093][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.963113][T11309] Call Trace: [ 131.963118][T11309] [ 131.963122][T11309] dump_stack_lvl+0x16c/0x1f0 [ 131.963141][T11309] bad_page+0xcf/0x220 [ 131.963157][T11309] ? __pfx_bad_page+0x10/0x10 [ 131.963173][T11309] ? page_bad_reason+0x9d/0x1f0 [ 131.963189][T11309] __free_frozen_pages+0x824/0x1180 [ 131.963202][T11309] ? mark_held_locks+0x49/0x80 [ 131.963220][T11309] page_frag_free+0x27f/0x2e0 [ 131.963236][T11309] __xdp_return+0x38e/0xa90 [ 131.963246][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 131.963261][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 131.963276][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 131.963285][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 131.963303][T11309] do_xdp_generic+0x8e6/0x1320 [ 131.963318][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.963337][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 131.963354][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.963368][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 131.963381][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 131.963398][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 131.963410][T11309] ? do_user_addr_fault+0x829/0x1370 [ 131.963428][T11309] ? do_user_addr_fault+0x843/0x1370 [ 131.963445][T11309] ? __lock_acquire+0x622/0x1c90 [ 131.963462][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 131.963477][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 131.963493][T11309] ? lock_acquire+0x179/0x350 [ 131.963511][T11309] __netif_receive_skb+0x1d/0x160 [ 131.963526][T11309] netif_receive_skb+0x137/0x7b0 [ 131.963540][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.963554][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 131.963572][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 131.963588][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 131.963605][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 131.963621][T11309] ? rcu_is_watching+0x12/0xc0 [ 131.963636][T11309] tun_get_user+0x28a2/0x3b80 [ 131.963651][T11309] ? io_schedule+0xe0/0x130 [ 131.963669][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 131.963684][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.963702][T11309] ? find_held_lock+0x2b/0x80 [ 131.963715][T11309] ? tun_get+0x191/0x370 [ 131.963731][T11309] tun_chr_write_iter+0xdc/0x210 [ 131.963748][T11309] vfs_write+0x6c4/0x1150 [ 131.963762][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.963779][T11309] ? __pfx_vfs_write+0x10/0x10 [ 131.963791][T11309] ? find_held_lock+0x2b/0x80 [ 131.963808][T11309] ksys_write+0x12a/0x250 [ 131.963825][T11309] ? __pfx_ksys_write+0x10/0x10 [ 131.963841][T11309] do_syscall_64+0xcd/0x4c0 [ 131.963858][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.963870][T11309] RIP: 0033:0x7f1c2eb8d3df [ 131.963879][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.963890][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.963900][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 131.963907][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 131.963914][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.963920][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 131.963927][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 131.963937][T11309] [ 131.963954][T11309] BUG: Bad page state in process syz.2.1470 pfn:4c6cd [ 132.029872][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.031473][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c6cdf00 pfn:0x4c6cd [ 132.107203][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.109393][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 132.112144][T11309] raw: ffff88804c6cdf00 0000000000000001 00000000ffffffff 0000000000000000 [ 132.114811][T11309] page dumped because: page_pool leak [ 132.116487][T11309] page_owner tracks the page as allocated [ 132.118292][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123644858, free_ts 131090198017 [ 132.123443][T11309] post_alloc_hook+0x1c0/0x230 [ 132.124967][T11309] get_page_from_freelist+0x1321/0x3890 [ 132.126699][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.128598][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 132.130375][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 132.132184][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 132.133881][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 132.135385][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 132.136908][T11309] do_xdp_generic+0x530/0x1320 [ 132.138396][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.140496][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.142334][T11309] __netif_receive_skb+0x1d/0x160 [ 132.143922][T11309] netif_receive_skb+0x137/0x7b0 [ 132.145497][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.147179][T11309] tun_get_user+0x28a2/0x3b80 [ 132.148677][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.150323][T11309] page last free pid 28 tgid 28 stack trace: [ 132.152193][T11309] __free_frozen_pages+0x7fe/0x1180 [ 132.153837][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 132.155468][T11309] rcu_core+0x799/0x14e0 [ 132.156813][T11309] handle_softirqs+0x216/0x8e0 [ 132.158344][T11309] run_ksoftirqd+0x3a/0x60 [ 132.159810][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 132.161405][T11309] kthread+0x3c2/0x780 [ 132.162682][T11309] ret_from_fork+0x5d4/0x6f0 [ 132.164149][T11309] ret_from_fork_asm+0x1a/0x30 [ 132.165659][T11309] Modules linked in: [ 132.166930][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 132.166948][T11309] Tainted: [B]=BAD_PAGE [ 132.166952][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.166959][T11309] Call Trace: [ 132.166964][T11309] [ 132.166969][T11309] dump_stack_lvl+0x16c/0x1f0 [ 132.166987][T11309] bad_page+0xcf/0x220 [ 132.167003][T11309] ? __pfx_bad_page+0x10/0x10 [ 132.167019][T11309] ? page_bad_reason+0x9d/0x1f0 [ 132.167035][T11309] __free_frozen_pages+0x824/0x1180 [ 132.167048][T11309] ? mark_held_locks+0x49/0x80 [ 132.167065][T11309] page_frag_free+0x27f/0x2e0 [ 132.167081][T11309] __xdp_return+0x38e/0xa90 [ 132.167092][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 132.167106][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 132.167122][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 132.167131][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 132.167148][T11309] do_xdp_generic+0x8e6/0x1320 [ 132.167163][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.167183][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.167200][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.167213][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 132.167226][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.167244][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 132.167256][T11309] ? do_user_addr_fault+0x829/0x1370 [ 132.167274][T11309] ? do_user_addr_fault+0x843/0x1370 [ 132.167290][T11309] ? __lock_acquire+0x622/0x1c90 [ 132.167308][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.167323][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 132.167338][T11309] ? lock_acquire+0x179/0x350 [ 132.167357][T11309] __netif_receive_skb+0x1d/0x160 [ 132.167371][T11309] netif_receive_skb+0x137/0x7b0 [ 132.167385][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.167399][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 132.167418][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.167434][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 132.167450][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 132.167466][T11309] ? rcu_is_watching+0x12/0xc0 [ 132.167480][T11309] tun_get_user+0x28a2/0x3b80 [ 132.167496][T11309] ? io_schedule+0xe0/0x130 [ 132.167513][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 132.167529][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.167547][T11309] ? find_held_lock+0x2b/0x80 [ 132.167560][T11309] ? tun_get+0x191/0x370 [ 132.167576][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.167592][T11309] vfs_write+0x6c4/0x1150 [ 132.167607][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.167624][T11309] ? __pfx_vfs_write+0x10/0x10 [ 132.167637][T11309] ? find_held_lock+0x2b/0x80 [ 132.167653][T11309] ksys_write+0x12a/0x250 [ 132.167667][T11309] ? __pfx_ksys_write+0x10/0x10 [ 132.167685][T11309] do_syscall_64+0xcd/0x4c0 [ 132.167702][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.167714][T11309] RIP: 0033:0x7f1c2eb8d3df [ 132.167722][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.167733][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.167744][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 132.167751][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 132.167758][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.167764][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 132.167771][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 132.167781][T11309] [ 132.167787][T11309] BUG: Bad page state in process syz.2.1470 pfn:2585c [ 132.281838][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2585c [ 132.284938][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.287104][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 132.289822][T11309] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 132.292453][T11309] page dumped because: page_pool leak [ 132.294147][T11309] page_owner tracks the page as allocated [ 132.295912][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123638561, free_ts 131090207297 [ 132.301218][T11309] post_alloc_hook+0x1c0/0x230 [ 132.302734][T11309] get_page_from_freelist+0x1321/0x3890 [ 132.304466][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.306323][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 132.308043][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 132.309903][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 132.311554][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 132.313048][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 132.314638][T11309] do_xdp_generic+0x530/0x1320 [ 132.316162][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.318260][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.320114][T11309] __netif_receive_skb+0x1d/0x160 [ 132.321670][T11309] netif_receive_skb+0x137/0x7b0 [ 132.323186][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.324868][T11309] tun_get_user+0x28a2/0x3b80 [ 132.326364][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.327979][T11309] page last free pid 28 tgid 28 stack trace: [ 132.329924][T11309] __free_frozen_pages+0x7fe/0x1180 [ 132.331556][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 132.333205][T11309] rcu_core+0x799/0x14e0 [ 132.334552][T11309] handle_softirqs+0x216/0x8e0 [ 132.336069][T11309] run_ksoftirqd+0x3a/0x60 [ 132.337532][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 132.339103][T11309] kthread+0x3c2/0x780 [ 132.340441][T11309] ret_from_fork+0x5d4/0x6f0 [ 132.341916][T11309] ret_from_fork_asm+0x1a/0x30 [ 132.343428][T11309] Modules linked in: [ 132.344677][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 132.344694][T11309] Tainted: [B]=BAD_PAGE [ 132.344698][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.344705][T11309] Call Trace: [ 132.344710][T11309] [ 132.344714][T11309] dump_stack_lvl+0x16c/0x1f0 [ 132.344732][T11309] bad_page+0xcf/0x220 [ 132.344748][T11309] ? __pfx_bad_page+0x10/0x10 [ 132.344764][T11309] ? page_bad_reason+0x9d/0x1f0 [ 132.344780][T11309] __free_frozen_pages+0x824/0x1180 [ 132.344793][T11309] ? mark_held_locks+0x49/0x80 [ 132.344810][T11309] page_frag_free+0x27f/0x2e0 [ 132.344830][T11309] __xdp_return+0x38e/0xa90 [ 132.344842][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 132.344856][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 132.344872][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 132.344881][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 132.344899][T11309] do_xdp_generic+0x8e6/0x1320 [ 132.344913][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.344933][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.344950][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.344963][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 132.344976][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.344994][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 132.345006][T11309] ? do_user_addr_fault+0x829/0x1370 [ 132.345023][T11309] ? do_user_addr_fault+0x843/0x1370 [ 132.345040][T11309] ? __lock_acquire+0x622/0x1c90 [ 132.345057][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.345073][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 132.345088][T11309] ? lock_acquire+0x179/0x350 [ 132.345106][T11309] __netif_receive_skb+0x1d/0x160 [ 132.345121][T11309] netif_receive_skb+0x137/0x7b0 [ 132.345134][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.345149][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 132.345167][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.345183][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 132.345200][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 132.345216][T11309] ? rcu_is_watching+0x12/0xc0 [ 132.345230][T11309] tun_get_user+0x28a2/0x3b80 [ 132.345246][T11309] ? io_schedule+0xe0/0x130 [ 132.345263][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 132.345278][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.345296][T11309] ? find_held_lock+0x2b/0x80 [ 132.345309][T11309] ? tun_get+0x191/0x370 [ 132.345325][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.345341][T11309] vfs_write+0x6c4/0x1150 [ 132.345356][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.345373][T11309] ? __pfx_vfs_write+0x10/0x10 [ 132.345386][T11309] ? find_held_lock+0x2b/0x80 [ 132.345402][T11309] ksys_write+0x12a/0x250 [ 132.345415][T11309] ? __pfx_ksys_write+0x10/0x10 [ 132.345431][T11309] do_syscall_64+0xcd/0x4c0 [ 132.345448][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.345460][T11309] RIP: 0033:0x7f1c2eb8d3df [ 132.345469][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.345480][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.345490][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 132.345497][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 132.345504][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.345510][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 132.345516][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 132.345526][T11309] [ 132.345533][T11309] BUG: Bad page state in process syz.2.1470 pfn:55beb [ 132.459470][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055bebf00 pfn:0x55beb [ 132.462636][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.464857][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 132.467542][T11309] raw: ffff888055bebf00 0000000000000001 00000000ffffffff 0000000000000000 [ 132.470213][T11309] page dumped because: page_pool leak [ 132.471884][T11309] page_owner tracks the page as allocated [ 132.473676][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123631877, free_ts 131090212716 [ 132.478944][T11309] post_alloc_hook+0x1c0/0x230 [ 132.480547][T11309] get_page_from_freelist+0x1321/0x3890 [ 132.482299][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.484135][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 132.485903][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 132.487794][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 132.489495][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 132.491072][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 132.492670][T11309] do_xdp_generic+0x530/0x1320 [ 132.494193][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.496308][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.498157][T11309] __netif_receive_skb+0x1d/0x160 [ 132.499799][T11309] netif_receive_skb+0x137/0x7b0 [ 132.501393][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.503059][T11309] tun_get_user+0x28a2/0x3b80 [ 132.504559][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.506142][T11309] page last free pid 28 tgid 28 stack trace: [ 132.508047][T11309] __free_frozen_pages+0x7fe/0x1180 [ 132.509702][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 132.511394][T11309] rcu_core+0x799/0x14e0 [ 132.512752][T11309] handle_softirqs+0x216/0x8e0 [ 132.514278][T11309] run_ksoftirqd+0x3a/0x60 [ 132.515696][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 132.517282][T11309] kthread+0x3c2/0x780 [ 132.518581][T11309] ret_from_fork+0x5d4/0x6f0 [ 132.520105][T11309] ret_from_fork_asm+0x1a/0x30 [ 132.521635][T11309] Modules linked in: [ 132.522894][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 132.522911][T11309] Tainted: [B]=BAD_PAGE [ 132.522915][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.522922][T11309] Call Trace: [ 132.522926][T11309] [ 132.522930][T11309] dump_stack_lvl+0x16c/0x1f0 [ 132.522948][T11309] bad_page+0xcf/0x220 [ 132.522964][T11309] ? __pfx_bad_page+0x10/0x10 [ 132.522980][T11309] ? page_bad_reason+0x9d/0x1f0 [ 132.522996][T11309] __free_frozen_pages+0x824/0x1180 [ 132.523009][T11309] ? mark_held_locks+0x49/0x80 [ 132.523026][T11309] page_frag_free+0x27f/0x2e0 [ 132.523042][T11309] __xdp_return+0x38e/0xa90 [ 132.523053][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 132.523067][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 132.523083][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 132.523092][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 132.523110][T11309] do_xdp_generic+0x8e6/0x1320 [ 132.523125][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.523145][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.523162][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.523175][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 132.523188][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.523206][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 132.523218][T11309] ? do_user_addr_fault+0x829/0x1370 [ 132.523236][T11309] ? do_user_addr_fault+0x843/0x1370 [ 132.523253][T11309] ? __lock_acquire+0x622/0x1c90 [ 132.523270][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.523286][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 132.523301][T11309] ? lock_acquire+0x179/0x350 [ 132.523320][T11309] __netif_receive_skb+0x1d/0x160 [ 132.523334][T11309] netif_receive_skb+0x137/0x7b0 [ 132.523348][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.523363][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 132.523381][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.523397][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 132.523413][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 132.523429][T11309] ? rcu_is_watching+0x12/0xc0 [ 132.523444][T11309] tun_get_user+0x28a2/0x3b80 [ 132.523459][T11309] ? io_schedule+0xe0/0x130 [ 132.523476][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 132.523492][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.523510][T11309] ? find_held_lock+0x2b/0x80 [ 132.523523][T11309] ? tun_get+0x191/0x370 [ 132.523538][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.523556][T11309] vfs_write+0x6c4/0x1150 [ 132.523570][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.523587][T11309] ? __pfx_vfs_write+0x10/0x10 [ 132.523599][T11309] ? find_held_lock+0x2b/0x80 [ 132.523616][T11309] ksys_write+0x12a/0x250 [ 132.523629][T11309] ? __pfx_ksys_write+0x10/0x10 [ 132.523645][T11309] do_syscall_64+0xcd/0x4c0 [ 132.523662][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.523674][T11309] RIP: 0033:0x7f1c2eb8d3df [ 132.523682][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.523693][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.523703][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 132.523710][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 132.523717][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.523723][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 132.523730][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 132.523740][T11309] [ 132.523746][T11309] BUG: Bad page state in process syz.2.1470 pfn:4ef2d [ 132.590974][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.592176][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ef2d [ 132.592191][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.592205][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 132.592215][T11309] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 132.649512][T11309] page dumped because: page_pool leak [ 132.651258][T11309] page_owner tracks the page as allocated [ 132.653042][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123625222, free_ts 131090222673 [ 132.658439][T11309] post_alloc_hook+0x1c0/0x230 [ 132.660049][T11309] get_page_from_freelist+0x1321/0x3890 [ 132.661793][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.663649][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 132.665402][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 132.667278][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 132.668980][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 132.670557][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 132.672137][T11309] do_xdp_generic+0x530/0x1320 [ 132.673661][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.675758][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.677598][T11309] __netif_receive_skb+0x1d/0x160 [ 132.679184][T11309] netif_receive_skb+0x137/0x7b0 [ 132.680804][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.682477][T11309] tun_get_user+0x28a2/0x3b80 [ 132.683967][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.685527][T11309] page last free pid 28 tgid 28 stack trace: [ 132.687390][T11309] __free_frozen_pages+0x7fe/0x1180 [ 132.689039][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 132.690722][T11309] rcu_core+0x799/0x14e0 [ 132.692063][T11309] handle_softirqs+0x216/0x8e0 [ 132.693575][T11309] run_ksoftirqd+0x3a/0x60 [ 132.694999][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 132.696563][T11309] kthread+0x3c2/0x780 [ 132.697876][T11309] ret_from_fork+0x5d4/0x6f0 [ 132.699348][T11309] ret_from_fork_asm+0x1a/0x30 [ 132.700932][T11309] Modules linked in: [ 132.702174][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 132.702192][T11309] Tainted: [B]=BAD_PAGE [ 132.702196][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.702203][T11309] Call Trace: [ 132.702207][T11309] [ 132.702211][T11309] dump_stack_lvl+0x16c/0x1f0 [ 132.702229][T11309] bad_page+0xcf/0x220 [ 132.702246][T11309] ? __pfx_bad_page+0x10/0x10 [ 132.702261][T11309] ? page_bad_reason+0x9d/0x1f0 [ 132.702277][T11309] __free_frozen_pages+0x824/0x1180 [ 132.702290][T11309] ? mark_held_locks+0x49/0x80 [ 132.702308][T11309] page_frag_free+0x27f/0x2e0 [ 132.702323][T11309] __xdp_return+0x38e/0xa90 [ 132.702335][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 132.702349][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 132.702365][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 132.702373][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 132.702392][T11309] do_xdp_generic+0x8e6/0x1320 [ 132.702406][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.702426][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.702443][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.702456][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 132.702469][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.702487][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 132.702498][T11309] ? do_user_addr_fault+0x829/0x1370 [ 132.702516][T11309] ? do_user_addr_fault+0x843/0x1370 [ 132.702533][T11309] ? __lock_acquire+0x622/0x1c90 [ 132.702551][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.702566][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 132.702581][T11309] ? lock_acquire+0x179/0x350 [ 132.702600][T11309] __netif_receive_skb+0x1d/0x160 [ 132.702614][T11309] netif_receive_skb+0x137/0x7b0 [ 132.702628][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.702642][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 132.702661][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.702677][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 132.702693][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 132.702709][T11309] ? rcu_is_watching+0x12/0xc0 [ 132.702724][T11309] tun_get_user+0x28a2/0x3b80 [ 132.702739][T11309] ? io_schedule+0xe0/0x130 [ 132.702756][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 132.702772][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.702790][T11309] ? find_held_lock+0x2b/0x80 [ 132.702802][T11309] ? tun_get+0x191/0x370 [ 132.702818][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.702840][T11309] vfs_write+0x6c4/0x1150 [ 132.702854][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.702871][T11309] ? __pfx_vfs_write+0x10/0x10 [ 132.702884][T11309] ? find_held_lock+0x2b/0x80 [ 132.702900][T11309] ksys_write+0x12a/0x250 [ 132.702913][T11309] ? __pfx_ksys_write+0x10/0x10 [ 132.702928][T11309] do_syscall_64+0xcd/0x4c0 [ 132.702946][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.702958][T11309] RIP: 0033:0x7f1c2eb8d3df [ 132.702967][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.702978][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.702989][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 132.702996][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 132.703002][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.703009][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 132.703016][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 132.703026][T11309] [ 132.703033][T11309] BUG: Bad page state in process syz.2.1470 pfn:127ad [ 132.816460][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x238 pfn:0x127ad [ 132.819235][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.821497][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 132.824147][T11309] raw: 0000000000000238 0000000000000001 00000000ffffffff 0000000000000000 [ 132.826801][T11309] page dumped because: page_pool leak [ 132.828499][T11309] page_owner tracks the page as allocated [ 132.830347][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123618812, free_ts 131090232584 [ 132.835558][T11309] post_alloc_hook+0x1c0/0x230 [ 132.837076][T11309] get_page_from_freelist+0x1321/0x3890 [ 132.838808][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.840761][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 132.842530][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 132.844405][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 132.846091][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 132.847617][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 132.849203][T11309] do_xdp_generic+0x530/0x1320 [ 132.850750][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.852859][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.854675][T11309] __netif_receive_skb+0x1d/0x160 [ 132.856254][T11309] netif_receive_skb+0x137/0x7b0 [ 132.857825][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.859494][T11309] tun_get_user+0x28a2/0x3b80 [ 132.861046][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.862612][T11309] page last free pid 28 tgid 28 stack trace: [ 132.864479][T11309] __free_frozen_pages+0x7fe/0x1180 [ 132.866122][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 132.867782][T11309] rcu_core+0x799/0x14e0 [ 132.869130][T11309] handle_softirqs+0x216/0x8e0 [ 132.870684][T11309] run_ksoftirqd+0x3a/0x60 [ 132.872095][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 132.873656][T11309] kthread+0x3c2/0x780 [ 132.874947][T11309] ret_from_fork+0x5d4/0x6f0 [ 132.876405][T11309] ret_from_fork_asm+0x1a/0x30 [ 132.877945][T11309] Modules linked in: [ 132.879192][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 132.879209][T11309] Tainted: [B]=BAD_PAGE [ 132.879213][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.879221][T11309] Call Trace: [ 132.879225][T11309] [ 132.879229][T11309] dump_stack_lvl+0x16c/0x1f0 [ 132.879247][T11309] bad_page+0xcf/0x220 [ 132.879263][T11309] ? __pfx_bad_page+0x10/0x10 [ 132.879279][T11309] ? page_bad_reason+0x9d/0x1f0 [ 132.879295][T11309] __free_frozen_pages+0x824/0x1180 [ 132.879308][T11309] ? mark_held_locks+0x49/0x80 [ 132.879325][T11309] page_frag_free+0x27f/0x2e0 [ 132.879341][T11309] __xdp_return+0x38e/0xa90 [ 132.879352][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 132.879366][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 132.879382][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 132.879391][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 132.879408][T11309] do_xdp_generic+0x8e6/0x1320 [ 132.879423][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.879443][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 132.879460][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.879473][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 132.879487][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 132.879504][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 132.879516][T11309] ? do_user_addr_fault+0x829/0x1370 [ 132.879534][T11309] ? do_user_addr_fault+0x843/0x1370 [ 132.879551][T11309] ? __lock_acquire+0x622/0x1c90 [ 132.879569][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 132.879584][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 132.879599][T11309] ? lock_acquire+0x179/0x350 [ 132.879618][T11309] __netif_receive_skb+0x1d/0x160 [ 132.879632][T11309] netif_receive_skb+0x137/0x7b0 [ 132.879646][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.879661][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 132.879679][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 132.879695][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 132.879712][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 132.879740][T11309] ? rcu_is_watching+0x12/0xc0 [ 132.879754][T11309] tun_get_user+0x28a2/0x3b80 [ 132.879770][T11309] ? io_schedule+0xe0/0x130 [ 132.879787][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 132.879803][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.879824][T11309] ? find_held_lock+0x2b/0x80 [ 132.879838][T11309] ? tun_get+0x191/0x370 [ 132.879854][T11309] tun_chr_write_iter+0xdc/0x210 [ 132.879870][T11309] vfs_write+0x6c4/0x1150 [ 132.879884][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.879901][T11309] ? __pfx_vfs_write+0x10/0x10 [ 132.879914][T11309] ? find_held_lock+0x2b/0x80 [ 132.879931][T11309] ksys_write+0x12a/0x250 [ 132.879944][T11309] ? __pfx_ksys_write+0x10/0x10 [ 132.879960][T11309] do_syscall_64+0xcd/0x4c0 [ 132.879978][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.879989][T11309] RIP: 0033:0x7f1c2eb8d3df [ 132.879999][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 132.880010][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 132.880021][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 132.880028][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 132.880035][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.880041][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 132.880048][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 132.880058][T11309] [ 132.990659][T11309] BUG: Bad page state in process syz.2.1470 pfn:354d5 [ 132.992805][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x27b pfn:0x354d5 [ 132.995562][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.997741][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 133.000484][T11309] raw: 000000000000027b 0000000000000001 00000000ffffffff 0000000000000000 [ 133.003163][T11309] page dumped because: page_pool leak [ 133.004850][T11309] page_owner tracks the page as allocated [ 133.006615][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123612598, free_ts 131090241905 [ 133.011945][T11309] post_alloc_hook+0x1c0/0x230 [ 133.013465][T11309] get_page_from_freelist+0x1321/0x3890 [ 133.015195][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 133.017055][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 133.018788][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 133.020711][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 133.022400][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 133.023902][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 133.025487][T11309] do_xdp_generic+0x530/0x1320 [ 133.027030][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 133.029158][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 133.031061][T11309] __netif_receive_skb+0x1d/0x160 [ 133.032651][T11309] netif_receive_skb+0x137/0x7b0 [ 133.034214][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 133.035886][T11309] tun_get_user+0x28a2/0x3b80 [ 133.037407][T11309] tun_chr_write_iter+0xdc/0x210 [ 133.038964][T11309] page last free pid 28 tgid 28 stack trace: [ 133.040904][T11309] __free_frozen_pages+0x7fe/0x1180 [ 133.042539][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 133.044169][T11309] rcu_core+0x799/0x14e0 [ 133.045549][T11309] handle_softirqs+0x216/0x8e0 [ 133.047081][T11309] run_ksoftirqd+0x3a/0x60 [ 133.048486][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 133.050128][T11309] kthread+0x3c2/0x780 [ 133.051424][T11309] ret_from_fork+0x5d4/0x6f0 [ 133.052864][T11309] ret_from_fork_asm+0x1a/0x30 [ 133.054347][T11309] Modules linked in: [ 133.055591][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 133.055608][T11309] Tainted: [B]=BAD_PAGE [ 133.055612][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.055619][T11309] Call Trace: [ 133.055624][T11309] [ 133.055629][T11309] dump_stack_lvl+0x16c/0x1f0 [ 133.055647][T11309] bad_page+0xcf/0x220 [ 133.055663][T11309] ? __pfx_bad_page+0x10/0x10 [ 133.055679][T11309] ? page_bad_reason+0x9d/0x1f0 [ 133.055695][T11309] __free_frozen_pages+0x824/0x1180 [ 133.055708][T11309] ? mark_held_locks+0x49/0x80 [ 133.055726][T11309] page_frag_free+0x27f/0x2e0 [ 133.055742][T11309] __xdp_return+0x38e/0xa90 [ 133.055753][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 133.055768][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 133.055783][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 133.055792][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 133.055810][T11309] do_xdp_generic+0x8e6/0x1320 [ 133.055828][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 133.055848][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 133.055866][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.055880][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 133.055893][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.055910][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 133.055922][T11309] ? do_user_addr_fault+0x829/0x1370 [ 133.055940][T11309] ? do_user_addr_fault+0x843/0x1370 [ 133.055956][T11309] ? __lock_acquire+0x622/0x1c90 [ 133.055974][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 133.055989][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 133.056005][T11309] ? lock_acquire+0x179/0x350 [ 133.056023][T11309] __netif_receive_skb+0x1d/0x160 [ 133.056037][T11309] netif_receive_skb+0x137/0x7b0 [ 133.056052][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 133.056066][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 133.056084][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 133.056100][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 133.056117][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 133.056132][T11309] ? rcu_is_watching+0x12/0xc0 [ 133.056147][T11309] tun_get_user+0x28a2/0x3b80 [ 133.056163][T11309] ? io_schedule+0xe0/0x130 [ 133.056180][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 133.056196][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 133.056214][T11309] ? find_held_lock+0x2b/0x80 [ 133.056227][T11309] ? tun_get+0x191/0x370 [ 133.056242][T11309] tun_chr_write_iter+0xdc/0x210 [ 133.056259][T11309] vfs_write+0x6c4/0x1150 [ 133.056274][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 133.056291][T11309] ? __pfx_vfs_write+0x10/0x10 [ 133.056304][T11309] ? find_held_lock+0x2b/0x80 [ 133.056321][T11309] ksys_write+0x12a/0x250 [ 133.056334][T11309] ? __pfx_ksys_write+0x10/0x10 [ 133.056350][T11309] do_syscall_64+0xcd/0x4c0 [ 133.056367][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.056378][T11309] RIP: 0033:0x7f1c2eb8d3df [ 133.056387][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.056398][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.056408][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 133.056415][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 133.056422][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 133.056429][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 133.056435][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 133.056445][T11309] [ 133.056451][T11309] BUG: Bad page state in process syz.2.1470 pfn:3577c [ 133.170482][T11309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3577c [ 133.173199][T11309] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.175387][T11309] raw: 00fff00000000000 dead000000000040 ffff8880221fb000 0000000000000000 [ 133.178078][T11309] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 133.180802][T11309] page dumped because: page_pool leak [ 133.182479][T11309] page_owner tracks the page as allocated [ 133.184258][T11309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11309, tgid 11307 (syz.2.1470), ts 131123606406, free_ts 131090250815 [ 133.189512][T11309] post_alloc_hook+0x1c0/0x230 [ 133.191093][T11309] get_page_from_freelist+0x1321/0x3890 [ 133.192827][T11309] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 133.194673][T11309] alloc_pages_bulk_noprof+0x71c/0x1410 [ 133.196402][T11309] __page_pool_alloc_pages_slow+0x193/0xc30 [ 133.198313][T11309] page_pool_alloc_netmems+0xc4/0x190 [ 133.200067][T11309] skb_pp_cow_data+0x7c0/0xff0 [ 133.201730][T11309] skb_cow_data_for_xdp+0x88/0xb0 [ 133.203309][T11309] do_xdp_generic+0x530/0x1320 [ 133.204861][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 133.206998][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 133.208837][T11309] __netif_receive_skb+0x1d/0x160 [ 133.210488][T11309] netif_receive_skb+0x137/0x7b0 [ 133.212047][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 133.213709][T11309] tun_get_user+0x28a2/0x3b80 [ 133.215181][T11309] tun_chr_write_iter+0xdc/0x210 [ 133.216747][T11309] page last free pid 28 tgid 28 stack trace: [ 133.218662][T11309] __free_frozen_pages+0x7fe/0x1180 [ 133.220359][T11309] tlb_remove_table_rcu+0x116/0x1a0 [ 133.221996][T11309] rcu_core+0x799/0x14e0 [ 133.223362][T11309] handle_softirqs+0x216/0x8e0 [ 133.224887][T11309] run_ksoftirqd+0x3a/0x60 [ 133.226295][T11309] smpboot_thread_fn+0x3f4/0xae0 [ 133.227852][T11309] kthread+0x3c2/0x780 [ 133.229097][T11309] ret_from_fork+0x5d4/0x6f0 [ 133.230631][T11309] ret_from_fork_asm+0x1a/0x30 [ 133.232103][T11309] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 133.233326][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.2.1470 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 133.233344][T11309] Tainted: [B]=BAD_PAGE [ 133.233348][T11309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.233355][T11309] Call Trace: [ 133.233359][T11309] [ 133.233364][T11309] dump_stack_lvl+0x16c/0x1f0 [ 133.233382][T11309] bad_page+0xcf/0x220 [ 133.233398][T11309] ? __pfx_bad_page+0x10/0x10 [ 133.233414][T11309] ? page_bad_reason+0x9d/0x1f0 [ 133.233430][T11309] __free_frozen_pages+0x824/0x1180 [ 133.233443][T11309] ? mark_held_locks+0x49/0x80 [ 133.233460][T11309] page_frag_free+0x27f/0x2e0 [ 133.233476][T11309] __xdp_return+0x38e/0xa90 [ 133.233488][T11309] ? kmem_cache_free+0x2d1/0x4d0 [ 133.233502][T11309] bpf_xdp_adjust_tail+0xa11/0xfd0 [ 133.233518][T11309] bpf_prog_f476d5219b92964a+0x1e/0x24 [ 133.233527][T11309] bpf_prog_run_generic_xdp+0x626/0x1530 [ 133.233545][T11309] do_xdp_generic+0x8e6/0x1320 [ 133.233560][T11309] ? __pfx_do_xdp_generic+0x10/0x10 [ 133.233579][T11309] __netif_receive_skb_core.constprop.0+0x161c/0x4a00 [ 133.233596][T11309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.233609][T11309] ? __skb_flow_dissect+0x11b2/0x7d90 [ 133.233623][T11309] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 133.233641][T11309] ? __pfx___skb_flow_dissect+0x10/0x10 [ 133.233653][T11309] ? do_user_addr_fault+0x829/0x1370 [ 133.233670][T11309] ? do_user_addr_fault+0x843/0x1370 [ 133.233687][T11309] ? __lock_acquire+0x622/0x1c90 [ 133.233704][T11309] __netif_receive_skb_one_core+0xb0/0x1e0 [ 133.233719][T11309] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 133.233735][T11309] ? lock_acquire+0x179/0x350 [ 133.233753][T11309] __netif_receive_skb+0x1d/0x160 [ 133.233768][T11309] netif_receive_skb+0x137/0x7b0 [ 133.233782][T11309] ? __pfx_netif_receive_skb+0x10/0x10 [ 133.233796][T11309] ? __pfx__copy_from_iter+0x10/0x10 [ 133.233814][T11309] tun_rx_batched.isra.0+0x3ee/0x740 [ 133.233834][T11309] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 133.233851][T11309] ? tun_get_user+0x1c0d/0x3b80 [ 133.233866][T11309] ? rcu_is_watching+0x12/0xc0 [ 133.233881][T11309] tun_get_user+0x28a2/0x3b80 [ 133.233897][T11309] ? io_schedule+0xe0/0x130 [ 133.233914][T11309] ? __pfx_tun_get_user+0x10/0x10 [ 133.233930][T11309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 133.233947][T11309] ? find_held_lock+0x2b/0x80 [ 133.233960][T11309] ? tun_get+0x191/0x370 [ 133.233976][T11309] tun_chr_write_iter+0xdc/0x210 [ 133.233993][T11309] vfs_write+0x6c4/0x1150 [ 133.234007][T11309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 133.234024][T11309] ? __pfx_vfs_write+0x10/0x10 [ 133.234037][T11309] ? find_held_lock+0x2b/0x80 [ 133.234053][T11309] ksys_write+0x12a/0x250 [ 133.234066][T11309] ? __pfx_ksys_write+0x10/0x10 [ 133.234082][T11309] do_syscall_64+0xcd/0x4c0 [ 133.234099][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.234110][T11309] RIP: 0033:0x7f1c2eb8d3df [ 133.234119][T11309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.234130][T11309] RSP: 002b:00007f1c2f92a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.234140][T11309] RAX: ffffffffffffffda RBX: 00007f1c2edb5fa0 RCX: 00007f1c2eb8d3df [ 133.234147][T11309] RDX: 000000000000fe53 RSI: 0000200000000440 RDI: 00000000000000c8 [ 133.234154][T11309] RBP: 00007f1c2ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 133.234160][T11309] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000000 [ 133.234167][T11309] R13: 0000000000000000 R14: 00007f1c2edb5fa0 R15: 00007ffc194ba0b8 [ 133.234176][T11309] [ 133.234759][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.584053][T11314] syz_tun (unregistering): left promiscuous mode [ 133.754919][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.842874][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.921901][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.963234][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.027929][ T1141] bridge_slave_1: left allmulticast mode [ 134.030476][ T1141] bridge_slave_1: left promiscuous mode [ 134.032961][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.037379][ T1141] bridge_slave_0: left allmulticast mode [ 134.039969][ T1141] bridge_slave_0: left promiscuous mode [ 134.042421][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.144214][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.148147][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.151582][ T1141] bond0 (unregistering): Released all slaves [ 134.225408][ T1141] tipc: Left network mode [ 134.415546][ T1141] hsr_slave_0: left promiscuous mode [ 134.417545][ T1141] hsr_slave_1: left promiscuous mode [ 134.419393][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.422524][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.425058][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.427380][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.431745][ T1141] veth1_macvtap: left promiscuous mode [ 134.433510][ T1141] veth0_macvtap: left promiscuous mode [ 134.435341][ T1141] veth1_vlan: left promiscuous mode [ 134.437032][ T1141] veth0_vlan: left promiscuous mode [ 134.464050][ T1141] pimreg (unregistering): left allmulticast mode [ 134.603948][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 134.641893][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 135.165679][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.168896][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.213129][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.216335][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.283932][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.287168][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.352183][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.356472][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.432069][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.503151][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.543476][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.602848][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.685235][ T1141] bridge_slave_1: left promiscuous mode [ 135.687118][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.693475][ T1141] bridge_slave_0: left allmulticast mode [ 135.695863][ T1141] bridge_slave_0: left promiscuous mode [ 135.698314][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.788295][ T1141] dvmrp1 (unregistering): left allmulticast mode [ 135.793119][ T1141] bond3 (unregistering): (slave geneve2): Releasing active interface [ 135.795619][ T1141] bond3 (unregistering): (slave geneve2): the permanent HWaddr of slave - 9e:69:d0:69:3c:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 135.801819][ T1141] geneve2 (unregistering): left allmulticast mode [ 135.814832][ T1141] bridge0 (unregistering): left promiscuous mode [ 136.036307][ T1141] bond1 (unregistering): Released all slaves [ 136.093306][ T1141] bond2 (unregistering): Released all slaves [ 136.098206][ T1141] bond3 (unregistering): (slave veth3): Releasing active interface [ 136.102478][ T1141] bond3 (unregistering): Released all slaves [ 136.161058][ T1141] bond4 (unregistering): (slave veth5): Releasing active interface [ 136.164022][ T1141] bond4 (unregistering): Released all slaves [ 136.167794][ T1141] bond0 (unregistering): Released all slaves [ 136.171783][ T1141] bond5 (unregistering): Released all slaves [ 136.414709][ T1141] bond0 (unregistering): Released all slaves [ 136.470961][ T1141] bond1 (unregistering): Released all slaves [ 136.527447][ T1141] bond2 (unregistering): Released all slaves [ 136.585128][ T1141] bond3 (unregistering): Released all slaves [ 136.640908][ T1141] bond4 (unregistering): Released all slaves [ 136.698822][ T1141] bond5 (unregistering): Released all slaves [ 136.702684][ T1141] bond6 (unregistering): Released all slaves [ 136.759306][ T1141] bond7 (unregistering): Released all slaves [ 136.816909][ T1141] bond8 (unregistering): Released all slaves [ 136.908451][ T1141] tipc: Disabling bearer [ 136.911073][ T1141] tipc: Left network mode [ 137.364674][ T1141] batadv_slave_0: left promiscuous mode [ 137.369450][ T1141] hsr_slave_0: left promiscuous mode [ 137.372444][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.375526][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.382074][ T1141] hsr_slave_0: left promiscuous mode [ 137.384024][ T1141] hsr_slave_1: left promiscuous mode [ 137.388732][ T1141] veth1_macvtap: left promiscuous mode [ 137.390722][ T1141] veth0_macvtap: left promiscuous mode [ 137.392477][ T1141] veth1_vlan: left promiscuous mode [ 137.394867][ T1141] veth1_macvtap: left promiscuous mode [ 137.396579][ T1141] veth0_macvtap: left promiscuous mode [ 137.398340][ T1141] veth1_vlan: left promiscuous mode [ 137.400036][ T1141] veth0_vlan: left promiscuous mode [ 137.514243][ T1141] pimreg (unregistering): left allmulticast mode [ 137.529532][ T1141] team0 (unregistering): Port device @ removed [ 137.612360][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 137.622098][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 138.353572][ T72] infiniband syz0: ib_query_port failed (-19) VM DIAGNOSIS: 10:46:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000182709 RBX=0000000000000000 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de1a430 RDI=ffffffff8c157960 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81950 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1c2f929f98 CR3=000000002a042000 CR4=00352ef0 DR0=0000000000000002 DR1=000000000000004a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ef011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ef011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ef011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ef011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ef011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1ef011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9ea76935e7c812c 33e2a03a25dd6800 0000000000009500 0000000068116100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300090000000040 0200080069666977 5f747269765f0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004001000880 0400280000000030 7a79730001000900 0000050000010001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8b95 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc9000447ea80 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b0872e0 R15=ffffffff855b8b30 RIP=ffffffff855b8bbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1c2f92a6c0 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000010000 CR3=000000002703a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000087 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ed84488 00007f1c2ed84480 00007f1c2ed84478 00007f1c2ed84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2f8ed100 00007f1c2ed84440 00007f1c2ed84458 00007f1c2ed844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ed84498 00007f1c2ed84490 00007f1c2ed84488 00007f1c2ed84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000121213 RBX=0000000000000002 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de1a430 RDI=ffffffff8c157960 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a81950 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ab4484a300 CR3=000000002703a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ec11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ed84488 00007f1c2ed84480 00007f1c2ed84478 00007f1c2ed84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2f8ed100 00007f1c2ed84440 00007f1c2ed84458 00007f1c2ed844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c2ed84498 00007f1c2ed84490 00007f1c2ed84488 00007f1c2ed84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffffff8e5c4880 RCX=00000000ef9d33e4 RDX=0000000000000000 RSI=ffffffff8ddf4f5b RDI=ffffffff8c157960 RBP=0000000000000002 RSP=ffffc90003d8fd18 R8 =0ac0d5affe09d4ff R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81987e36 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc220291be8 CR3=0000000021985000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000610 000000000000f9f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000