last executing test programs: 29.260054658s ago: executing program 0 (id=182): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xaaba0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000880)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r5 = syz_open_dev$mtd(&(0x7f0000000000), 0x2, 0x400) mmap(&(0x7f0000914000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x4031, r5, 0x949c0000) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys\x00', 0x98) mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r6, &(0x7f00000007c0)="6fcdc6564281bdcb83fe76ee13669821561956d3e4ed48440a", 0x19) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r8}, [@flakey={0x0, 0x2040, 0x0, 0x70, 'flakey\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '16'}, 0x20, 0x4, 0x20, 0x0, ' 1 error_writes'}}]}) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) write$cgroup_int(r9, &(0x7f0000000300)=0xa83, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r7], &(0x7f0000000140)=""/58, 0x49, 0x3a, 0x0, 0x833, 0x10000}, 0x28) r10 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) shmat(r10, &(0x7f0000ffc000/0x3000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000100)) r12 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00005cc000/0x4000)=nil, 0x4000}, 0x5}) socket$inet6(0xa, 0x2, 0x0) 28.878646125s ago: executing program 0 (id=187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f0000000280)}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x200108c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) (async) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f0000000280)}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x200108c0) (async) 28.824882781s ago: executing program 0 (id=189): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="6d00000098101d4164"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xd5) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000440)={0xd, 0xfffffff9}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1', 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="6d00000098101d4164"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xd5) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000440)={0xd, 0xfffffff9}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000280)='1', 0x1) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) 28.805375315s ago: executing program 0 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open(&(0x7f0000000180)='[.\x00', 0x40, 0x61, &(0x7f0000000980)={0x5, 0x7, 0x800, 0x7}) mq_timedreceive(r1, &(0x7f00000009c0)=""/116, 0x74, 0x4, &(0x7f0000000a40)={0x0, 0x989680}) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000cc0)='./bus\x00', &(0x7f0000000d00), 0x8, &(0x7f0000000d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000d80)='./bus\x00') mount(0x0, &(0x7f0000000dc0)='./proc\x00', &(0x7f0000000e00)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000e80)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./tracing\x00', 0x1ff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000427eaa444196baa0e9048d81001c19a7", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50006dbcc3c01100000108021100000008021100000000000026020202020202010882848b960c12182400"/54], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @broadcast}, 0x10) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000ac0)={'wlan1\x00', @random="000500000020"}) write$binfmt_misc(r5, &(0x7f0000000b00)="0e323a8857d8b69b7619722798182e62b65b0b698f10e0b2c9fdc3ba7b490533e2284caa411107ef414d3003db3eceadcf10bd4829f383230a11ea878e1257c4965161c2897cc79e6832672499c56349ace53d3deaacc658beaa736bd86215a1b08b07590750bee4edc4e75ed2a8ca38ca14d354a29325c6cdd29422971be05b7b241cfe49a19cd134476c39042000f66c497eaf1725dcedc49b853a65a6612dd93f8e977b8bb4208f1fcc7265b64df3ef8d74d3e4c716771581b4f639", 0xbd) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000040)={0x6000004, 0x0, 0x0, 0x40, 0x6}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000f00)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x969}, @broadcast, @broadcast, @random="826ec374a1ca", {0x0, 0x82}}, 0x0, @default, 0x4440, @val={0x0, 0x1f, @random="fbc24a9bb80a1023d69ecf1bd13f6d165ce614139b0b62be95c0e2ac437993"}, @val={0x1, 0x3, [{0x1, 0x1}, {0x1}, {0x48}]}, @void, @void, @void, @val={0x5, 0xcb, {0x6, 0x3c, 0x0, "9905a7e42fc05136d851852396e17d4f933ccfc0a869a292597890ad0c304580463651368ff226fa0f9f80e48c9e8917b93cadbc1797ffa726fbe2799c473bda37d03d2e96cb9fe739e5b954eb00e7f8fe982abddb417511c4ff1125fc21287a3efeacd31c9df49044cfb50e8eb519852cfea8e526043213b20247d206364bffc624175bba1885c1b0a156984f182acf1120e07337f1550cc4e4a1ec6af202022a0237851fd3433296f246be57686cde7f00030662297287b1fee3aff7c0419940bd39d7ad538a90"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x0, 0x0, {0x9, 0x3, 0x0, 0x1c, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0xffffffff, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x81, 0x2, 0xb, 0x40}}, @val={0x76, 0x6, {0x7, 0x96, 0xa, 0x9}}, [{0xdd, 0xca, "f081dcab44e47322e94e54eb963846f75bb63f572c58ddf1d286024d055b789629d0f73394dfe60b60842f3e218dbe614dc91d02bfca6666a62baba3fa5db50a30a6d8217af271169b48fda51314bffc8882992e49184f1c436752b4fc5c45fa0b899e399f4fa30c1acff3dd9361b3d642d7b4c589b38556eea950564e18969fcf9afc1b780bc96401f7fe76ba426087ff1a27e0d5d9896ebce8392c76ba5789155d2d06ecfe290dcb690cb5611e883e726bc20f39afd8557c2999a7f16382ad36db03132a8b53afdef4"}, {0xdd, 0x95, "7a1be14f9158711a5e345e5b9e41546a724bc1b3d5d6528a196fab17aec40f255cf0a9317ce241709baaeda8aafb744ccc8376cda025d543151ace56df548b07a6b0002dd6b85348ca7769034433d68adc40ee3d5054150689e1e73c638cca73a47365e8f96afddb790ea65c965c80c444249fdf9d5c5ad27f73cf0839842434a86ae64fb1ec0e73b081633d96579c25f7a15d859f"}, {0xdd, 0xeb, "0530e71ceb8e4e9676f98c36e5c16e77cee66fab0209d897e74cb4be3bd64cf0478ec7cb006d50687314b7c74ad8fbc74c286758923ccd2cc8d116a185472688ba008da0d09b3b7449c18ed41423511e48b941938d19ae0bfa6ea069427ce2efade6caaa88ed7d49decd74b03906064ab0ab26f2118badf877d1844e2d11587520c15ed0e3503f3819690c024d16938b62c6c235a88d74d4ef2d917524d148202703b2459edf372c00f00e1f521eb05ed7d597bbebbbdbff647f7e03f9f4543d0b6d0b9a34d8065330bed758797e876f9e0584498df327d8709276b424b9a76f15ed9b8465fdff274cbfeb"}, {0xdd, 0x87, "6bcbbde6615caf48af5e18ee5b682c5c30f3e6d36ab19181eed46ceffd14c5f7682fb8f7026d1f3894a90f0d225c2e19554d5dda46f3db412a6556489a7ddb3e951756ad34f277a468ae1d7e455d9f6b52ed3962c3af56384fe2ecc459983ab3903ed8d743f5f3849798b944cc17724dc3a1c154d411866bac0fbfd1b0781d0706967403d573fb"}]}, 0x425) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) 28.024743632s ago: executing program 0 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001500000008000300", @ANYRES32=r2, @ANYBLOB="145414b7b7c0de5dba3eda1da29ca2b929c9a9afa1fa10be39e454fcd407"], 0x1c}}, 0x0) 27.779136309s ago: executing program 0 (id=207): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000060000000000000d"], 0x0, 0x3e}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fsmount(r1, 0x0, 0xf5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002ac0)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0x9c, 0xb, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20a}, @NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "7fbb92b271fff25cd94cfd0b8a9b5c2112305bb0e77d3b5607cbcc39a127795e5084908e6c2177a43536cc45bec98ee813caf70016efb773c31ad4135ebfb7ab297259e137a8e2feeedfd1a349c6cf8dd244cb69b0ec08eb035bf9e3c274a9ecafb70fa3840f13b931f07c584378d806982eee8d5949fbfb3e3c9a94"}]}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x220}, 0x1, 0x0, 0x0, 0x40001}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x15, 0xe, 0x0, &(0x7f0000002bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002c00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000002cc0)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000002d40)='source', 0x0, 0x0) io_uring_enter(r4, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) r5 = io_uring_setup(0x21dd, &(0x7f0000000080)={0x0, 0xbb75, 0x0, 0x2, 0xd3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0}, 0x20) syz_usb_connect(0x1, 0x3d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66c", 0x51}], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x0, 0x1}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000a80)={0x2020}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2bd}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffff3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x80) 27.744124616s ago: executing program 32 (id=207): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000060000000000000d"], 0x0, 0x3e}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fsmount(r1, 0x0, 0xf5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002ac0)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0x9c, 0xb, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20a}, @NFTA_SET_USERDATA={0x80, 0xd, 0x1, 0x0, "7fbb92b271fff25cd94cfd0b8a9b5c2112305bb0e77d3b5607cbcc39a127795e5084908e6c2177a43536cc45bec98ee813caf70016efb773c31ad4135ebfb7ab297259e137a8e2feeedfd1a349c6cf8dd244cb69b0ec08eb035bf9e3c274a9ecafb70fa3840f13b931f07c584378d806982eee8d5949fbfb3e3c9a94"}]}, @NFT_MSG_DELFLOWTABLE={0x148, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x220}, 0x1, 0x0, 0x0, 0x40001}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x15, 0xe, 0x0, &(0x7f0000002bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002c00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000002cc0)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000002d40)='source', 0x0, 0x0) io_uring_enter(r4, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) r5 = io_uring_setup(0x21dd, &(0x7f0000000080)={0x0, 0xbb75, 0x0, 0x2, 0xd3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0}, 0x20) syz_usb_connect(0x1, 0x3d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66c", 0x51}], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x0, 0x1}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000a80)={0x2020}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2bd}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffff3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x80) 23.490053049s ago: executing program 4 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x2c}}, 0x4004080) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x2, 0x70bd25, 0x5, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0xfffffffffffffffc, 0x0, {0x7, 0x2d, 0x9, 0x4c500, 0xd8c, 0xd5, 0x10001, 0x80000001, 0x0, 0x0, 0x4, 0x2}}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'pim6reg0\x00', @ifru_data=&(0x7f0000000080)="da88c3d9eef5c00a78ffdd793456b2038c20368d9b97c2c77f1e277f25d5060e"}}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@can={0xc, {{0x0, 0x1}, 0xfe, 0x3, 0x0, 0x0, "26f5dbd60342a03c"}}}}, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000580)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0x9, 0x400004, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x3, 0x200}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 23.407737228s ago: executing program 4 (id=257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000065c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006640), r5) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006700)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) write(r4, &(0x7f0000000240)='4', 0x1) write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x8810040, 0xb, 0xffff, 0xe7, 0x2, 0x0, 0x0, 0x8, 0x80000001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004440)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004480)="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", 0x2000, &(0x7f0000006480)={&(0x7f0000006540)={0x50, 0x0, 0xf992, {0x7, 0x2b, 0x4, 0xa8200440, 0x3, 0x1, 0x8000, 0x7000000, 0x0, 0x0, 0x8, 0x8f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r7, 0x6700000000000000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$unix(0x1, 0x1, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="9a00000000eb000f0f7500a466baa000ed0f30660f6e92d3a80000b8010000000f01c1ea00000000e40066baf80cb8dc64868aef66bafc0cedc4e2213f5709c4e1d1db8f00000000", 0x48}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 23.068610879s ago: executing program 4 (id=262): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0100000004000000080000000100000001"], 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x100}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x2, 0x23, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0xd, 0x5, 0x8, 0x6ad9047e3270c010, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x97}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x2, 0x23, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0xd, 0x5, 0x8, 0x6ad9047e3270c010, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x97}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x40000}}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in=@initdev, @in=@initdev}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000001680)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000001680)=0xe8) r8 = getgid() r9 = getpgrp(0x0) r10 = gettid() rt_tgsigqueueinfo(r9, r10, 0x1f, &(0x7f00000016c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r9, r10, 0x36, &(0x7f0000001740)={0xa, 0x8, 0x29b}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) read$FUSE(r13, &(0x7f0000001b40)={0x2020}, 0x2020) (async) read$FUSE(r13, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r13, &(0x7f0000003b80)={0x78, 0x0, r14, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r15, r16, 0x0, 0x0, 0x1000000}}}, 0x78) (async) write$FUSE_ATTR(r13, &(0x7f0000003b80)={0x78, 0x0, r14, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r15, r16, 0x0, 0x0, 0x1000000}}}, 0x78) r17 = gettid() getsockopt$inet_sctp_SCTP_REUSE_PORT(r11, 0x84, 0x24, &(0x7f0000000380), &(0x7f0000001840)=0x4) timer_create(0x0, &(0x7f0000003c00)={0x0, 0x21, 0x800000000004, @tid=r17}, &(0x7f0000003c40)) r18 = geteuid() stat(&(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="f010a8885d574ad06e412ecbaa19ed6cc2bf7c9bbc76783a9d80863a5c9603caf8f4ae175e033ec0b7b2ecf5969825c4a5cf159beefea2ed789e0a8b3c18988b0916ff2a11348c4e38bc5e430698c1a8", 0x50}, {&(0x7f0000000240)="f6c98aa646c404258becb2a711f18b5abe1ce619436c90ca7668d46856fd5914f15921a4060c5adf2cf1c6494f17e8a92b10a2fb463e09ba74cbc7395bc7a755cbc9a1839cee36469788ddb3bf0c697464102996b8405f6be418ef7b5dd6eca24395d95d995a11895d8f5f06377f994be1f9dc", 0x73}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="f8fd672d70161c60420f0e1aa56e757c00352bcc5877425e8132c62de4c021a75d6ef73e96456c8773172ec2d9df81a60e50baf69c9a25837c75c0b121b0c2539bd2d98989eea9f178cc4320d1f0182db8ab0e34401b4b02f9795bf9217fc6e5b574dbcde1f78cc8dd5ba12df68307", 0x6f}], 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="14cc00000000000000000000000000000e1baf8b756c5c78e73297e414f07673d87bfb60583c417e7a45baa25662025323bc1dc99c27cf39328f6c516aac5214353b85ab7090dbdce6347697000fdf4bbaef00fc01a8b71c20c7998579e1", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r12, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20000050}}, {{0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000003dc0)="117f1f18d391673cf71709e3dcb09e81400830ab5757e4d448bec40d41cef1872f84090568f69ae43ebf3279d87fe0536e3f4c5dfc8de1f680000000000800009445f0ec1bf03db627d2a375ed0bd675ef9e90a7e4ed1b48e4e5920a85f96255429e9665af19b38d0ed38f0597111d5aeaba904a2db69c8f9fd76443b9ff03dde306704f2cb932c39f47bc9dd0ccd9f565d78a40af7ca6ac8e58206b50c53ff523c1ee0ff63a7a6d8f06999f92df6d5a8648d47d579fe898a11fd6118aadf7f2f5b79205f9", 0xc5}, {&(0x7f0000003ec0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x10008015}}], 0x2, 0x0) 22.898391636s ago: executing program 4 (id=265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./bus\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "87b92bba85864c5e658bc93948d1741b10274bf3cfeb7e60295016a48ea6af9c9eae14e28cffb3e874d5b9be4603b3e496bb33ed2e9f95"}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}], {0xb}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x48840) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 22.837502951s ago: executing program 4 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006d80)="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", 0x2000, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000091c0), 0x0, &(0x7f0000009200)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getresgid(0x0, &(0x7f0000011bc0), &(0x7f0000011c00)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.540078673s ago: executing program 4 (id=294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xa680, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x140d, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dir0\x00', 0x1fb) mount(&(0x7f0000000540)=@filename='mtd0\x00', &(0x7f0000000580)='./dir0\x00', &(0x7f00000005c0)='jffs2\x00', 0x0, 0x0) mount(0x0, &(0x7f00000006c0)='./dir0\x00', 0x0, 0x20, 0x0) 21.46313071s ago: executing program 33 (id=294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0xa680, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x140d, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dir0\x00', 0x1fb) mount(&(0x7f0000000540)=@filename='mtd0\x00', &(0x7f0000000580)='./dir0\x00', &(0x7f00000005c0)='jffs2\x00', 0x0, 0x0) mount(0x0, &(0x7f00000006c0)='./dir0\x00', 0x0, 0x20, 0x0) 3.959007125s ago: executing program 5 (id=535): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x8, 0x7, {0xffffffffffffffff}, {}, 0x8001, 0x5}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x658a01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x40}}, './dev/vhci\x00'}) 3.958473277s ago: executing program 5 (id=536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004458) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24048804) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2806, 0x7, 0x4, 0xc}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x2000082, 0xfea}}, @set_irq_handler={0xc8, 0x20, {0x29}}], 0x98}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000180)=@attr_pmu_init) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000001c0)=""/65, &(0x7f0000000240)=0x41) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000005c0), &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000009c0)='./file0\x00') r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000a00), 0x0, 0x3}}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r9) getsockname$packet(r9, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6024227f7736bd8637b938b0627c82edb1f6d3ff2f837a8868b697a267b5b918d9493095ef69d4fa5a816748b638ba623fd45f7931b5b07dee781f59034dbc161894271aef0446dd8c918c0aa938f670d74b7af08c"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=@newqdisc={0xa8, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfc, 0x7ff, 0x3, 0x0, 0x3, 0x1e7, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0x6fb5, 0x2e23, 0x6]}}, {{0x1c, 0x1, {0x8, 0xff, 0x7f, 0x5, 0x1, 0xa11, 0x0, 0x2}}, {0x8, 0x2, [0x6, 0xdd6]}}, {{0x1c, 0x1, {0xf8, 0x2, 0x1002, 0x7ff, 0x2, 0x3, 0x5, 0x7}}, {0x12, 0x2, [0xe, 0x64d7, 0x3, 0xa, 0x0, 0x1, 0x0]}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.960490943s ago: executing program 2 (id=546): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x8a2, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/186, 0xba}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x21) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x24060400) timerfd_create(0x7, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000024c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) connect$inet6(r1, &(0x7f00000028c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @remote, 0x2a}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000780)="871acd6862a99aa07d850d536196bb970cc8a2e058497abf6734e085762a926730852d29f12894e08faabd462602703cde39e817059be52c46b1c9f006c1c66f61346e700fc826308ad83a5b4c544b4bc79c2b4b0094393f9d13d762e90a25f2166eaaec165515123a46d6078ed0450defcf8955742a76b0cc9a0159e4a87d8ae195019a132244656eac94d0498011539ac62597a951009ffa7ddd6e960c0d4b11fc917ea0f1fc0fdf4f8b322bfb3bd4c3ec833c0142c1053067f1257d", 0xbd}, {&(0x7f0000000840)="5779d339c04982650e17c577d54bb15794872a5adec8f28789b78b297472cc7368bc8a4df6643f80d7cfb055d28c308610e52ff90f30386e81c5d0bc25b1c068b88955a52859ad8f96b2fb3e072308ff636bfbb0c2a5c49d371ba19f08537c9256ad6eaaf46fcc36583205137dbd7ae3b968cecfa4303d99bf9300cd1f6f82d170166d5fe5f980bdcc5c51362a4458fb020109f07ed25c3ec633cc398146f61aebbbe007e40dc011ecd5ac9b83c61205e751691ece64f49f06db30487b4fbd86", 0xc0}, {&(0x7f0000000900)="4a795c3e815bdf08aade5a729f504ae1ad3d2795fe20b4db47f14fe88f6603f2ec9d4d83f8eb1102840bb6a7d2c26dfa606f66d5f3a77d8dc42aa96fcde37c8e582e12e000bf1fa62468a24a6d19ea478f40c309ddfee1e378beaff82838d39d8d6dcd1b2bdc596663085f8500cbc806572d96b35e9de7a8b73c231f14c1132ae7fe208c9211f37254c6898b981b67e025204438f4c501fc89c9e4e735afdd1dbbdac7eaeba15dba811827175be054ed36f447e1d0ec107c2251d754cbc05990a6feb4aa022bef3902318ae6428f20fa3b4c68811e8485470b2e1701e016cf6a6c9a1873", 0xe4}], 0x3, &(0x7f0000000a40)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}], 0x18}}], 0x1, 0x888) mkdir(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 2.869425168s ago: executing program 2 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce000000000001"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) 2.78020939s ago: executing program 2 (id=549): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x4, r1, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcd9f, 0x2b}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x40}}, 0x20008080) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.729180068s ago: executing program 2 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x30, r0, 0x0) (async) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x5392, 0x400400) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f00000001c0)={0x0, &(0x7f0000000100)="f0f03ed6c385e47a331001004280fd9f0e0daba5b820c4e5d7fbdbda92d6ace04eff02076c591ab62fc46ac94c2ab6479f71286efb91b7dbb91af05b7a322837eb3a28cd682e301fee194bacc2b745bc54fe02e671042a0740d2184ab417d6e0859bffbd9b04404296e90b032877b58f869fc9798e321048848f3dfdf9505f2191fdedd94468d36bf2df38dccb22b16d465f747c3580c1ef079abc7b60d4da42e97d3c00503a7541da6b44fbba63a9b63d2e56", 0xb3}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000040)={0x1, 0x2, 0x2, "11280d2e12ac6cc751ae3fab1d443bca4a5871438a27afbb8703574012a29400", 0x30314752}) (async) mlock(&(0x7f0000368000/0x4000)=nil, 0x4000) 2.677417282s ago: executing program 2 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c38c2, 0x0) (async) io_setup(0x20fe, &(0x7f0000000480)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r3, &(0x7f0000000540)='p', 0x1, 0x80000000600}]) (async) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000580)={'caif0\x00', 0x200}) (async) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x7, 0x6, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x41) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x6c}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x2c000094}, 0x4040000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r6, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xb7}]}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x800) 2.525184953s ago: executing program 5 (id=555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x4, 0xeeee0000, 0x1000, &(0x7f0000011000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x200000000758}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x22, 0xffffffffffffffff, {0x40}}, './dev/vhci\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000240)={r4, 0x3, 0xa7, 0x4, &(0x7f0000000200)=[{0x100, 0x8, 0x9, 0x5}, {0x7, 0xa8cd, 0x400, 0x6}, {0x3, 0x0, 0x6, 0x1}, {0x1, 0x7, 0xe6, 0x1}]}) 2.524786299s ago: executing program 2 (id=556): r0 = socket(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000280)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x8d40, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000001600)=0x7) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001640)={0x0, 0x8, 0x0, 0x3, 0x7, "00fa9a7d8200010000001495595915303d6000"}) (async) r4 = syz_open_pts(r3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000001680)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f00000016c0)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3}, 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000001700)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) listen(r5, 0x5) dup2(r5, 0x3) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001080000004000000000610000"], 0x0, 0x3c}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="010000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000500)='\x00\x00\x00\x00', &(0x7f0000000540)}, 0x20) (async) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000580)="4c00000014000103010000000000000002060000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000200", 0x4c) (async) read(r8, &(0x7f0000000600)=""/4096, 0x1000) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io$hid(r9, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) (async) r10 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x7c, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x1, 0x2, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x0, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0xd, 0x40, 0xb3, 0x200, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0xf7, 0xd7, 0xd, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xb, 0x7, 0x8, 0xffc0, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x6, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5c, 0xc, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xf9, 0xfd}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x3, 0x6, 0x0, 0xff, 0x4}, 0x1f, &(0x7f0000001740)={0x5, 0xf, 0x1f, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x0, 0xf00, 0x401, [0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x6, 0x6e, 0xf3}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}]}) (async) ioctl$HIDIOCSREPORT(r10, 0x400c4808, 0x0) file_setattr(r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x800, 0xfffffdfe, 0x881}, 0x18, 0x1000) (async) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000200)={'lo\x00', @ifru_mtu=0x44}) 2.189743027s ago: executing program 5 (id=557): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x38501, 0xa0, 0x5}, 0x18) setns(r1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x78, 0x66, 0x0, 0x5, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x17, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x2, [{@empty, 0x6558}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x13, 0x54, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @rr={0x7, 0xb, 0x9f, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x338c, 0x1]}]}}}}}}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20010040}, 0x0) 2.18884387s ago: executing program 5 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r5 = syz_io_uring_setup(0x111, &(0x7f0000000a80)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000bc0)=[0x2, 0x6], 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_LABELS_MASK={0x2c, 0x17, [0x2, 0x5, 0x7, 0x7, 0x101, 0x8, 0x8, 0x5, 0x1, 0xf]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x300000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xae31}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x804) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001800010600000000000000001c140000fe0000010000000008001a0000014100080004000100"], 0x30}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000580), 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000740)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r12, &(0x7f0000000780)={&(0x7f00000007c0)={0x1d, 0x0, 0x8000000000}, 0x18, &(0x7f0000000800)={&(0x7f0000000440)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) 2.030053552s ago: executing program 5 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="65cfeb0e03a97e7ae97d1413e586e23b8d38f547ab5a1eab12", 0x19}], 0x1}}], 0x1, 0x40008) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="058554dac96e42ea979071e07adb0c705521f305fd175696918c1e6d0da91714aa96820eea4b1aec8ff4f8a7a60fcac44355468b4e4323be41adf96e17e99b998457c0121440787861234961d08c2b3595f6a0041955acd0ca351d6525b6e0dc43581554bedb4f1f4748c4fe609170e5f3f8251e787dbf822b1aac2f2c1e97ab84e7c23ec55a2062f84ab23570cdb91d26eb4bc984be25df8b41f72d58b59a3f130f468519920fbc20e33a53a1bd"], 0x44}, 0x1, 0x0, 0x0, 0x6000021}, 0x8000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x5, 0x5, 0x3) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="180000fb0875ffc91e888309c5dd70fbf87da97de706f4ecb57f7432981e20c4c0c66c8dd541916f9550d5fabb453ec9e5d45ad74caff388efc20f46dfbd29e0b891880e948685a74d0d62ac499687d5aa15093232a50d4166f0a8605f4299727767671620a14133817650ad4631dab67e38972c4e315204dcbf1abf21623701ea11a9f1716b434db9c19d1fe3b52330bc3275bdb1d73dd69bad096739b93699bf204da4ce5c5d067548d81b7e0e62f4fffa50a201a330ce1170fd3c92a4216d81c9453f0f4a7b5259167bfdd5bf0913eb3c206524cb14bb9ea1a907d5416d1e4175242b480264fee8fbacd5df6cd6", @ANYRES32=0x0], 0x18}}, 0x8000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009040100"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async, rerun: 32) r9 = syz_open_dev$dvb_demux(&(0x7f00000006c0), 0x1, 0x2) (rerun: 32) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000700)={0x100, 0x0, 0x1, 0x14, 0x4}) (async, rerun: 64) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x10, 0x7fff7ff8}]}) (rerun: 64) close_range(r10, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.029733451s ago: executing program 1 (id=563): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/2:0:0:0\x00', 0xa2002, 0x0) ioctl$BSG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000180)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x115e40, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4c2459134a10f060f005fdfc4e37d196f0000c4e2790f7ae4b805000000b9000000800f01d9b9800000c00f3235000400000f302e0fa7c00fc77901f2f30f005b06", 0x42}], 0x1, 0x40, &(0x7f0000000100), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f3ff9854f8375ccb910f77767ceba1a800", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf2512000000"], 0x14}}, 0x20000080) 1.979940158s ago: executing program 1 (id=564): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_emit_ethernet(0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x60}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x8, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0xb, 0x0, &(0x7f0000000500)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a000100000000000000000081"], 0x30}}, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) migrate_pages(r7, 0x5, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x200) ptrace$poke(0x5, r7, &(0x7f0000000280), 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000480)={0x13, 0x10, 0x10f, {0x0, r10, 0x3}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r8, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x3, {0xa, 0x4e22, 0xc8b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, r10}}, 0x38) 1.690146431s ago: executing program 3 (id=565): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x5) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/llc/core\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000095"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000340)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x22, 0xffffffffffffffff, {0x40}}, './dev/vhci\x00'}) 1.689567706s ago: executing program 1 (id=566): r0 = socket(0x10, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000080000000000000000000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000100), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000200)={0x0, 0x35315258, 0x780, 0x438, 0x0, @discrete={0x2}}) close_range(r2, r2, 0x0) syz_usb_disconnect(r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="250240001400000123e20ba81ca0e8afd39aec86991ca00000"], 0x1c}}, 0x0) 1.559973893s ago: executing program 3 (id=567): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000003300)={0x0, 0x21, 0x2}, &(0x7f0000003340)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000003380)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f00000033c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) clock_nanosleep(0x9, 0x0, &(0x7f0000003400)={0x77359400}, &(0x7f0000003440)) r3 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000003840)='rxrpc\x00', 0x0, &(0x7f0000003880)="000000000000000463656c6c00000002000000440000000600bfffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000003740)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003480)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000034c0)='./trace\x00', &(0x7f0000003500)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000003540)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000035c0)='./proc\x00', &(0x7f0000003600)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000003640)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000003680)='7', 0x1) fcntl$dupfd(r5, 0x406, r5) write(r4, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000002140)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, &(0x7f0000002100)="32db23c18a959ea6f65aea0799907d8b83980ef14d1624050d8bea696ec053c02226b3df794041bb01c88bbef155962dceff21"}) r7 = fsopen(&(0x7f00000031c0)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000003200)='vers\x00', &(0x7f0000003240)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f0000003180)={0x30, r6, 0x1, 0x0, 0xd, 0x8, 0x1, &(0x7f0000002180)=""/4096}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 519.558415ms ago: executing program 3 (id=568): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x51) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x24b3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008840) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x400, 0x49, 0x1e}, 0x18) unlinkat(r4, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000500)={0x3, 0x0, r0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002580)={0x50, 0x0, r6, {0x7, 0x2d, 0x0, 0x10000011, 0x3, 0x6, 0x6, 0x6d48, 0x0, 0x0, 0x20, 0x9}}, 0x50) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000002600), &(0x7f0000002640), 0x2, 0x1) syz_io_uring_setup(0x36d, &(0x7f0000002680)={0x0, 0xe8ca, 0x1000, 0x1, 0x254, 0x0, r5}, &(0x7f0000002700)=0x0, &(0x7f0000002740), &(0x7f0000002780)) syz_ublk_setup_queues(r5, 0x0, &(0x7f00000027c0)={0x0, 0xbb7d, 0x10, 0x1, 0x13c, 0x0, r5}, &(0x7f0000002840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x45b5, 0x4000, 0x1, 0xb6, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x34ea, 0x1, 0x3, 0x207}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9907, 0x8, 0x1, 0x2ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe94, 0x40000, 0x0, 0x13c}}], 0x4, &(0x7f0000003ac0)={0x2e, 0x1, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfa2}, 0x0, 0x0, '\x00', {0x4, 0xb02, 0x0, &(0x7f0000002ac0)=@buf_max_buf="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"}}, &(0x7f0000003b40)) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000003b80)={0x0, 0xa082, 0x20000, 0x2, 0x9, 0x0, r5}, &(0x7f0000003c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42f6, 0x2, 0x1, 0x202, 0x0, r5}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6968, 0x8, 0x2, 0xe4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ab0, 0x20, 0x1, 0x244}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa73e, 0x0, 0x1, 0x114, 0x0, r5}}], 0x4, &(0x7f0000004e80)={0x2e, 0x51, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x450, 0x0, &(0x7f0000003e80)=@buf_1k="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"}}, &(0x7f0000004f00)) syz_io_uring_submit(r7, r9, r11, &(0x7f0000004f40)=@IORING_OP_SOCKET={0x2d, 0x24, 0x0, 0x6, 0x100000000, 0x0, 0x4, 0x0, 0x1, {0x0, 0x0, 0x7}}) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000004fc0)=@echo=0x2) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000050c0)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x1c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0xc1) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000005140), r5) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x14, r12, 0x20, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000005240)={0x0, @in={0x2, 0x4e22, @broadcast}, @qipcrtr={0x2a, 0x3, 0x7ffe}, @phonet={0x23, 0x7, 0x0, 0x2}, 0x22bd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800, 0x2, 0x6}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000052c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000005300)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f00000053c0)={'syztnl0\x00', &(0x7f0000005340)={'gre0\x00', r14, 0x700, 0x40, 0x4, 0x9, {{0xd, 0x4, 0x2, 0x29, 0x34, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "650f3a6425efb78b90"}]}, @timestamp={0x44, 0xc, 0x29, 0x0, 0xc, [0xd4e5, 0xa17]}]}}}}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000005400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r13, 0xc06864ce, &(0x7f0000005480)={r15, 0x10001, 0x800, 0x1, 0xb25ba87cec53c308, [], [0x1, 0x2, 0x3, 0x1000], [0x2, 0xd1, 0x7, 0xaf], [0x8, 0x8000000000000001, 0x6, 0x400]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000005540)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0xa000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000005500)="cf6bd156384087aabc88505ab51ffe9041c8a6399acefda607ac250d351c677ca500e4ec6fca4eabd2726f5465dc1278b0f3", 0x32, r10}, 0x68) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000005740)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005700)={&(0x7f0000005600)={0xd8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x270}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x15}, 0x4040040) openat(r4, &(0x7f0000005780)='./file0/file0\x00', 0x88000, 0x2a) 519.15935ms ago: executing program 3 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 339.259832ms ago: executing program 3 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r5 = syz_io_uring_setup(0x111, &(0x7f0000000a80)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000bc0)=[0x2, 0x6], 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_LABELS_MASK={0x2c, 0x17, [0x2, 0x5, 0x7, 0x7, 0x101, 0x8, 0x8, 0x5, 0x1, 0xf]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x300000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xae31}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x804) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001800010600000000000000001c140000fe0000010000000008001a0000014100080004000100"], 0x30}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000580), 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000680)={0x1d, 0x0, 0x1}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000740)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r12, &(0x7f0000000780)={&(0x7f00000007c0)={0x1d, 0x0, 0x8000000000}, 0x18, &(0x7f0000000800)={&(0x7f0000000440)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) 189.200387ms ago: executing program 3 (id=571): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/icmp\x00') getdents(r1, &(0x7f0000000640)=""/78, 0x4e) (async) setuid(0xee00) (async) fchown(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="42e013333bec6ed14f2cc65cd5bd6fb4803bc65792169a7d3c7347053cbe5dae1adef3d12d6b7d38e5de61f078eed9d7d402fd90ae4c7484", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000000c0)="9f285379d32a797807cad073a63fdb7a619c8b8a8bb9ced644691729ed76e01f6347ed4d784dae7cc102463ed4d0e38f814d", 0x32}, {&(0x7f0000000140)="aeafd5c92bfec4a3182b7bc7d8ff91092a27c6b31d702eacc6cfa690142804c38914527ac831cd3b4abd0915e334d19cded79ca6fc3eba71f770e49560081d0e6c53e028c425ce9119607799932ce91687c068b9b80a6e39fb212f90dbcd5007386af508404ed365eaf31e9b825726", 0x6f}, {&(0x7f0000001200)="6ebf575439e9a14acfb03932aad895881399360b658ef65d707a54804d30938ceedaea5212a0d9fd06a298dd48ab7db0354acdb973742b2f4053ab78890ea8d604e647d316d0ec4f986f68ac30aecca6f88dbaa64149e0e3be2fb00f2a83f93c4131d190ffe75a0d201fe26370d189f59e2d53a769d380093f76d67add1cdbb7031f8bcb9bc754830d50c84e50833e0c09e219c83e5ab09e49df7faacf97bf8af57264e97bda4334e9475ad17209124b82dbd70fe19eba5dc4bc47adc223eec99fa226f6370229f16ccca5fe378fda1e21", 0xd1}, {&(0x7f00000003c0)="dbc4b7e833a2b7772723ad979413b9c0e180240267502130c1d2b5e0a79fc345ce9a043159ca628831463040a53b3a9a1158adac9e8b227899bff7d981d7c780601e0ad5bf787214bcd9481b0d044504de22ced928bff2477e2783974e649228a14af513b478c33f7d99b35f278b38626b020b71d741c515897d50b3a9b9727a8392a406f1c33214750e62bcedf0390017115fad2e28822b68b9d30baa4168279a9330a5cb67d87e058a10c427763306a68b7c3a3ad393395bc772316ec2ffa21ee0290b72deb3abd7aca5bab1385ba2a326073f313aa968584bf48e436d72d4", 0xe0}, {&(0x7f0000000500)="76d4119ad4a49c838a524dac4bb6207a34be6047d1397b", 0x17}, {&(0x7f0000000540)="09ba4fe42de24854b4b9f27785", 0xd}, {&(0x7f0000001000)="23585ab5aba74769816b0ce6d5d38361c0117d64faab9fca3f50b23aebfa7c94c510f2f29469abc16ef2664bbb5a82bb6e6d08d65b16b6c282c0f31c7796937f7d1681f1578fee6b20809022292d2844d22a1496f8824672bcebdb5e05e8ec51076e00619c6b24a48f461346b504a96867da0bc756f6290c5999eb9d4e4fbf72000eac6425dc73b62bf5dced0b96765524fb9e8f0e6ed02783a9d05bfb45c1e694947bc77391374864452029833b460ff52fa77bd2bbbd8ee64b1d48049e7618b69616720b30c27bdb8be45aa3539d486bde9cec8309c56ee14ad4eb528735", 0xdf}, {&(0x7f00000007c0)="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", 0xfe}, {&(0x7f0000000f40)="9ba09b70658d3fce37ec6047a1b8e43bf2374045a3cf4cc8dab71a704380959c8fbebca47b2bcf5284869835a336689a1947701e03a781f9b55f3fd688ca03b78a120be1b18fafda55307bfe9203e0314a51ed48a1383d59f97dc14676dbfdf6139dedf0a943fc2e7e7e875322824c7bf7074059c529e8462699a88f7b559d083fd104129034e16d6433b4fab11851abd8477b2cc5177622e6aa4127a74eadba72c5595d65bc6cb962dce35e", 0xac}, {&(0x7f00000006c0)="521ef29fb150ec983f9923ea5829483d37953f858ac84d7b8ade0c8933b6668920fb041c1d58bb98c268add28144c60ba4040b9523b7f8e48f5efed1fc01aec892276d5b58ff4bd85c163b8ad65f574efaaefd6802c07f5a30227e0ab7b9ae5e318813c881135d76a33ed70ecef5b834d955e40fa8b4b91c8d9fe4f1618e2e", 0x7f}, {&(0x7f0000000b80)="2cd9d49f36d540eb3aaa0372cf26e6e72a8f99ecc4327a995096f89eb8ad20927df6b6d894feaf2d986ea5d540f9cc43ac9e001b051bee8754156d329da59a690ab24479cd2d3bee4029a23c147058fae9d11484a0f7d032ec6e77616e676aeecc98b793f534667fbecbea2e4bbbf062", 0x70}, {&(0x7f0000000c80)="28b20429c767c96e88c926ac2d8716ffe9205289160b5753661c", 0x1a}], 0xc}}], 0x3, 0x2090) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000380)) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp1\x00', 0x0}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r3, 0x29, 0x9, 0x0, 0x2, 0x1d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x10, 0x0, 0x6, 0x7}}) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 188.848373ms ago: executing program 1 (id=572): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r1 = openat(r0, &(0x7f0000000040)='can/rcvlist_eff\x00', 0x0, 0x0) read(r1, &(0x7f0000000080), 0x1000) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x20) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write(r3, &(0x7f0000000a80)='transport=loop,nqn=testsu', 0x19) 4.157961ms ago: executing program 1 (id=573): r0 = socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1d6) mkdirat(0xffffffffffffff9c, 0x0, 0x16c) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000b) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000000900)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000980)="c9a8", 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) r3 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 0x0eff [ 60.297223][ T6448] netlink: 'syz.0.139': attribute type 4 has an invalid length. [ 60.299755][ T6448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6448 comm=syz.0.139 [ 60.487636][ T6469] sctp: [Deprecated]: syz.3.144 (pid 6469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.487636][ T6469] Use struct sctp_sack_info instead [ 60.487789][ T6469] nbd: must specify a size in bytes for the device [ 60.534382][ T6476] netlink: 'syz.0.146': attribute type 4 has an invalid length. [ 60.534405][ T6476] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 60.588957][ T6487] autofs4:pid:6487:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 60.646104][ T6492] IPv6: Can't replace route, no match found [ 60.730478][ T6497] random: crng reseeded on system resumption [ 60.792323][ T6507] dvmrp6: entered allmulticast mode [ 61.097950][ T6516] uhci_hcd 0000:00:1d.0: remove, state 4 [ 61.098038][ T6516] usb usb2: USB disconnect, device number 1 [ 61.121621][ T6516] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 61.174939][ T6524] Cannot find set identified by id 0 to match [ 61.176106][ T6524] __nla_validate_parse: 40 callbacks suppressed [ 61.176117][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.161'. [ 61.194686][ T6524] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 61.208404][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.161'. [ 61.208433][ T6524] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 61.268628][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 61.274010][ T6538] netlink: 64 bytes leftover after parsing attributes in process `syz.0.164'. [ 61.342525][ T6548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=6548 comm=syz.0.167 [ 61.567414][ T5569] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 61.572422][ T5569] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 61.641550][ T6598] fido_id[6598]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.670035][ T6533] cgroup: fork rejected by pids controller in /syz1 [ 61.696723][ T6609] gfs2: error -5 reading superblock [ 62.051372][ T6635] netlink: 14 bytes leftover after parsing attributes in process `syz.0.177'. [ 62.441685][ T6664] device-mapper: table: 248:3: ram0 too small for target: start=16, len=8256, dev_size=8192 [ 62.441711][ T6664] device-mapper: core: Cannot calculate initial queue limits [ 62.441716][ T6664] device-mapper: ioctl: unable to set up device queue for new table. [ 62.621606][ T6670] bond0: (slave batadv0): Releasing backup interface [ 62.628434][ T6670] bridge_slave_0: left allmulticast mode [ 62.628457][ T6670] bridge_slave_0: left promiscuous mode [ 62.628758][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.639156][ T6670] bridge_slave_1: left allmulticast mode [ 62.639185][ T6670] bridge_slave_1: left promiscuous mode [ 62.639326][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.656402][ T6670] bond0: (slave bond_slave_0): Releasing backup interface [ 62.661600][ T6670] bond0: (slave bond_slave_1): Releasing backup interface [ 62.669624][ T6670] team0: Port device team_slave_0 removed [ 62.676845][ T6670] team0: Port device team_slave_1 removed [ 62.678613][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.678631][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.681677][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.681692][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.684769][ T6670] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.739332][ T6674] mmap: syz.3.185 (6674): VmData 37523456 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 62.782558][ T6674] bond2: invalid ARP target 0.0.0.0 specified for addition [ 62.782583][ T6674] bond2: option arp_ip_target: invalid value (0) [ 62.785302][ T6674] bond2 (unregistering): Released all slaves [ 62.848060][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 62.848839][ T6683] erspan0: entered promiscuous mode [ 62.848855][ T6683] erspan0: entered allmulticast mode [ 62.851764][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 62.860715][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 62.860725][ T42] audit: type=1400 audit(1792930274.344:426): avc: denied { ioctl } for pid=6685 comm="syz.0.189" path="socket:[13607]" dev="sockfs" ino=13607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.863723][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 62.893628][ T42] audit: type=1400 audit(1792930274.374:427): avc: denied { listen } for pid=6694 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.894086][ T42] audit: type=1400 audit(1792930274.374:428): avc: denied { connect } for pid=6694 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.914109][ T6697] FAULT_INJECTION: forcing a failure. [ 62.914109][ T6697] name failslab, interval 1, probability 0, space 0, times 1 [ 62.914150][ T6697] CPU: 0 UID: 0 PID: 6697 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 62.914162][ T6697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.914168][ T6697] Call Trace: [ 62.914189][ T6697] [ 62.914193][ T6697] dump_stack_lvl+0x100/0x190 [ 62.914237][ T6697] should_fail_ex.cold+0x5/0xa [ 62.914259][ T6697] should_failslab+0xc2/0x120 [ 62.914278][ T6697] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.914291][ T6697] ? __pfx_map_id_range_down+0x10/0x10 [ 62.914307][ T6697] ? security_inode_alloc+0x3b/0x2c0 [ 62.914347][ T6697] security_inode_alloc+0x3b/0x2c0 [ 62.914362][ T6697] inode_init_always_gfp+0xc6f/0xfb0 [ 62.914383][ T6697] alloc_inode+0x8e/0x250 [ 62.914395][ T6697] new_inode+0x22/0x1c0 [ 62.914409][ T6697] ovl_new_inode+0x1d/0x50 [ 62.914448][ T6697] ovl_create_object+0x180/0x3b0 [ 62.914460][ T6697] ? __pfx_ovl_create_object+0x10/0x10 [ 62.914475][ T6697] ? inode_permission+0x377/0x630 [ 62.914490][ T6697] ovl_mkdir+0x30/0x40 [ 62.914502][ T6697] vfs_mkdir+0x367/0x850 [ 62.914517][ T6697] filename_mkdirat+0x48b/0x5e0 [ 62.914535][ T6697] ? __pfx_filename_mkdirat+0x10/0x10 [ 62.914552][ T6697] ? strncpy_from_user+0x19d/0x2d0 [ 62.914586][ T6697] ? do_getname+0x191/0x390 [ 62.914601][ T6697] __x64_sys_mkdirat+0x89/0xc0 [ 62.914619][ T6697] do_syscall_64+0x123/0x790 [ 62.914669][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.914681][ T6697] RIP: 0033:0x7f28d119f559 [ 62.914691][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.914702][ T6697] RSP: 002b:00007f28d2120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 62.914714][ T6697] RAX: ffffffffffffffda RBX: 00007f28d1425fa0 RCX: 00007f28d119f559 [ 62.914722][ T6697] RDX: 00000000000001ff RSI: 0000200000000ec0 RDI: ffffffffffffff9c [ 62.914729][ T6697] RBP: 00007f28d1236b20 R08: 0000000000000000 R09: 0000000000000000 [ 62.914735][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.914742][ T6697] R13: 00007f28d1426038 R14: 00007f28d1425fa0 R15: 00007ffc73aa20d8 [ 62.914757][ T6697] [ 62.918173][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.009339][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.018609][ T42] audit: type=1400 audit(1792930274.504:429): avc: denied { ioctl } for pid=6713 comm="syz.1.194" path="socket:[14590]" dev="sockfs" ino=14590 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.019217][ T6714] rnbd_client L213: map_device: Parameters missing [ 63.021382][ T42] audit: type=1400 audit(1792930274.504:430): avc: denied { create } for pid=6713 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.043335][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.063625][ T6697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.070805][ T42] audit: type=1400 audit(1792930274.554:431): avc: denied { connect } for pid=6713 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.071451][ T42] audit: type=1400 audit(1792930274.554:432): avc: denied { ioctl } for pid=6713 comm="syz.1.194" path="socket:[14595]" dev="sockfs" ino=14595 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.112722][ T42] audit: type=1400 audit(1792930274.594:433): avc: denied { mount } for pid=6719 comm="syz.1.196" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.116106][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 63.116359][ T6720] netlink: 188 bytes leftover after parsing attributes in process `syz.1.196'. [ 63.117160][ T42] audit: type=1400 audit(1792930274.594:434): avc: denied { read write } for pid=6719 comm="syz.1.196" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.117316][ T42] audit: type=1400 audit(1792930274.594:435): avc: denied { open } for pid=6719 comm="syz.1.196" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.262863][ T6735] device-mapper: raid: Choosing default region size of 4MiB [ 63.499207][ T6735] device-mapper: table: 248:4: raid: Not enough devices to satisfy specification (-EINVAL) [ 63.499234][ T6735] device-mapper: ioctl: error adding target to table [ 63.499721][ T6737] device-mapper: table: 248:4: snapshot-origin: Cannot get target device (-ENOENT) [ 63.499735][ T6737] device-mapper: ioctl: error adding target to table [ 63.531467][ T6740] openvswitch: netlink: Missing key (keys=40, expected=80) [ 63.649687][ T5777] overlayfs: failed lookup in lower (newroot/49, name='bus', err=-40): overlapping layers [ 63.650177][ T5777] overlayfs: failed lookup in lower (newroot/49, name='bus', err=-40): overlapping layers [ 63.808643][ T6753] trusted_key: encrypted_key: insufficient parameters specified [ 63.869633][ T5853] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.869655][ T5853] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.932606][ T5853] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.932638][ T5853] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.018806][ T5853] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.018840][ T5853] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.047058][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.050835][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.051536][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.054110][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.056147][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.089803][ T5853] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.089826][ T5853] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.210109][ T5853] bridge_slave_1: left promiscuous mode [ 64.210847][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.215672][ T5853] bridge_slave_0: left allmulticast mode [ 64.215687][ T5853] bridge_slave_0: left promiscuous mode [ 64.215787][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.357046][ T5853] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.362571][ T5853] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.363702][ T5853] .` (unregistering): Released all slaves [ 64.371533][ T5853] bond0 (unregistering): Released all slaves [ 64.383602][ T5853] bond1 (unregistering): Released all slaves [ 64.395755][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.451264][ T6760] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.490022][ T6780] openvswitch: netlink: Missing key (keys=40, expected=80) [ 64.638996][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.841360][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.845355][ T6187] IPVS: starting estimator thread 0... [ 64.896454][ T6816] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 64.927716][ T6811] IPVS: using max 43 ests per chain, 103200 per kthread [ 64.934892][ T5853] hsr_slave_0: left promiscuous mode [ 64.935599][ T5853] hsr_slave_1: left promiscuous mode [ 64.936271][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.936297][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.937225][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.937240][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.952233][ T5853] veth1_macvtap: left promiscuous mode [ 64.952258][ T5853] veth0_macvtap: left promiscuous mode [ 64.952336][ T5853] veth1_vlan: left promiscuous mode [ 64.952377][ T5853] veth0_vlan: left promiscuous mode [ 65.145212][ T5853] team0 (unregistering): Port device team_slave_1 removed [ 65.154228][ T5853] team0 (unregistering): Port device team_slave_0 removed [ 65.276129][ T5491] 8021q: adding VLAN 0 to HW filter on device eth5 [ 65.287791][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.288692][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.288793][ T6760] bridge_slave_0: entered allmulticast mode [ 65.290180][ T6760] bridge_slave_0: entered promiscuous mode [ 65.293409][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.293485][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.293577][ T6760] bridge_slave_1: entered allmulticast mode [ 65.294921][ T6760] bridge_slave_1: entered promiscuous mode [ 65.319502][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.322306][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.350936][ T6760] team0: Port device team_slave_0 added [ 65.360475][ T6760] team0: Port device team_slave_1 added [ 65.380431][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.380442][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.380454][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.381529][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.381537][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.381549][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.412037][ T6760] hsr_slave_0: entered promiscuous mode [ 65.412444][ T6760] hsr_slave_1: entered promiscuous mode [ 65.412762][ T6760] debugfs: 'hsr0' already exists in 'hsr' [ 65.412780][ T6760] Cannot create hsr debugfs directory [ 65.459183][ T6844] FAULT_INJECTION: forcing a failure. [ 65.459183][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 65.459213][ T6844] CPU: 0 UID: 0 PID: 6844 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT(full) [ 65.459234][ T6844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.459244][ T6844] Call Trace: [ 65.459251][ T6844] [ 65.459257][ T6844] dump_stack_lvl+0x100/0x190 [ 65.459289][ T6844] should_fail_ex.cold+0x5/0xa [ 65.459318][ T6844] should_failslab+0xc2/0x120 [ 65.459343][ T6844] kmem_cache_alloc_noprof+0x92/0x6a0 [ 65.459369][ T6844] ? anon_vma_clone+0x2b3/0xca0 [ 65.459398][ T6844] anon_vma_clone+0x2b3/0xca0 [ 65.459429][ T6844] __split_vma+0x750/0x1d70 [ 65.459462][ T6844] ? __pfx___split_vma+0x10/0x10 [ 65.459504][ T6844] vms_gather_munmap_vmas+0x1d2/0x1720 [ 65.459540][ T6844] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 65.459575][ T6844] ? __lock_acquire+0x5c0/0x1f40 [ 65.459600][ T6844] ? __pfx_vma_link+0x10/0x10 [ 65.459632][ T6844] do_vmi_align_munmap+0x287/0x5f0 [ 65.459655][ T6844] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 65.459704][ T6844] ? mas_walk+0x260/0x310 [ 65.459728][ T6844] do_vmi_munmap+0x1f8/0x3e0 [ 65.459750][ T6844] unmap_source_vma+0x35c/0x8f0 [ 65.459771][ T6844] ? __pfx_unmap_source_vma+0x10/0x10 [ 65.459796][ T6844] ? __vma_start_write+0x17f/0x280 [ 65.459819][ T6844] ? __pfx___vma_start_write+0x10/0x10 [ 65.459845][ T6844] ? vm_stat_account+0x162/0x190 [ 65.459874][ T6844] move_vma+0x351/0xf40 [ 65.459894][ T6844] ? __pfx_mtree_load+0x10/0x10 [ 65.459914][ T6844] ? __pfx_move_vma+0x10/0x10 [ 65.459931][ T6844] ? security_mmap_addr+0x71/0x1e0 [ 65.459949][ T6844] ? __get_unmapped_area+0x255/0x3e0 [ 65.459976][ T6844] ? vrm_set_new_addr+0x1f5/0x2a0 [ 65.460008][ T6844] mremap_to+0x234/0x4c0 [ 65.460026][ T6844] ? __pfx_mremap_to+0x10/0x10 [ 65.460043][ T6844] ? mas_walk+0x260/0x310 [ 65.460065][ T6844] __do_sys_mremap+0x9b7/0x1780 [ 65.460091][ T6844] ? __pfx___do_sys_mremap+0x10/0x10 [ 65.460111][ T6844] ? find_held_lock+0x2b/0x80 [ 65.460129][ T6844] ? do_sys_openat2+0x1ae/0x1d0 [ 65.460153][ T6844] ? __pfx_do_futex+0x10/0x10 [ 65.460190][ T6844] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.460232][ T6844] ? __x64_sys_openat+0x12d/0x210 [ 65.460251][ T6844] ? xfd_validate_state+0x129/0x190 [ 65.460283][ T6844] do_syscall_64+0x123/0x790 [ 65.460306][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.460326][ T6844] RIP: 0033:0x7fe179b9f559 [ 65.460342][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.460359][ T6844] RSP: 002b:00007fe17aace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 65.460377][ T6844] RAX: ffffffffffffffda RBX: 00007fe179e25fa0 RCX: 00007fe179b9f559 [ 65.460390][ T6844] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 65.460401][ T6844] RBP: 00007fe179c36b20 R08: 0000200000ff6000 R09: 0000000000000000 [ 65.460413][ T6844] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 65.460423][ T6844] R13: 00007fe179e26038 R14: 00007fe179e25fa0 R15: 00007fff4593fbc8 [ 65.460449][ T6844] [ 65.606339][ T6760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.610807][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.611655][ T6760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.617103][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.617967][ T6760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.624349][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.624729][ T6760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.632334][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.035085][ T6870] capability: warning: `syz.2.227' uses 32-bit capabilities (legacy support in use) [ 66.139488][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.146270][ T6760] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.150138][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.150189][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.154755][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.154801][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.192707][ T5790] Bluetooth: hci1: command tx timeout [ 66.291878][ T6884] __nla_validate_parse: 5 callbacks suppressed [ 66.291890][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 66.413434][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.459118][ T6893] overlay: ./file0 is not a directory [ 66.558146][ T6760] veth0_vlan: entered promiscuous mode [ 66.564189][ T6760] veth1_vlan: entered promiscuous mode [ 66.584797][ T6760] veth0_macvtap: entered promiscuous mode [ 66.589383][ T6760] veth1_macvtap: entered promiscuous mode [ 66.598155][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.601495][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.636876][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 66.745153][ T6905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6905 comm=syz.3.234 [ 66.814948][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815052][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815127][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815196][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815285][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815354][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815423][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.815509][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 66.817551][ T6873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817685][ T6873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817811][ T6873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817946][ T6873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.836247][ T6187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.836265][ T6187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.851572][ T6187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.851590][ T6187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.299777][ T6936] ip_tables: iptables: counters copy to user failed while replacing table [ 67.349761][ T6938] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 67.373178][ T6938] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.456102][ T6946] Bluetooth: hci0: unsupported parameter 5135 [ 67.456122][ T6946] Bluetooth: hci0: invalid length 3, exp 2 for type 18 [ 67.522390][ T6949] fuse: Invalid rootmode [ 67.524567][ T6949] FAULT_INJECTION: forcing a failure. [ 67.524567][ T6949] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.524596][ T6949] CPU: 2 UID: 0 PID: 6949 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 67.524616][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.524626][ T6949] Call Trace: [ 67.524632][ T6949] [ 67.524640][ T6949] dump_stack_lvl+0x100/0x190 [ 67.524681][ T6949] should_fail_ex.cold+0x5/0xa [ 67.524706][ T6949] ? prepare_alloc_pages+0x16d/0x5b0 [ 67.524734][ T6949] should_fail_alloc_page+0xeb/0x140 [ 67.524763][ T6949] prepare_alloc_pages+0x1f0/0x5b0 [ 67.524793][ T6949] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 67.524818][ T6949] ? rcu_is_watching+0x13/0xc0 [ 67.524836][ T6949] ? trace_mm_page_alloc+0x164/0x1c0 [ 67.524862][ T6949] ? __alloc_frozen_pages_noprof+0x33e/0x3190 [ 67.524884][ T6949] ? do_raw_spin_lock+0x128/0x260 [ 67.524911][ T6949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.524935][ T6949] ? mark_held_locks+0x40/0x70 [ 67.524957][ T6949] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 67.525021][ T6949] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.525052][ T6949] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 67.525079][ T6949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.525106][ T6949] ? kasan_save_track+0x14/0x30 [ 67.525127][ T6949] ? __kasan_slab_alloc+0x89/0x90 [ 67.525150][ T6949] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 67.525171][ T6949] ? alloc_vmap_area+0x643/0x2bc0 [ 67.525191][ T6949] ? __get_vm_area_node+0x1ed/0x350 [ 67.525214][ T6949] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 67.525238][ T6949] ? __vmalloc_node_noprof+0xad/0xf0 [ 67.525262][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.525331][ T6949] ? packet_setsockopt+0x11c4/0x2380 [ 67.525349][ T6949] ? do_sock_setsockopt+0xf3/0x1d0 [ 67.525420][ T6949] ? __sys_setsockopt+0x195/0x220 [ 67.525440][ T6949] ? __x64_sys_setsockopt+0xbd/0x160 [ 67.525460][ T6949] ? do_syscall_64+0x123/0x790 [ 67.525495][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.525524][ T6949] alloc_pages_bulk_noprof+0x624/0x14a0 [ 67.525553][ T6949] ? policy_nodemask+0xed/0x4f0 [ 67.525582][ T6949] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 67.525619][ T6949] __kasan_populate_vmalloc+0xf0/0x210 [ 67.525649][ T6949] alloc_vmap_area+0x963/0x2bc0 [ 67.525688][ T6949] ? kasan_save_track+0x14/0x30 [ 67.525711][ T6949] ? __kasan_kmalloc+0xaa/0xb0 [ 67.525733][ T6949] ? __pfx_alloc_vmap_area+0x10/0x10 [ 67.525755][ T6949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.525775][ T6949] ? __get_vm_area_node+0x124/0x350 [ 67.525802][ T6949] __get_vm_area_node+0x1ed/0x350 [ 67.525826][ T6949] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 67.525850][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.525885][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.525916][ T6949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.525943][ T6949] ? alloc_pages_mpol+0x260/0x560 [ 67.525969][ T6949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 67.526000][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.526026][ T6949] __vmalloc_node_noprof+0xad/0xf0 [ 67.526051][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.526083][ T6949] packet_set_ring+0xc0c/0x1f00 [ 67.526119][ T6949] packet_setsockopt+0x11c4/0x2380 [ 67.526137][ T6949] ? sock_has_perm+0x254/0x320 [ 67.526164][ T6949] ? __pfx_packet_setsockopt+0x10/0x10 [ 67.526182][ T6949] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 67.526213][ T6949] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 67.526250][ T6949] ? find_held_lock+0x2b/0x80 [ 67.526268][ T6949] ? __fget_files+0x215/0x3d0 [ 67.526300][ T6949] ? selinux_socket_setsockopt+0x6a/0x80 [ 67.526321][ T6949] ? __pfx_packet_setsockopt+0x10/0x10 [ 67.526342][ T6949] do_sock_setsockopt+0xf3/0x1d0 [ 67.526371][ T6949] __sys_setsockopt+0x195/0x220 [ 67.526396][ T6949] __x64_sys_setsockopt+0xbd/0x160 [ 67.526415][ T6949] ? do_syscall_64+0xae/0x790 [ 67.526433][ T6949] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.526462][ T6949] do_syscall_64+0x123/0x790 [ 67.526484][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.526505][ T6949] RIP: 0033:0x7ff6ce39f559 [ 67.526522][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.526540][ T6949] RSP: 002b:00007ff6cf289028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.526560][ T6949] RAX: ffffffffffffffda RBX: 00007ff6ce625fa0 RCX: 00007ff6ce39f559 [ 67.526572][ T6949] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000a [ 67.526584][ T6949] RBP: 00007ff6ce436b20 R08: 0000000000000010 R09: 0000000000000000 [ 67.526596][ T6949] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 67.526607][ T6949] R13: 00007ff6ce626038 R14: 00007ff6ce625fa0 R15: 00007ffc7c6bf058 [ 67.526633][ T6949] [ 67.527108][ T6949] syz.2.246: vmalloc error: size 8388608, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 67.527204][ T6949] CPU: 2 UID: 0 PID: 6949 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 67.527225][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.527236][ T6949] Call Trace: [ 67.527242][ T6949] [ 67.527250][ T6949] dump_stack_lvl+0x100/0x190 [ 67.527280][ T6949] warn_alloc.cold+0x9e/0xb2 [ 67.527301][ T6949] ? __pfx_warn_alloc+0x10/0x10 [ 67.527318][ T6949] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.527383][ T6949] ? __get_vm_area_node+0x2f0/0x350 [ 67.527415][ T6949] ? __get_vm_area_node+0x22b/0x350 [ 67.527445][ T6949] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 67.527481][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.527515][ T6949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.527542][ T6949] ? alloc_pages_mpol+0x260/0x560 [ 67.527570][ T6949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 67.527617][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.527645][ T6949] __vmalloc_node_noprof+0xad/0xf0 [ 67.527678][ T6949] ? packet_set_ring+0xc0c/0x1f00 [ 67.527711][ T6949] packet_set_ring+0xc0c/0x1f00 [ 67.527748][ T6949] packet_setsockopt+0x11c4/0x2380 [ 67.527767][ T6949] ? sock_has_perm+0x254/0x320 [ 67.527793][ T6949] ? __pfx_packet_setsockopt+0x10/0x10 [ 67.527810][ T6949] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 67.527840][ T6949] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 67.527877][ T6949] ? find_held_lock+0x2b/0x80 [ 67.527895][ T6949] ? __fget_files+0x215/0x3d0 [ 67.527925][ T6949] ? selinux_socket_setsockopt+0x6a/0x80 [ 67.527943][ T6949] ? __pfx_packet_setsockopt+0x10/0x10 [ 67.527963][ T6949] do_sock_setsockopt+0xf3/0x1d0 [ 67.527989][ T6949] __sys_setsockopt+0x195/0x220 [ 67.528015][ T6949] __x64_sys_setsockopt+0xbd/0x160 [ 67.528032][ T6949] ? do_syscall_64+0xae/0x790 [ 67.528048][ T6949] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.528077][ T6949] do_syscall_64+0x123/0x790 [ 67.528097][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.528116][ T6949] RIP: 0033:0x7ff6ce39f559 [ 67.528131][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.528148][ T6949] RSP: 002b:00007ff6cf289028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.528165][ T6949] RAX: ffffffffffffffda RBX: 00007ff6ce625fa0 RCX: 00007ff6ce39f559 [ 67.528178][ T6949] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000a [ 67.528189][ T6949] RBP: 00007ff6ce436b20 R08: 0000000000000010 R09: 0000000000000000 [ 67.528201][ T6949] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 67.528212][ T6949] R13: 00007ff6ce626038 R14: 00007ff6ce625fa0 R15: 00007ffc7c6bf058 [ 67.528237][ T6949] [ 67.546425][ T6949] Mem-Info: [ 67.546438][ T6949] active_anon:16357 inactive_anon:41 isolated_anon:0 [ 67.546438][ T6949] active_file:94 inactive_file:61262 isolated_file:0 [ 67.546438][ T6949] unevictable:1000 dirty:257 writeback:0 [ 67.546438][ T6949] slab_reclaimable:11046 slab_unreclaimable:73661 [ 67.546438][ T6949] mapped:31238 shmem:8440 pagetables:3704 [ 67.546438][ T6949] sec_pagetables:300 bounce:0 [ 67.546438][ T6949] kernel_misc_reclaimable:0 [ 67.546438][ T6949] free:423105 free_pcp:21979 free_cma:0 [ 67.546487][ T6949] Node 0 active_anon:65108kB inactive_anon:164kB active_file:376kB inactive_file:244044kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:124952kB dirty:1028kB writeback:0kB shmem:31760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15072kB pagetables:8220kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.546537][ T6949] Node 1 active_anon:320kB inactive_anon:0kB active_file:0kB inactive_file:1004kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:256kB pagetables:6596kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 67.546581][ T6949] Node 0 DMA free:15340kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 67.546630][ T6949] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 67.546667][ T6949] Node 0 DMA32 free:73608kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:65108kB inactive_anon:164kB active_file:376kB inactive_file:244044kB unevictable:2000kB writepending:1028kB zspages:0kB present:2080628kB managed:1231552kB mlocked:0kB bounce:0kB free_pcp:53636kB local_pcp:15824kB free_cma:0kB [ 67.546720][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 67.546750][ T6949] Node 1 Normal free:1603472kB boost:0kB min:40164kB low:50204kB high:60244kB reserved_highatomic:0kB free_highatomic:0kB active_anon:320kB inactive_anon:0kB active_file:0kB inactive_file:1004kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:34252kB local_pcp:3656kB free_cma:0kB [ 67.593918][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 67.593956][ T6949] Node 0 DMA: 5*4kB (U) 5*8kB (U) 5*16kB (U) 5*32kB (U) 5*64kB (U) 5*128kB (U) 5*256kB (U) 5*512kB (U) 6*1024kB (U) 2*2048kB (U) 0*4096kB = 15340kB [ 67.594111][ T6949] Node 0 DMA32: 1066*4kB (UE) 268*8kB (UME) 135*16kB (UME) 573*32kB (UME) 114*64kB (UME) 47*128kB (UME) 84*256kB (UME) 62*512kB (UME) 26*1024kB (UM) 1*2048kB (M) 0*4096kB = 122136kB [ 67.594236][ T6949] Node 1 Normal: 19*4kB (UME) 207*8kB (UM) 194*16kB (UME) 219*32kB (UM) 209*64kB (UM) 203*128kB (UME) 192*256kB (U) 188*512kB (UE) 170*1024kB (UME) 8*2048kB (UE) 297*4096kB (M) = 1603588kB [ 67.594369][ T6949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.594382][ T6949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.594394][ T6949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.594407][ T6949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.594419][ T6949] 70823 total pagecache pages [ 67.594425][ T6949] 0 pages in swap cache [ 67.594431][ T6949] Free swap = 124996kB [ 67.594436][ T6949] Total swap = 124996kB [ 67.594443][ T6949] 1048443 pages RAM [ 67.594448][ T6949] 0 pages HighMem/MovableOnly [ 67.594453][ T6949] 291245 pages reserved [ 67.594459][ T6949] 0 pages cma reserved [ 67.859007][ T6956] bridge0: port 3(veth0) entered blocking state [ 67.859096][ T6956] bridge0: port 3(veth0) entered disabled state [ 67.859192][ T6956] veth0: entered allmulticast mode [ 67.859925][ T6956] veth0: entered promiscuous mode [ 67.860263][ T6956] bridge0: port 3(veth0) entered blocking state [ 67.860309][ T6956] bridge0: port 3(veth0) entered forwarding state [ 68.048360][ T6964] block2mtd: error: cannot open device #! [ 68.048360][ T6964] IΖ#B&LKo}>} [ 68.048360][ T6964] [ 68.051649][ T6964] fuse: Bad value for 'user_id' [ 68.051665][ T6964] fuse: Bad value for 'user_id' [ 68.217742][ T5790] Bluetooth: hci1: command tx timeout [ 68.242178][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 68.242195][ T42] audit: type=1400 audit(1792930279.724:489): avc: denied { write } for pid=6969 comm="syz.4.254" name="rootcell" dev="proc" ino=4026533895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.298371][ T6974] fuse: Unknown parameter '' [ 68.384812][ T6985] overlayfs: workdir and upperdir must be separate subtrees [ 68.419988][ T6988] tipc: Started in network mode [ 68.420001][ T6988] tipc: Node identity 1000001, cluster identity 4369 [ 68.420007][ T6988] tipc: Node number set to 16777217 [ 68.420935][ T6988] tipc: Cannot configure node identity twice [ 68.422694][ T6988] tipc: Enabling of bearer rejected, failed to enable media [ 68.641170][ T42] audit: type=1400 audit(1792930280.124:490): avc: denied { read } for pid=6997 comm="syz.1.263" name="nullb" dev="configfs" ino=6295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.641202][ T42] audit: type=1400 audit(1792930280.124:491): avc: denied { mounton } for pid=6997 comm="syz.1.263" path="/68/my_configfs" dev="configfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.641223][ T42] audit: type=1400 audit(1792930280.124:492): avc: denied { read open } for pid=6997 comm="syz.1.263" path="/68/my_configfs/nullb" dev="configfs" ino=6295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.654504][ T42] audit: type=1400 audit(1792930280.134:493): avc: denied { read } for pid=6997 comm="syz.1.263" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.654687][ T42] audit: type=1400 audit(1792930280.134:494): avc: denied { open } for pid=6997 comm="syz.1.263" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.781645][ T42] audit: type=1400 audit(1792930280.264:495): avc: denied { read write } for pid=7004 comm="syz.3.264" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.781947][ T42] audit: type=1400 audit(1792930280.264:496): avc: denied { open } for pid=7004 comm="syz.3.264" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.830782][ T7007] FAULT_INJECTION: forcing a failure. [ 68.830782][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 68.830823][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.4.265 Not tainted syzkaller #0 PREEMPT(full) [ 68.830835][ T7007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.830841][ T7007] Call Trace: [ 68.830861][ T7007] [ 68.830866][ T7007] dump_stack_lvl+0x100/0x190 [ 68.830911][ T7007] should_fail_ex.cold+0x5/0xa [ 68.830928][ T7007] should_failslab+0xc2/0x120 [ 68.830947][ T7007] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 68.830961][ T7007] ? shmem_alloc_inode+0x25/0x50 [ 68.830974][ T7007] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 68.830985][ T7007] shmem_alloc_inode+0x25/0x50 [ 68.830995][ T7007] alloc_inode+0x68/0x250 [ 68.831009][ T7007] new_inode+0x22/0x1c0 [ 68.831023][ T7007] shmem_get_inode+0x1e3/0xfe0 [ 68.831038][ T7007] ? __pfx_shmem_get_inode+0x10/0x10 [ 68.831049][ T7007] ? selinux_determine_inode_label+0x1ab/0x400 [ 68.831096][ T7007] shmem_mknod+0x217/0x480 [ 68.831110][ T7007] ? __pfx_shmem_mknod+0x10/0x10 [ 68.831122][ T7007] ? inode_permission+0x377/0x630 [ 68.831138][ T7007] shmem_mkdir+0x31/0x80 [ 68.831151][ T7007] vfs_mkdir+0x367/0x850 [ 68.831165][ T7007] ovl_create_real+0x5f9/0xbd0 [ 68.831202][ T7007] ovl_create_upper+0x22e/0x610 [ 68.831214][ T7007] ? __pfx_ovl_create_upper+0x10/0x10 [ 68.831227][ T7007] ? ovl_override_creator_creds+0x236/0x310 [ 68.831240][ T7007] ovl_create_or_link+0x2e9/0x370 [ 68.831254][ T7007] ovl_create_object+0x2c3/0x3b0 [ 68.831266][ T7007] ? __pfx_ovl_create_object+0x10/0x10 [ 68.831280][ T7007] ? inode_permission+0x377/0x630 [ 68.831296][ T7007] ovl_mkdir+0x30/0x40 [ 68.831307][ T7007] vfs_mkdir+0x367/0x850 [ 68.831322][ T7007] filename_mkdirat+0x48b/0x5e0 [ 68.831341][ T7007] ? __pfx_filename_mkdirat+0x10/0x10 [ 68.831358][ T7007] ? strncpy_from_user+0x19d/0x2d0 [ 68.831374][ T7007] ? do_getname+0x191/0x390 [ 68.831387][ T7007] __x64_sys_mkdirat+0x89/0xc0 [ 68.831403][ T7007] do_syscall_64+0x123/0x790 [ 68.831453][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.831465][ T7007] RIP: 0033:0x7fbe05d9f559 [ 68.831475][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.831486][ T7007] RSP: 002b:00007fbe06bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 68.831498][ T7007] RAX: ffffffffffffffda RBX: 00007fbe06025fa0 RCX: 00007fbe05d9f559 [ 68.831505][ T7007] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 68.831511][ T7007] RBP: 00007fbe05e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 68.831518][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.831524][ T7007] R13: 00007fbe06026038 R14: 00007fbe06025fa0 R15: 00007ffd380a4148 [ 68.831538][ T7007] [ 68.838387][ T7007] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 68.838405][ T7007] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 68.855207][ T6760] overlayfs: failed lookup in lower (newroot/11, name='bus', err=-40): overlapping layers [ 68.855290][ T6760] overlayfs: failed lookup in lower (newroot/11, name='bus', err=-40): overlapping layers [ 68.931102][ T7011] FAULT_INJECTION: forcing a failure. [ 68.931102][ T7011] name failslab, interval 1, probability 0, space 0, times 0 [ 68.931121][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.3.269 Not tainted syzkaller #0 PREEMPT(full) [ 68.931133][ T7011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.931139][ T7011] Call Trace: [ 68.931148][ T7011] [ 68.931152][ T7011] dump_stack_lvl+0x100/0x190 [ 68.931171][ T7011] should_fail_ex.cold+0x5/0xa [ 68.931188][ T7011] should_failslab+0xc2/0x120 [ 68.931203][ T7011] kmem_cache_alloc_noprof+0x92/0x6a0 [ 68.931216][ T7011] ? __asan_memcpy+0x3c/0x60 [ 68.931226][ T7011] ? __kernfs_new_node+0xd2/0xa10 [ 68.931251][ T7011] __kernfs_new_node+0xd2/0xa10 [ 68.931266][ T7011] ? __pfx___kernfs_new_node+0x10/0x10 [ 68.931282][ T7011] ? lock_acquire+0x1d1/0x380 [ 68.931295][ T7011] ? kernfs_root+0x23/0x2a0 [ 68.931307][ T7011] ? find_held_lock+0x2b/0x80 [ 68.931318][ T7011] ? kernfs_root+0xee/0x2a0 [ 68.931328][ T7011] ? kernfs_root+0xee/0x2a0 [ 68.931343][ T7011] kernfs_new_node+0x194/0x200 [ 68.931358][ T7011] ? __pfx_kernfs_new_node+0x10/0x10 [ 68.931376][ T7011] __kernfs_create_file+0x53/0x350 [ 68.931395][ T7011] cgroup_addrm_files+0x48e/0xd30 [ 68.931418][ T7011] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 68.931440][ T7011] ? css_next_descendant_pre+0x58/0x1a0 [ 68.931455][ T7011] css_populate_dir+0x161/0x590 [ 68.931473][ T7011] cgroup_apply_control_enable+0x441/0xdd0 [ 68.931492][ T7011] cgroup_mkdir+0x9da/0x13a0 [ 68.931509][ T7011] ? __pfx_cgroup_mkdir+0x10/0x10 [ 68.931525][ T7011] kernfs_iop_mkdir+0x111/0x190 [ 68.931536][ T7011] ? security_inode_mkdir+0xc9/0x2b0 [ 68.931549][ T7011] vfs_mkdir+0x367/0x850 [ 68.931564][ T7011] filename_mkdirat+0x48b/0x5e0 [ 68.931582][ T7011] ? __pfx_filename_mkdirat+0x10/0x10 [ 68.931598][ T7011] ? strncpy_from_user+0x19d/0x2d0 [ 68.931614][ T7011] ? do_getname+0x191/0x390 [ 68.931626][ T7011] __x64_sys_mkdirat+0x89/0xc0 [ 68.931643][ T7011] do_syscall_64+0x123/0x790 [ 68.931657][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.931668][ T7011] RIP: 0033:0x7f48e539f559 [ 68.931677][ T7011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.931688][ T7011] RSP: 002b:00007f48e61fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 68.931698][ T7011] RAX: ffffffffffffffda RBX: 00007f48e5625fa0 RCX: 00007f48e539f559 [ 68.931705][ T7011] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 68.931711][ T7011] RBP: 00007f48e5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 68.931717][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.931723][ T7011] R13: 00007f48e5626038 R14: 00007f48e5625fa0 R15: 00007ffd6e89fed8 [ 68.931737][ T7011] [ 68.931750][ T7011] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 68.947500][ T42] audit: type=1400 audit(1792930280.424:497): avc: denied { unmount } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.948576][ T7015] xt_hashlimit: size too large, truncated to 1048576 [ 69.049753][ T5790] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 69.099006][ T42] audit: type=1400 audit(1792930280.584:498): avc: denied { append } for pid=7024 comm="syz.3.272" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.208406][ T7033] vcan0: tx address claim with dlc 0 [ 69.233630][ T7037] autofs4:pid:7037:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 69.412750][ T7057] nfs: Bad value for 'context' [ 69.659981][ T7077] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.659997][ T7077] overlayfs: failed to set xattr on upper [ 69.660000][ T7077] overlayfs: ...falling back to redirect_dir=nofollow. [ 69.660004][ T7077] overlayfs: ...falling back to index=off. [ 69.660007][ T7077] overlayfs: ...falling back to uuid=null. [ 69.661687][ T7077] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.671251][ T7082] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.672068][ T7081] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 70.126010][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.219545][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.305530][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.316043][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.316585][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.319623][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.320976][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.325467][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.400850][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.440620][ T7118] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 70.441402][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.441473][ T7118] bridge0: port 2(bridge_slave_1) entered listening state [ 70.441653][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.441720][ T7118] bridge0: port 1(bridge_slave_0) entered listening state [ 70.444385][ T7118] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.452379][ T7118] batman_adv: batadv0: Adding interface: dummy0 [ 70.452396][ T7118] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.452418][ T7118] batman_adv: batadv0: Interface activated: dummy0 [ 70.526234][ T7126] batadv0: mtu less than device minimum [ 70.526745][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.527227][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.527770][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.528278][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.528762][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.529261][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.530055][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.530980][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.531816][ T7126] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 70.546677][ T7133] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 70.580346][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.580509][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.606753][ T13] veth0: left allmulticast mode [ 70.606775][ T13] veth0: left promiscuous mode [ 70.607249][ T13] bridge0: port 3(veth0) entered disabled state [ 70.616707][ T13] bridge_slave_1: left allmulticast mode [ 70.616728][ T13] bridge_slave_1: left promiscuous mode [ 70.617001][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.626351][ T13] bridge_slave_0: left allmulticast mode [ 70.626373][ T13] bridge_slave_0: left promiscuous mode [ 70.627016][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.784151][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.792705][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.794825][ T13] bond0 (unregistering): Released all slaves [ 70.810061][ T5491] 8021q: adding VLAN 0 to HW filter on device eth6 [ 70.832533][ T7104] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.009973][ T5491] 8021q: adding VLAN 0 to HW filter on device eth7 [ 71.157844][ T5867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 71.165308][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.165463][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.165567][ T7104] bridge_slave_0: entered allmulticast mode [ 71.166876][ T7104] bridge_slave_0: entered promiscuous mode [ 71.170515][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.170636][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.170732][ T7104] bridge_slave_1: entered allmulticast mode [ 71.172240][ T7104] bridge_slave_1: entered promiscuous mode [ 71.194561][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.196321][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.245149][ T7104] team0: Port device team_slave_0 added [ 71.257827][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.257867][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.260387][ T7104] team0: Port device team_slave_1 added [ 71.300897][ T5491] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.314079][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 71.315332][ T5867] usb 7-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 71.316605][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.316623][ T5867] usb 7-1: config 0 has no interfaces? [ 71.321145][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.321175][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.321196][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.321441][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.321459][ T5867] usb 7-1: Product: syz [ 71.321472][ T5867] usb 7-1: Manufacturer: syz [ 71.321484][ T5867] usb 7-1: SerialNumber: syz [ 71.340266][ T5867] usb 7-1: config 0 descriptor?? [ 71.341944][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.341957][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.341979][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.435463][ T13] hsr_slave_0: left promiscuous mode [ 71.437018][ T13] hsr_slave_1: left promiscuous mode [ 71.437675][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.437690][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.439922][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.439937][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.453287][ T13] veth1_macvtap: left promiscuous mode [ 71.453309][ T13] veth0_macvtap: left promiscuous mode [ 71.453346][ T13] veth1_vlan: left promiscuous mode [ 71.453407][ T13] veth0_vlan: left promiscuous mode [ 71.592184][ T13] team0 (unregistering): Port device team_slave_1 removed [ 71.605083][ T13] team0 (unregistering): Port device team_slave_0 removed [ 71.665178][ T7104] hsr_slave_0: entered promiscuous mode [ 71.666175][ T7104] hsr_slave_1: entered promiscuous mode [ 71.666815][ T7104] debugfs: 'hsr0' already exists in 'hsr' [ 71.666832][ T7104] Cannot create hsr debugfs directory [ 71.674786][ T7189] __nla_validate_parse: 25 callbacks suppressed [ 71.674800][ T7189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.306'. [ 71.691380][ T5867] usb 7-1: USB disconnect, device number 2 [ 71.763147][ T7193] veth1_to_hsr: entered allmulticast mode [ 71.912863][ T7104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.921223][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.921987][ T7104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.934419][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.935082][ T7104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.955811][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.956621][ T7104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.965570][ T7104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.975621][ T5491] 8021q: adding VLAN 0 to HW filter on device eth9 [ 71.991877][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.991929][ T7104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.992027][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.992074][ T7104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.023555][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.070800][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.072038][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.081641][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.085383][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.085467][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.093112][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.093173][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.237636][ T7239] autofs4:pid:7239:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 72.366012][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.378627][ T67] Bluetooth: hci1: command tx timeout [ 72.537765][ T7104] veth0_vlan: entered promiscuous mode [ 72.542125][ T7104] veth1_vlan: entered promiscuous mode [ 72.564218][ T7104] veth0_macvtap: entered promiscuous mode [ 72.571815][ T7104] veth1_macvtap: entered promiscuous mode [ 72.590911][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.600763][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.647473][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.647690][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.647864][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.666675][ T6195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.666726][ T6195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.692206][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.692219][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.707515][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.734815][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=7273 comm=syz.2.319 [ 72.735194][ T7273] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 72.753312][ T7273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.761582][ T7277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.761737][ T7277] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 72.761926][ T7277] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 72.940734][ T7295] netlink: 68 bytes leftover after parsing attributes in process `syz.5.324'. [ 73.094187][ T7307] FAULT_INJECTION: forcing a failure. [ 73.094187][ T7307] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.094241][ T7307] CPU: 2 UID: 0 PID: 7307 Comm: syz.5.328 Not tainted syzkaller #0 PREEMPT(full) [ 73.094263][ T7307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.094273][ T7307] Call Trace: [ 73.094299][ T7307] [ 73.094304][ T7307] dump_stack_lvl+0x100/0x190 [ 73.094351][ T7307] should_fail_ex.cold+0x5/0xa [ 73.094368][ T7307] get_futex_key+0x1c9/0x13e0 [ 73.094391][ T7307] ? __pfx_get_futex_key+0x10/0x10 [ 73.094407][ T7307] ? get_pid_task+0xfc/0x250 [ 73.094422][ T7307] ? get_pid_task+0xfc/0x250 [ 73.094439][ T7307] futex_wake+0xf4/0x5e0 [ 73.094452][ T7307] ? find_held_lock+0x2b/0x80 [ 73.094463][ T7307] ? __pfx_futex_wake+0x10/0x10 [ 73.094477][ T7307] ? lock_acquire+0x1d1/0x380 [ 73.094489][ T7307] ? __fget_files+0x34/0x3d0 [ 73.094505][ T7307] ? find_held_lock+0x2b/0x80 [ 73.094517][ T7307] do_futex+0x2b2/0x440 [ 73.094531][ T7307] ? __pfx_do_futex+0x10/0x10 [ 73.094546][ T7307] ? __fget_files+0x21f/0x3d0 [ 73.094564][ T7307] __x64_sys_futex+0x34f/0x4d0 [ 73.094576][ T7307] ? __pfx___x64_sys_getdents+0x10/0x10 [ 73.094607][ T7307] ? __pfx___x64_sys_futex+0x10/0x10 [ 73.094623][ T7307] do_syscall_64+0x123/0x790 [ 73.094674][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.094686][ T7307] RIP: 0033:0x7f4cb259f559 [ 73.094696][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.094707][ T7307] RSP: 002b:00007f4cb34770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.094718][ T7307] RAX: ffffffffffffffda RBX: 00007f4cb2825fa8 RCX: 00007f4cb259f559 [ 73.094726][ T7307] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cb2825fac [ 73.094733][ T7307] RBP: 00007f4cb2825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 73.094739][ T7307] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 73.094746][ T7307] R13: 00007f4cb2826038 R14: 00007fff1881c940 R15: 00007fff1881ca28 [ 73.094761][ T7307] [ 73.204314][ T7311] netlink: 'syz.5.329': attribute type 62 has an invalid length. [ 73.244120][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 73.301169][ T7316] bond1: entered allmulticast mode [ 73.303433][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 73.303444][ T42] audit: type=1400 audit(1792930284.784:657): avc: denied { watch } for pid=7315 comm="syz.5.331" path="/9/file5" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.303632][ T42] audit: type=1400 audit(1792930284.784:658): avc: denied { watch_sb watch_reads } for pid=7315 comm="syz.5.331" path="/9/file5" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.358560][ T7320] netlink: 'syz.3.332': attribute type 2 has an invalid length. [ 73.358581][ T7320] netlink: 224 bytes leftover after parsing attributes in process `syz.3.332'. [ 73.359130][ T7320] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 73.376315][ T7320] bond2: entered promiscuous mode [ 73.376620][ T7320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.391486][ T7320] bond2: (slave bridge0): making interface the new active one [ 73.391499][ T7320] bridge0: entered promiscuous mode [ 73.392276][ T7320] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 73.753912][ T42] audit: type=1400 audit(1792930285.234:659): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.770997][ T42] audit: type=1400 audit(1792930285.244:660): avc: denied { setopt } for pid=7337 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.771038][ T42] audit: type=1400 audit(1792930285.244:661): avc: denied { ioctl } for pid=7337 comm="syz.1.336" path="socket:[19775]" dev="sockfs" ino=19775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.786723][ T42] audit: type=1400 audit(1792930285.264:662): avc: denied { mount } for pid=7342 comm="syz.2.337" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.796385][ T42] audit: type=1400 audit(1792930285.264:663): avc: denied { create } for pid=7342 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.805964][ T42] audit: type=1400 audit(1792930285.264:664): avc: denied { write } for pid=7342 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.806009][ T42] audit: type=1400 audit(1792930285.274:665): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.822804][ T42] audit: type=1400 audit(1792930285.304:666): avc: denied { execmem } for pid=7344 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.833496][ T6195] IPVS: starting estimator thread 0... [ 73.928425][ T7348] IPVS: using max 44 ests per chain, 105600 per kthread [ 74.120340][ T7360] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.247524][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.389808][ T7372] Mount JFS Failure: -22 [ 74.389824][ T7372] jfs_mount failed w/return code = -22 [ 74.399278][ T58] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 74.404341][ T58] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 74.404359][ T58] usb 6-1: config 0 has no interface number 0 [ 74.404377][ T58] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.406036][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.406050][ T58] usb 6-1: Product: syz [ 74.406058][ T58] usb 6-1: Manufacturer: syz [ 74.406066][ T58] usb 6-1: SerialNumber: syz [ 74.410022][ T58] usb 6-1: config 0 descriptor?? [ 74.421352][ T58] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 74.447673][ T67] Bluetooth: hci1: command tx timeout [ 74.614756][ T5867] usb 6-1: USB disconnect, device number 3 [ 74.621441][ T5867] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 74.806761][ T7406] input: syz0 as /devices/virtual/input/input9 [ 74.842240][ T5995] udevd[5995]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 74.905378][ T7410] erspan1: entered promiscuous mode [ 75.153244][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 75.255937][ T7433] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 75.258364][ T7433] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 75.388998][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'. [ 75.402176][ T7445] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 75.425160][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.368'. [ 75.428158][ T7447] FAULT_INJECTION: forcing a failure. [ 75.428158][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 75.428195][ T7447] CPU: 2 UID: 0 PID: 7447 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 75.428216][ T7447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.428227][ T7447] Call Trace: [ 75.428233][ T7447] [ 75.428241][ T7447] dump_stack_lvl+0x100/0x190 [ 75.428273][ T7447] should_fail_ex.cold+0x5/0xa [ 75.428303][ T7447] should_failslab+0xc2/0x120 [ 75.428330][ T7447] __kmalloc_cache_noprof+0x91/0x6d0 [ 75.428351][ T7447] ? sctp_auth_shkey_create+0x9e/0x210 [ 75.428412][ T7447] sctp_auth_shkey_create+0x9e/0x210 [ 75.428442][ T7447] sctp_endpoint_new+0x589/0xb20 [ 75.428475][ T7447] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 75.428500][ T7447] ? lock_acquire+0x1d1/0x380 [ 75.428527][ T7447] ? lockdep_init_map_type+0x5c/0x250 [ 75.428554][ T7447] sctp_init_sock+0xe2b/0x1300 [ 75.428580][ T7447] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 75.428608][ T7447] sctp_v6_init_sock+0x16/0x70 [ 75.428632][ T7447] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 75.428657][ T7447] inet6_create+0xb1a/0x12b0 [ 75.428710][ T7447] ? inet6_create+0x7f/0x12b0 [ 75.428741][ T7447] __sock_create+0x339/0x860 [ 75.428824][ T7447] __sys_socket+0x14d/0x260 [ 75.428853][ T7447] ? __pfx___sys_socket+0x10/0x10 [ 75.428889][ T7447] __x64_sys_socket+0x72/0xb0 [ 75.428917][ T7447] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.428972][ T7447] do_syscall_64+0x123/0x790 [ 75.428994][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.429016][ T7447] RIP: 0033:0x7f48e539f559 [ 75.429032][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.429049][ T7447] RSP: 002b:00007f48e61fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 75.429068][ T7447] RAX: ffffffffffffffda RBX: 00007f48e5625fa0 RCX: 00007f48e539f559 [ 75.429081][ T7447] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 75.429093][ T7447] RBP: 00007f48e5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.429104][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.429115][ T7447] R13: 00007f48e5626038 R14: 00007f48e5625fa0 R15: 00007ffd6e89fed8 [ 75.429141][ T7447] [ 75.509286][ T7451] CIFS: iocharset name too long [ 75.616370][ T7460] FAULT_INJECTION: forcing a failure. [ 75.616370][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 75.616401][ T7460] CPU: 3 UID: 0 PID: 7460 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(full) [ 75.616419][ T7460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.616427][ T7460] Call Trace: [ 75.616433][ T7460] [ 75.616440][ T7460] dump_stack_lvl+0x100/0x190 [ 75.616493][ T7460] should_fail_ex.cold+0x5/0xa [ 75.616518][ T7460] should_failslab+0xc2/0x120 [ 75.616542][ T7460] __kmalloc_noprof+0xfc/0x840 [ 75.616560][ T7460] ? rcu_is_watching+0x13/0xc0 [ 75.616577][ T7460] ? tomoyo_realpath_from_path+0xb6/0x690 [ 75.616659][ T7460] tomoyo_realpath_from_path+0xb6/0x690 [ 75.616681][ T7460] tomoyo_path_number_perm+0x23c/0x580 [ 75.616704][ T7460] ? tomoyo_path_number_perm+0x22e/0x580 [ 75.616729][ T7460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.616762][ T7460] ? __lock_acquire+0x5c0/0x1f40 [ 75.616793][ T7460] ? __fget_files+0x34/0x3d0 [ 75.616818][ T7460] ? find_held_lock+0x2b/0x80 [ 75.616834][ T7460] ? hook_file_ioctl_common+0x140/0x440 [ 75.616859][ T7460] ? __fget_files+0x21f/0x3d0 [ 75.616887][ T7460] security_file_ioctl+0xd3/0x230 [ 75.616914][ T7460] __x64_sys_ioctl+0xb7/0x210 [ 75.616955][ T7460] do_syscall_64+0x123/0x790 [ 75.616968][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.616979][ T7460] RIP: 0033:0x7ff6ce39f559 [ 75.616993][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.617009][ T7460] RSP: 002b:00007ff6cf289028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.617028][ T7460] RAX: ffffffffffffffda RBX: 00007ff6ce625fa0 RCX: 00007ff6ce39f559 [ 75.617039][ T7460] RDX: 0000200000000140 RSI: 00000000c0189372 RDI: 0000000000000003 [ 75.617049][ T7460] RBP: 00007ff6cf289090 R08: 0000000000000000 R09: 0000000000000000 [ 75.617059][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.617068][ T7460] R13: 00007ff6ce626038 R14: 00007ff6ce625fa0 R15: 00007ffc7c6bf058 [ 75.617093][ T7460] [ 75.617132][ T7460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.617171][ T7460] autofs4:pid:7460:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 75.827178][ T7486] netlink: 'syz.3.381': attribute type 49 has an invalid length. [ 75.838733][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 75.838772][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 75.880368][ T7486] bond_slave_0: entered promiscuous mode [ 75.880382][ T7486] bond_slave_0: entered allmulticast mode [ 75.881754][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.381'. [ 75.931156][ T7502] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 75.995955][ T7505] FAULT_INJECTION: forcing a failure. [ 75.995955][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 75.995976][ T7505] CPU: 3 UID: 0 PID: 7505 Comm: syz.3.384 Not tainted syzkaller #0 PREEMPT(full) [ 75.995988][ T7505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.995995][ T7505] Call Trace: [ 75.995999][ T7505] [ 75.996003][ T7505] dump_stack_lvl+0x100/0x190 [ 75.996023][ T7505] should_fail_ex.cold+0x5/0xa [ 75.996039][ T7505] should_failslab+0xc2/0x120 [ 75.996054][ T7505] __kmalloc_noprof+0xfc/0x840 [ 75.996067][ T7505] ? tomoyo_encode2+0xfb/0x3c0 [ 75.996081][ T7505] tomoyo_encode2+0xfb/0x3c0 [ 75.996093][ T7505] tomoyo_encode+0x29/0x50 [ 75.996103][ T7505] tomoyo_realpath_from_path+0x18c/0x690 [ 75.996117][ T7505] tomoyo_path_number_perm+0x23c/0x580 [ 75.996132][ T7505] ? tomoyo_path_number_perm+0x22e/0x580 [ 75.996148][ T7505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.996169][ T7505] ? __lock_acquire+0x5c0/0x1f40 [ 75.996194][ T7505] ? __fget_files+0x34/0x3d0 [ 75.996209][ T7505] ? find_held_lock+0x2b/0x80 [ 75.996219][ T7505] ? hook_file_ioctl_common+0x140/0x440 [ 75.996234][ T7505] ? __fget_files+0x21f/0x3d0 [ 75.996252][ T7505] security_file_ioctl+0xd3/0x230 [ 75.996269][ T7505] __x64_sys_ioctl+0xb7/0x210 [ 75.996283][ T7505] do_syscall_64+0x123/0x790 [ 75.996295][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.996307][ T7505] RIP: 0033:0x7f48e539f559 [ 75.996316][ T7505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.996327][ T7505] RSP: 002b:00007f48e61fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.996337][ T7505] RAX: ffffffffffffffda RBX: 00007f48e5625fa0 RCX: 00007f48e539f559 [ 75.996344][ T7505] RDX: 0000200000000140 RSI: 00000000c0189372 RDI: 0000000000000003 [ 75.996351][ T7505] RBP: 00007f48e61fc090 R08: 0000000000000000 R09: 0000000000000000 [ 75.996357][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.996363][ T7505] R13: 00007f48e5626038 R14: 00007f48e5625fa0 R15: 00007ffd6e89fed8 [ 75.996378][ T7505] [ 75.996390][ T7505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.996411][ T7505] autofs4:pid:7505:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 76.340736][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 76.340758][ T7526] netlink: 'syz.3.387': attribute type 12 has an invalid length. [ 76.350285][ T7529] netlink: 'syz.3.387': attribute type 12 has an invalid length. [ 76.387036][ T10] cfg80211: failed to load regulatory.db [ 76.422299][ T7533] net_ratelimit: 14 callbacks suppressed [ 76.422319][ T7533] openvswitch: netlink: Missing key (keys=40, expected=80) [ 76.527468][ T67] Bluetooth: hci1: command tx timeout [ 76.722352][ T7542] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 76.743162][ T7542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.784376][ T7542] bond3: (slave veth3): Enslaving as an active interface with a down link [ 76.812839][ T7542] bond3: (slave macvlan0): making interface the new active one [ 76.816828][ T7542] macvlan0: entered promiscuous mode [ 76.817559][ T7542] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 76.916758][ T7551] autofs4:pid:7551:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 77.388428][ T7585] sctp: [Deprecated]: syz.3.399 (pid 7585) Use of int in max_burst socket option deprecated. [ 77.388428][ T7585] Use struct sctp_assoc_value instead [ 77.388514][ T7585] sctp: [Deprecated]: syz.3.399 (pid 7585) Use of int in max_burst socket option deprecated. [ 77.388514][ T7585] Use struct sctp_assoc_value instead [ 77.389371][ T7585] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 77.391078][ T7585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.562335][ T7595] bond0: Unable to set up delay as MII monitoring is disabled [ 77.565139][ T7595] bond0 (unregistering): Released all slaves [ 77.650073][ T7598] autofs4:pid:7598:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 78.081385][ T5931] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.102521][ T7628] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 78.229736][ T5931] usb 7-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 78.230676][ T5931] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 78.230691][ T5931] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 78.230703][ T5931] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.230721][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.234537][ T7623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.234596][ T7623] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.235794][ T5931] pl2303 7-1:1.0: pl2303 converter detected [ 78.237262][ T7631] autofs4:pid:7631:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 78.243468][ T5931] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 78.334664][ T7637] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.518013][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 78.518026][ T42] audit: type=1400 audit(1792930290.004:750): avc: denied { create } for pid=7648 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.520335][ T42] audit: type=1400 audit(1792930290.004:751): avc: denied { bind } for pid=7648 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.520672][ T42] audit: type=1400 audit(1792930290.004:752): avc: denied { setopt } for pid=7648 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.524293][ T7653] No such timeout policy "syz1" [ 78.579336][ T7623] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 78.579699][ T7623] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 78.579951][ T7623] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 78.580323][ T7623] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 78.581692][ T7623] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 78.617548][ T5790] Bluetooth: hci1: command tx timeout [ 78.634169][ T7623] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 78.635897][ T7623] pl2303 ttyUSB0: error sending break = -32 [ 78.928300][ T5790] Bluetooth: hci4: command 0xfc11 tx timeout [ 78.933274][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 79.448620][ T7659] uprobe: syz.3.417:7659 failed to unregister, leaking uprobe [ 79.456286][ T42] audit: type=1400 audit(1792930290.934:753): avc: denied { create } for pid=7661 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.460321][ T42] audit: type=1400 audit(1792930290.934:754): avc: denied { bind } for pid=7661 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.462294][ T42] audit: type=1400 audit(1792930290.944:755): avc: denied { listen } for pid=7661 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.463268][ T42] audit: type=1400 audit(1792930290.944:756): avc: denied { connect } for pid=7661 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.523877][ T7671] autofs4:pid:7671:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 79.544740][ T42] audit: type=1400 audit(1792930291.024:757): avc: denied { accept } for pid=7661 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.544785][ T42] audit: type=1400 audit(1792930291.024:758): avc: denied { read } for pid=7661 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.545679][ T42] audit: type=1400 audit(1792930291.024:759): avc: denied { mounton } for pid=7661 comm="syz.1.418" path="/110/file0" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.545863][ T7672] overlay: ./file0 is not a directory [ 79.607641][ T7674] netlink: 'syz.5.422': attribute type 3 has an invalid length. [ 79.652706][ T7678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.671560][ T7678] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.749782][ T7685] __nla_validate_parse: 5 callbacks suppressed [ 79.749798][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.426'. [ 79.996597][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.996700][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.003710][ T7703] : renamed from virt_wifi0 [ 80.087680][ T5853] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.087776][ T5853] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.087804][ T5853] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.087830][ T5853] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.112382][ T7713] autofs4:pid:7713:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 80.607859][ T7728] ip6t_rt: unknown flags B [ 80.852170][ T1559] usb 7-1: USB disconnect, device number 3 [ 80.895894][ T1559] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 80.903109][ T1559] pl2303 7-1:1.0: device disconnected [ 81.017713][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.020094][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.440'. [ 81.108679][ T7754] gadgetfs: bound to dummy_udc driver [ 81.135958][ T7762] autofs4:pid:7762:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 81.148242][ T7762] netlink: 96 bytes leftover after parsing attributes in process `syz.2.440'. [ 81.169805][ T58] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.171244][ T58] usb 6-1: config 0 has no interfaces? [ 81.173734][ T58] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.173756][ T58] usb 6-1: Product: syz [ 81.173771][ T58] usb 6-1: Manufacturer: syz [ 81.173785][ T58] usb 6-1: SerialNumber: syz [ 81.181067][ T58] usb 6-1: config 0 descriptor?? [ 81.461610][ T29] usb 6-1: USB disconnect, device number 4 [ 81.788527][ T7766] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 82.161847][ T7773] <: renamed from vlan0 (while UP) [ 82.323376][ T7791] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.325075][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 82.325101][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 82.364092][ T7795] [U] v3f"S/4:XTzWtlW= [ 82.364126][ T7795] [U] J"e:" [ 82.365154][ T7795] netlink: 'syz.3.451': attribute type 4 has an invalid length. [ 82.414064][ T7798] TC_ACT_REPEAT abuse ? [ 82.414387][ T7798] netlink: 'syz.3.452': attribute type 26 has an invalid length. [ 82.414397][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 82.620649][ T7813] No control pipe specified [ 82.621877][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 82.624604][ T7813] ip_tables: iptables: counters copy to user failed while replacing table [ 82.659299][ T7821] ip_tables: iptables: counters copy to user failed while replacing table [ 82.680448][ T7818] autofs4:pid:7818:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 82.719595][ T7826] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 82.734504][ T7826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.766523][ T7826] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 82.773841][ T7826] bond4: (slave wlan1): Enslaving as an active interface with a down link [ 82.842046][ T7828] device-mapper: table: 248:7: verity: Invalid root digest (-EINVAL) [ 82.842079][ T7828] device-mapper: ioctl: error adding target to table [ 82.876724][ T7842] TC_ACT_REPEAT abuse ? [ 82.880882][ T7828] FAULT_INJECTION: forcing a failure. [ 82.880882][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 82.880961][ T7828] CPU: 3 UID: 0 PID: 7828 Comm: syz.3.458 Not tainted syzkaller #0 PREEMPT(full) [ 82.880984][ T7828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.880997][ T7828] Call Trace: [ 82.881025][ T7828] [ 82.881034][ T7828] dump_stack_lvl+0x100/0x190 [ 82.881107][ T7828] should_fail_ex.cold+0x5/0xa [ 82.881152][ T7828] should_failslab+0xc2/0x120 [ 82.881184][ T7828] __kmalloc_noprof+0xfc/0x840 [ 82.881205][ T7828] ? lock_acquire+0x1d1/0x380 [ 82.881229][ T7828] ? __alloc_workqueue+0x8a/0x1900 [ 82.881260][ T7828] __alloc_workqueue+0x8a/0x1900 [ 82.881288][ T7828] ? is_dynamic_key+0xc3/0x170 [ 82.881310][ T7828] ? lockdep_init_map_type+0xe6/0x250 [ 82.881339][ T7828] alloc_workqueue_noprof+0xc7/0x130 [ 82.881365][ T7828] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 82.881393][ T7828] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.881420][ T7828] ? _raw_spin_unlock+0x28/0x50 [ 82.881505][ T7828] xfs_init_mount_workqueues+0x149/0x4f0 [ 82.881562][ T7828] xfs_fs_fill_super+0x3d8/0x1f30 [ 82.881587][ T7828] ? setup_bdev_super+0x4e8/0x770 [ 82.881614][ T7828] get_tree_bdev_flags+0x38c/0x620 [ 82.881637][ T7828] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 82.881661][ T7828] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 82.881686][ T7828] ? cap_capable+0x107/0x430 [ 82.881734][ T7828] ? bpf_lsm_capable+0x9/0x10 [ 82.881760][ T7828] ? security_capable+0x80/0x260 [ 82.881787][ T7828] vfs_get_tree+0x92/0x320 [ 82.881807][ T7828] path_mount+0x7d0/0x2850 [ 82.881833][ T7828] ? __pfx_path_mount+0x10/0x10 [ 82.881852][ T7828] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.881884][ T7828] ? putname+0xb1/0x110 [ 82.881899][ T7828] ? kmem_cache_free+0x127/0x6c0 [ 82.881925][ T7828] ? __x64_sys_mount+0x293/0x310 [ 82.881943][ T7828] __x64_sys_mount+0x293/0x310 [ 82.881964][ T7828] ? __pfx___x64_sys_mount+0x10/0x10 [ 82.881991][ T7828] do_syscall_64+0x123/0x790 [ 82.882011][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.882030][ T7828] RIP: 0033:0x7f48e539f559 [ 82.882051][ T7828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.882068][ T7828] RSP: 002b:00007f48e61db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.882087][ T7828] RAX: ffffffffffffffda RBX: 00007f48e5626090 RCX: 00007f48e539f559 [ 82.882100][ T7828] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000340 [ 82.882112][ T7828] RBP: 00007f48e5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.882123][ T7828] R10: 0000000000200013 R11: 0000000000000246 R12: 0000000000000000 [ 82.882129][ T7842] netlink: 'syz.5.462': attribute type 26 has an invalid length. [ 82.882133][ T7828] R13: 00007f48e5626128 R14: 00007f48e5626090 R15: 00007ffd6e89fed8 [ 82.882145][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.462'. [ 82.882160][ T7828] [ 82.986711][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 83.065703][ T7864] batman_adv: batadv0: Adding interface: syz_tun [ 83.065719][ T7864] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.065748][ T7864] batman_adv: batadv0: Interface activated: syz_tun [ 83.071544][ T7866] autofs4:pid:7866:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 83.238523][ T7885] TC_ACT_REPEAT abuse ? [ 83.239159][ T7885] netlink: 'syz.3.474': attribute type 26 has an invalid length. [ 83.239174][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 83.384173][ T7888] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 83.384523][ T7889] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 83.394406][ T7888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.395726][ T7888] team0: Port device netdevsim1 added [ 83.457178][ T7893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7893 comm=syz.3.477 [ 83.515730][ T7899] autofs4:pid:7899:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 83.566737][ T7905] pimreg: entered allmulticast mode [ 83.570089][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 83.570104][ T42] audit: type=1326 audit(83.508:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7904 comm="syz.3.481" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48e539f559 code=0x0 [ 83.624369][ T42] audit: type=1400 audit(83.558:809): avc: denied { mount } for pid=7904 comm="syz.3.481" name="/" dev="autofs" ino=21139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 83.690754][ T7910] device-mapper: clone metadata: Superblock check failed: blocknr 549755813889, expected 0 [ 83.690825][ T7910] device-mapper: block manager: superblock validator check failed for block 0 [ 83.690851][ T7910] device-mapper: clone metadata: Failed to read_lock superblock [ 83.859412][ T7910] device-mapper: table: 248:5: clone: Failed to load metadata (-ENOTBLK) [ 83.859428][ T7910] device-mapper: ioctl: error adding target to table [ 83.861614][ T7913] device-mapper: clone metadata: Superblock check failed: blocknr 549755813889, expected 0 [ 83.861627][ T7913] device-mapper: block manager: superblock validator check failed for block 0 [ 83.861634][ T7913] device-mapper: clone metadata: Failed to read_lock superblock [ 83.891662][ T42] audit: type=1400 audit(83.828:810): avc: denied { write } for pid=7917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.964906][ T42] audit: type=1400 audit(83.898:811): avc: denied { write } for pid=7920 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.966136][ T7913] device-mapper: table: 248:5: clone: Failed to load metadata (-ENOTBLK) [ 83.966156][ T7913] device-mapper: ioctl: error adding target to table [ 84.037278][ T7930] TC_ACT_REPEAT abuse ? [ 84.039557][ T7930] netlink: 'syz.2.485': attribute type 26 has an invalid length. [ 84.196755][ T42] audit: type=1400 audit(84.128:812): avc: denied { read } for pid=7940 comm="syz.5.488" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.257108][ T42] audit: type=1400 audit(84.188:813): avc: denied { write } for pid=7943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.305640][ T42] audit: type=1400 audit(84.238:814): avc: denied { write } for pid=7946 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.347481][ T34] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 84.356954][ T7950] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 84.357769][ T7950] autofs4:pid:7950:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 84.422351][ T7954] bond0: entered promiscuous mode [ 84.422564][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.475180][ T7962] FAULT_INJECTION: forcing a failure. [ 84.475180][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 84.475210][ T7962] CPU: 3 UID: 0 PID: 7962 Comm: syz.5.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.475232][ T7962] Tainted: [L]=SOFTLOCKUP [ 84.475237][ T7962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.475247][ T7962] Call Trace: [ 84.475252][ T7962] [ 84.475259][ T7962] dump_stack_lvl+0x100/0x190 [ 84.475287][ T7962] should_fail_ex.cold+0x5/0xa [ 84.475309][ T7962] should_failslab+0xc2/0x120 [ 84.475330][ T7962] kmem_cache_alloc_noprof+0x92/0x6a0 [ 84.475368][ T7962] ? __asan_memcpy+0x3c/0x60 [ 84.475386][ T7962] ? __kernfs_new_node+0xd2/0xa10 [ 84.475424][ T7962] __kernfs_new_node+0xd2/0xa10 [ 84.475446][ T7962] ? __pfx___kernfs_new_node+0x10/0x10 [ 84.475472][ T7962] ? lock_acquire+0x1d1/0x380 [ 84.475491][ T7962] ? kernfs_root+0x23/0x2a0 [ 84.475506][ T7962] ? find_held_lock+0x2b/0x80 [ 84.475519][ T7962] ? kernfs_root+0xee/0x2a0 [ 84.475532][ T7962] ? kernfs_root+0xee/0x2a0 [ 84.475551][ T7962] kernfs_create_dir_ns+0xa4/0x2b0 [ 84.475572][ T7962] sysfs_create_dir_ns+0x13a/0x2b0 [ 84.475587][ T7962] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.475600][ T7962] ? find_held_lock+0x2b/0x80 [ 84.475613][ T7962] ? kobject_add_internal+0x25f/0x930 [ 84.475632][ T7962] ? kobject_add_internal+0x25f/0x930 [ 84.475654][ T7962] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.475678][ T7962] kobject_add_internal+0x2c8/0x930 [ 84.475700][ T7962] kobject_init_and_add+0x121/0x180 [ 84.475719][ T7962] ? __pfx_kobject_init_and_add+0x10/0x10 [ 84.475742][ T7962] ? lockdep_init_map_type+0x5c/0x250 [ 84.475761][ T7962] ? lockdep_init_map_type+0x5c/0x250 [ 84.475783][ T7962] iommu_group_alloc+0x229/0x4a0 [ 84.475850][ T7962] __iommu_probe_device+0x3b1/0x1550 [ 84.475869][ T7962] ? __pfx___iommu_probe_device+0x10/0x10 [ 84.475885][ T7962] ? __pfx___might_resched+0x10/0x10 [ 84.475905][ T7962] iommu_probe_device+0x28/0x130 [ 84.475920][ T7962] iommu_bus_notifier+0x5b/0x110 [ 84.475936][ T7962] notifier_call_chain+0x99/0x3f0 [ 84.475962][ T7962] blocking_notifier_call_chain+0x69/0xa0 [ 84.475985][ T7962] bus_notify+0x56/0x80 [ 84.476030][ T7962] device_add+0x1169/0x1970 [ 84.476052][ T7962] ? __pfx_device_add+0x10/0x10 [ 84.476069][ T7962] ? kobject_get+0xbb/0x150 [ 84.476085][ T7962] ? __pfx_software_node_get+0x10/0x10 [ 84.476117][ T7962] ? software_node_get+0x68/0x90 [ 84.476139][ T7962] ? fwnode_handle_get+0x97/0xd0 [ 84.476159][ T7962] iommu_mock_device_add+0x7c/0xb0 [ 84.476174][ T7962] iommufd_test+0x3041/0x65f0 [ 84.476196][ T7962] ? __lock_acquire+0x5c0/0x1f40 [ 84.476215][ T7962] ? __lock_acquire+0x5c0/0x1f40 [ 84.476231][ T7962] ? __pfx_iommufd_test+0x10/0x10 [ 84.476250][ T7962] ? tomoyo_path_number_perm+0x188/0x580 [ 84.476276][ T7962] ? lock_acquire+0x1d1/0x380 [ 84.476292][ T7962] ? __might_fault+0xc5/0x140 [ 84.476313][ T7962] ? find_held_lock+0x2b/0x80 [ 84.476326][ T7962] ? __might_fault+0xc5/0x140 [ 84.476356][ T7962] iommufd_fops_ioctl+0x358/0x520 [ 84.476379][ T7962] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 84.476398][ T7962] ? __fget_files+0x34/0x3d0 [ 84.476441][ T7962] ? selinux_file_ioctl+0x1e0/0x290 [ 84.476469][ T7962] ? selinux_file_ioctl+0x1e7/0x290 [ 84.476496][ T7962] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 84.476524][ T7962] __x64_sys_ioctl+0x18e/0x210 [ 84.476550][ T7962] do_syscall_64+0x123/0x790 [ 84.476570][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.476588][ T7962] RIP: 0033:0x7f4cb259f559 [ 84.476604][ T7962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.476621][ T7962] RSP: 002b:00007f4cb3477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.476640][ T7962] RAX: ffffffffffffffda RBX: 00007f4cb2825fa0 RCX: 00007f4cb259f559 [ 84.476652][ T7962] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 84.476662][ T7962] RBP: 00007f4cb2636b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.476673][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.476683][ T7962] R13: 00007f4cb2826038 R14: 00007f4cb2825fa0 R15: 00007fff1881ca28 [ 84.476709][ T7962] [ 84.477883][ T7962] kobject: kobject_add_internal failed for 10 (error: -12 parent: iommu_groups) [ 84.485902][ T7959] netlink: 'syz.3.491': attribute type 20 has an invalid length. [ 84.487107][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.487513][ T7954] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 84.488275][ T7954] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 84.509631][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 84.510288][ T34] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=0.40 [ 84.511054][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 84.511075][ T34] usb 7-1: can't read configurations, error -71 [ 84.646190][ T7966] ip6gretap0: entered promiscuous mode [ 84.648336][ T42] audit: type=1400 audit(84.588:815): avc: denied { write } for pid=7965 comm="syz.3.494" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.654989][ T7966] batadv0: entered promiscuous mode [ 84.655941][ T7966] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 84.655955][ T7966] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 84.664443][ T7966] ip6gretap0: left promiscuous mode [ 84.669209][ T7966] batadv0: left promiscuous mode [ 84.723541][ T7974] TC_ACT_REPEAT abuse ? [ 84.723873][ T7974] netlink: 'syz.5.496': attribute type 26 has an invalid length. [ 84.751356][ T7977] gadgetfs: bound to dummy_udc driver [ 84.812100][ T7984] overlay: Bad value for 'nfs_export' [ 84.812099][ T42] audit: type=1400 audit(84.748:816): avc: denied { mounton } for pid=7983 comm="syz.3.500" path="/167/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 84.816478][ T42] audit: type=1400 audit(84.748:817): avc: denied { write } for pid=7983 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.845460][ T7984] __nla_validate_parse: 6 callbacks suppressed [ 84.845476][ T7984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.500'. [ 84.979211][ T8004] syz_tun: entered allmulticast mode [ 85.048239][ T8008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.282936][ T8022] TC_ACT_REPEAT abuse ? [ 85.283434][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 85.434581][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'. [ 85.730242][ T8012] overlayfs: statfs failed on './file0' [ 85.819112][ T8037] tipc: Enabling of bearer rejected, failed to enable media [ 85.819935][ T8037] autofs4:pid:8037:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 85.854128][ T8039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.025830][ T8046] bond0: option ad_select: unable to set because the bond device is up [ 86.170779][ T8054] TC_ACT_REPEAT abuse ? [ 86.171314][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 86.865776][ T8072] autofs4:pid:8072:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 86.955546][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 87.074799][ T8093] ipt_rpfilter: unknown options [ 87.093418][ T8098] kernel profiling enabled (shift: 0) [ 87.148727][ T8099] netlink: 32 bytes leftover after parsing attributes in process `syz.5.530'. [ 87.356858][ T8112] CIFS: Invalid mount helper version specified [ 87.617769][ T50] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 87.778208][ T50] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.779006][ T50] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 87.779032][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.779044][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.779063][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.995133][ T50] usb 8-1: GET_CAPABILITIES returned 0 [ 87.995175][ T50] usbtmc 8-1:16.0: can't read capabilities [ 88.007514][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 88.028073][ T5824] macvlan0: left promiscuous mode [ 88.045363][ T8118] [U] [ 88.045384][ T8118] [U] [ 88.045399][ T8118] [U] [ 88.045413][ T8118] [U] [ 88.045560][ T8118] [U] [ 88.045576][ T8118] [U] [ 88.045592][ T8118] [U] [ 88.045608][ T8118] [U] [ 88.045752][ T8118] [U] [ 88.045769][ T8118] [U] [ 88.045785][ T8118] [U] [ 88.045801][ T8118] [U] [ 88.045883][ T8118] [U] [ 88.045898][ T8118] [U] [ 88.045912][ T8118] [U] [ 88.045927][ T8118] [U] [ 88.050680][ T8118] jffs2: notice: (8118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.075705][ T8117] [U] [ 88.123406][ T8122] net_ratelimit: 1 callbacks suppressed [ 88.123418][ T8122] TC_ACT_REPEAT abuse ? [ 88.123993][ T8122] validate_nla: 3 callbacks suppressed [ 88.124001][ T8122] netlink: 'syz.1.538': attribute type 26 has an invalid length. [ 88.124008][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 88.125121][ T8122] vcan0: tx drop: invalid da for name 0x0000008000000000 [ 88.167560][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 88.168557][ T34] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.170092][ T34] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.170111][ T34] usb 10-1: config 0 has no interface number 0 [ 88.170140][ T34] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.170170][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.173319][ T34] usb 10-1: config 0 descriptor?? [ 88.176786][ T34] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 88.283005][ T8130] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 88.283076][ T8130] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-%#!$([)^)} [ 88.292251][ T8134] syz.1.541(8134): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 88.418475][ T8116] kvm [8115]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 88.419085][ T8116] kvm [8115]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 88.503246][ T5883] usb 10-1: USB disconnect, device number 2 [ 88.548443][ T8148] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 88.720086][ T34] usb 8-1: USB disconnect, device number 3 [ 88.727214][ T42] kauditd_printk_skb: 143 callbacks suppressed [ 88.727229][ T42] audit: type=1400 audit(88.658:961): avc: denied { read write } for pid=8160 comm="syz.2.546" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.727267][ T42] audit: type=1400 audit(88.658:962): avc: denied { open } for pid=8160 comm="syz.2.546" path="/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.734099][ T42] audit: type=1400 audit(88.668:963): avc: denied { unmount } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 88.754335][ T42] audit: type=1400 audit(88.688:964): avc: denied { ioctl } for pid=8160 comm="syz.2.546" path="/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xc038943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.764441][ T8161] jffs2: notice: (8161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 88.770862][ T42] audit: type=1400 audit(88.708:965): avc: denied { sys_module } for pid=8160 comm="syz.2.546" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 88.773120][ T8161] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.774651][ T42] audit: type=1400 audit(88.708:966): avc: denied { create } for pid=8160 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.775308][ T42] audit: type=1400 audit(88.708:967): avc: denied { write } for pid=8160 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.775576][ T42] audit: type=1400 audit(88.708:968): avc: denied { nlmsg_write } for pid=8160 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.845628][ T8164] TC_ACT_REPEAT abuse ? [ 88.846005][ T8164] netlink: 'syz.3.547': attribute type 26 has an invalid length. [ 88.846016][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 88.852969][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 88.893956][ T8172] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 89.113155][ T42] audit: type=1400 audit(89.048:969): avc: denied { read } for pid=8188 comm="syz.3.554" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.113186][ T42] audit: type=1400 audit(89.048:970): avc: denied { open } for pid=8188 comm="syz.3.554" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.187283][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 89.383921][ T8197] autofs4:pid:8197:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 89.417498][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.526258][ T8205] TC_ACT_REPEAT abuse ? [ 89.529601][ T8205] netlink: 'syz.5.559': attribute type 26 has an invalid length. [ 89.530788][ T8205] vcan0: tx drop: invalid da for name 0x0000008000000000 [ 89.551230][ T8208] ip_tables: iptables: counters copy to user failed while replacing table [ 89.568932][ T34] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 89.569743][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.569760][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.569776][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.569805][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.573010][ T34] usb 7-1: config 0 descriptor?? [ 89.795059][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.795708][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.041953][ T8229] program syz.3.565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.042020][ T8229] ata1.00: invalid transfer count 0 [ 90.071336][ T8229] autofs4:pid:8229:validate_dev_ioctl: path string terminator missing for cmd(0xc0189372) [ 90.257831][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.420763][ T8231] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 90.420915][ T8231] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 90.425103][ T8231] FAULT_INJECTION: forcing a failure. [ 90.425103][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 90.425148][ T8231] CPU: 2 UID: 0 PID: 8231 Comm: syz.3.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.425164][ T8231] Tainted: [L]=SOFTLOCKUP [ 90.425168][ T8231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.425174][ T8231] Call Trace: [ 90.425187][ T8231] [ 90.425191][ T8231] dump_stack_lvl+0x100/0x190 [ 90.425236][ T8231] should_fail_ex.cold+0x5/0xa [ 90.425253][ T8231] should_failslab+0xc2/0x120 [ 90.425274][ T8231] __kmalloc_cache_noprof+0x91/0x6d0 [ 90.425286][ T8231] ? create_filter_start.constprop.0+0x81/0x310 [ 90.425306][ T8231] create_filter_start.constprop.0+0x81/0x310 [ 90.425325][ T8231] create_filter+0xb5/0x210 [ 90.425341][ T8231] ? __pfx_create_filter+0x10/0x10 [ 90.425356][ T8231] ? __pfx___mutex_lock+0x10/0x10 [ 90.425403][ T8231] ? __might_fault+0xc5/0x140 [ 90.425421][ T8231] ? find_held_lock+0x2b/0x80 [ 90.425436][ T8231] apply_event_filter+0x220/0x500 [ 90.425454][ T8231] ? __pfx_apply_event_filter+0x10/0x10 [ 90.425475][ T8231] event_filter_write+0x16d/0x290 [ 90.425489][ T8231] vfs_write+0x2aa/0x1050 [ 90.425505][ T8231] ? __pfx_event_filter_write+0x10/0x10 [ 90.425517][ T8231] ? lock_acquire+0x1d1/0x380 [ 90.425532][ T8231] ? __fget_files+0x34/0x3d0 [ 90.425548][ T8231] ? __pfx_vfs_write+0x10/0x10 [ 90.425560][ T8231] ? find_held_lock+0x2b/0x80 [ 90.425572][ T8231] ? __fget_files+0x215/0x3d0 [ 90.425589][ T8231] ? __fget_files+0x21f/0x3d0 [ 90.425608][ T8231] ksys_write+0x12a/0x250 [ 90.425624][ T8231] ? __pfx_ksys_write+0x10/0x10 [ 90.425648][ T8231] do_syscall_64+0x123/0x790 [ 90.425669][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.425687][ T8231] RIP: 0033:0x7f48e539f559 [ 90.425704][ T8231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.425719][ T8231] RSP: 002b:00007f48e61fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.425736][ T8231] RAX: ffffffffffffffda RBX: 00007f48e5625fa0 RCX: 00007f48e539f559 [ 90.425744][ T8231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 90.425751][ T8231] RBP: 00007f48e5436b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.425758][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.425764][ T8231] R13: 00007f48e5626038 R14: 00007f48e5625fa0 R15: 00007ffd6e89fed8 [ 90.425778][ T8231] [ 90.426528][ T8231] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 90.428072][ T50] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 90.429019][ T50] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.429042][ T50] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.429060][ T50] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.429097][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 90.429119][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 90.430879][ T50] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.430900][ T50] usb 6-1: Product: syz [ 90.430913][ T50] usb 6-1: Manufacturer: syz [ 90.507931][ T50] cdc_wdm 6-1:1.0: skipping garbage [ 90.507951][ T50] cdc_wdm 6-1:1.0: skipping garbage [ 90.580671][ T50] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 90.580685][ T50] cdc_wdm 6-1:1.0: Unknown control protocol [ 90.770192][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.770265][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.771539][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.771552][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.771728][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.771738][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.771923][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.771932][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.772126][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.772143][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.772337][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.772347][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.772533][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.772542][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.772718][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.772728][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.772935][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.772945][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.773133][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 90.773143][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 90.774425][ T5867] usb 6-1: USB disconnect, device number 5 [ 90.774560][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 91.186478][ T8237] tipc: Started in network mode [ 91.186494][ T8237] tipc: Node identity 0a91a3df9114, cluster identity 4711 [ 91.186646][ T8237] tipc: Enabled bearer , priority 0 [ 91.187081][ T8237] syzkaller0: entered promiscuous mode [ 91.187091][ T8237] syzkaller0: entered allmulticast mode [ 91.189331][ T8237] tipc: Resetting bearer [ 91.191490][ T8236] tipc: Resetting bearer [ 91.202269][ T8236] tipc: Disabling bearer [ 91.330901][ T8239] TC_ACT_REPEAT abuse ? [ 91.331834][ T8239] netlink: 'syz.3.570': attribute type 26 has an invalid length. [ 91.331846][ T8239] __nla_validate_parse: 3 callbacks suppressed [ 91.331852][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 91.552953][ T8142] nvmet: connect request for invalid subsystem testsu! [ 91.555878][ T8251] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsu" [ 91.708674][ T8267] ================================================================== [ 91.708683][ T8267] BUG: KASAN: slab-out-of-bounds in ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.708732][ T8267] Read of size 2 at addr ffff88802c771998 by task syz.1.574/8267 [ 91.708740][ T8267] [ 91.708747][ T8267] CPU: 2 UID: 0 PID: 8267 Comm: syz.1.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.708763][ T8267] Tainted: [L]=SOFTLOCKUP [ 91.708767][ T8267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.708774][ T8267] Call Trace: [ 91.708778][ T8267] [ 91.708782][ T8267] dump_stack_lvl+0x100/0x190 [ 91.708811][ T8267] print_report+0x13d/0x4b0 [ 91.708831][ T8267] ? __virt_addr_valid+0x239/0x430 [ 91.708844][ T8267] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.708880][ T8267] kasan_report+0xdf/0x1c0 [ 91.708897][ T8267] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.708914][ T8267] ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.708930][ T8267] ecryptfs_keyring_auth_tok_for_sig+0x9e/0x1f0 [ 91.708947][ T8267] ecryptfs_get_tree+0x584/0x1580 [ 91.708958][ T8267] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 91.708974][ T8267] ? cap_capable+0x107/0x430 [ 91.709007][ T8267] ? bpf_lsm_capable+0x9/0x10 [ 91.709022][ T8267] ? security_capable+0x80/0x260 [ 91.709038][ T8267] vfs_get_tree+0x92/0x320 [ 91.709049][ T8267] path_mount+0x7d0/0x2850 [ 91.709062][ T8267] ? __pfx_path_mount+0x10/0x10 [ 91.709073][ T8267] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.709090][ T8267] ? putname+0xb1/0x110 [ 91.709098][ T8267] ? kmem_cache_free+0x127/0x6c0 [ 91.709110][ T8267] ? __x64_sys_mount+0x293/0x310 [ 91.709121][ T8267] __x64_sys_mount+0x293/0x310 [ 91.709132][ T8267] ? __pfx___x64_sys_mount+0x10/0x10 [ 91.709144][ T8267] do_syscall_64+0x123/0x790 [ 91.709154][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.709165][ T8267] RIP: 0033:0x7fe179b9f559 [ 91.709174][ T8267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.709185][ T8267] RSP: 002b:00007fe17aace028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.709195][ T8267] RAX: ffffffffffffffda RBX: 00007fe179e25fa0 RCX: 00007fe179b9f559 [ 91.709202][ T8267] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000200000000880 [ 91.709209][ T8267] RBP: 00007fe179c36b20 R08: 0000200000000940 R09: 0000000000000000 [ 91.709215][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.709222][ T8267] R13: 00007fe179e26038 R14: 00007fe179e25fa0 R15: 00007fff4593fbc8 [ 91.709232][ T8267] [ 91.709235][ T8267] [ 91.709238][ T8267] Allocated by task 8267: [ 91.709243][ T8267] kasan_save_stack+0x30/0x50 [ 91.709255][ T8267] kasan_save_track+0x14/0x30 [ 91.709266][ T8267] __kasan_kmalloc+0xaa/0xb0 [ 91.709277][ T8267] __kmalloc_noprof+0x32f/0x840 [ 91.709287][ T8267] user_preparse+0x9b/0x1c0 [ 91.709302][ T8267] __key_create_or_update+0x3f6/0xe10 [ 91.709317][ T8267] key_create_or_update+0x42/0x60 [ 91.709331][ T8267] __do_sys_add_key+0x2e8/0x460 [ 91.709342][ T8267] do_syscall_64+0x123/0x790 [ 91.709350][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.709360][ T8267] [ 91.709363][ T8267] The buggy address belongs to the object at ffff88802c771980 [ 91.709363][ T8267] which belongs to the cache kmalloc-32 of size 32 [ 91.709371][ T8267] The buggy address is located 24 bytes inside of [ 91.709371][ T8267] allocated 25-byte region [ffff88802c771980, ffff88802c771999) [ 91.709382][ T8267] [ 91.709385][ T8267] The buggy address belongs to the physical page: [ 91.709389][ T8267] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c771 [ 91.709399][ T8267] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.709407][ T8267] page_type: f5(slab) [ 91.709416][ T8267] raw: 00fff00000000000 ffff88801d442780 dead000000000100 dead000000000122 [ 91.709425][ T8267] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 91.709430][ T8267] page dumped because: kasan: bad access detected [ 91.709435][ T8267] page_owner tracks the page as allocated [ 91.709438][ T8267] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1332, tgid 1332 (kworker/u33:9), ts 7485123482 [ 91.709455][ T8267] post_alloc_hook+0xfd/0x120 [ 91.709470][ T8267] get_page_from_freelist+0x1113/0x35e0 [ 91.709480][ T8267] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 91.709490][ T8267] new_slab+0xb1/0x6d0 [ 91.709498][ T8267] refill_objects+0xe3/0x410 [ 91.709507][ T8267] __pcs_replace_empty_main+0x35e/0x650 [ 91.709515][ T8267] __kmalloc_cache_noprof+0x4ef/0x6d0 [ 91.709524][ T8267] kmem_cache_free+0x40f/0x6c0 [ 91.709533][ T8267] __fput_deferred+0x3e9/0x4a0 [ 91.709547][ T8267] fput_close+0x118/0x250 [ 91.709555][ T8267] path_openat+0xd4c/0x23f0 [ 91.709568][ T8267] do_file_open+0x20e/0x430 [ 91.709581][ T8267] do_open_execat+0xd1/0x360 [ 91.709593][ T8267] alloc_bprm+0x2d/0x9d0 [ 91.709603][ T8267] kernel_execve+0x8f/0x3a0 [ 91.709615][ T8267] call_usermodehelper_exec_async+0x239/0x4b0 [ 91.709631][ T8267] page_owner free stack trace missing [ 91.709634][ T8267] [ 91.709636][ T8267] Memory state around the buggy address: [ 91.709641][ T8267] ffff88802c771880: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 91.709647][ T8267] ffff88802c771900: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 91.709654][ T8267] >ffff88802c771980: 00 00 00 01 fc fc fc fc fa fb fb fb fc fc fc fc [ 91.709659][ T8267] ^ [ 91.709665][ T8267] ffff88802c771a00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 91.709671][ T8267] ffff88802c771a80: 00 00 00 00 fc fc fc fc 00 00 00 05 fc fc fc fc [ 91.709677][ T8267] ================================================================== [ 91.709711][ T8267] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.931099][ T8267] CPU: 2 UID: 0 PID: 8267 Comm: syz.1.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.935495][ T8267] Tainted: [L]=SOFTLOCKUP [ 91.937325][ T8267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.941385][ T8267] Call Trace: [ 91.942809][ T8267] [ 91.944056][ T8267] dump_stack_lvl+0x100/0x190 [ 91.946068][ T8267] vpanic+0x553/0x970 [ 91.947768][ T8267] ? __pfx_vpanic+0x10/0x10 [ 91.949690][ T8267] ? mark_held_locks+0x40/0x70 [ 91.951595][ T8267] ? irqentry_exit+0x202/0xab0 [ 91.953419][ T8267] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.955554][ T8267] panic+0xd1/0xe0 [ 91.956747][ T8267] ? __pfx_panic+0x10/0x10 [ 91.958221][ T8267] check_panic_on_warn.cold+0x19/0x34 [ 91.960403][ T8267] end_report.part.0+0x3a/0x90 [ 91.962395][ T8267] kasan_report.cold+0xe/0x18 [ 91.963961][ T8267] ? ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.966639][ T8267] ecryptfs_verify_auth_tok_from_key+0x3b7/0x400 [ 91.968870][ T8267] ecryptfs_keyring_auth_tok_for_sig+0x9e/0x1f0 [ 91.970989][ T8267] ecryptfs_get_tree+0x584/0x1580 [ 91.973093][ T8267] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 91.975334][ T8267] ? cap_capable+0x107/0x430 [ 91.977315][ T8267] ? bpf_lsm_capable+0x9/0x10 [ 91.979320][ T8267] ? security_capable+0x80/0x260 [ 91.981396][ T8267] vfs_get_tree+0x92/0x320 [ 91.983294][ T8267] path_mount+0x7d0/0x2850 [ 91.985193][ T8267] ? __pfx_path_mount+0x10/0x10 [ 91.987214][ T8267] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.989415][ T8267] ? putname+0xb1/0x110 [ 91.991169][ T8267] ? kmem_cache_free+0x127/0x6c0 [ 91.993261][ T8267] ? __x64_sys_mount+0x293/0x310 [ 91.995353][ T8267] __x64_sys_mount+0x293/0x310 [ 91.997436][ T8267] ? __pfx___x64_sys_mount+0x10/0x10 [ 91.999648][ T8267] do_syscall_64+0x123/0x790 [ 92.001603][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.004067][ T8267] RIP: 0033:0x7fe179b9f559 [ 92.005968][ T8267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.013960][ T8267] RSP: 002b:00007fe17aace028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.017456][ T8267] RAX: ffffffffffffffda RBX: 00007fe179e25fa0 RCX: 00007fe179b9f559 [ 92.020761][ T8267] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000200000000880 [ 92.024070][ T8267] RBP: 00007fe179c36b20 R08: 0000200000000940 R09: 0000000000000000 [ 92.027348][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.029844][ T8267] R13: 00007fe179e26038 R14: 00007fe179e25fa0 R15: 00007fff4593fbc8 [ 92.033095][ T8267] [ 92.035151][ T8267] Kernel Offset: disabled [ 92.036940][ T8267] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:11:43 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff931c6fd2 RBX=ffffffff928c6294 RCX=dffffc0000000000 RDX=ffffffff82887365 RSI=0000000000000000 RDI=ffffffff928c6280 RBP=ffffffff928c6294 RSP=ffffc9000660f2c8 R8 =ffffffff931c6ff6 R9 =0000000000000007 R10=0000000000000200 R11=0000000000018873 R12=ffffffff928c6294 R13=ffffffff8288735b R14=ffffffff928c6280 R15=ffffffff928c6290 RIP=ffffffff81bb123e RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4cb34356c0 ffffffff 00c00000 GS =0000 ffff8880d44b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f48e538a6c0 CR3=000000002d9a7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff8880307bd6d8 RBX=ffffffff8ffeb420 RCX=ffffc900069bf524 RDX=0000000000000002 RSI=ffffffff8ffeb420 RDI=ffff8880307bd6d8 RBP=ffffffff82208f5a RSP=ffffc900069bf518 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff8880307bcb00 R13=ffffc900069bf678 R14=0000000000000202 R15=0000000000000002 RIP=ffffffff81e92574 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d45b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc265d5ae9c CR3=000000003940e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2660ca8f0 00007fc2660ca310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc26608b050 00007fc26608a0c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc26608b580 00007fc26608ab20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc265d8d0c0 00007fc26608bab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2660c9da0 00007fc26608a5f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc265d8d6b0 00007fc265d8d0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc26608bab0 00007fc26608b580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc26608ab20 00007fc26608b050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bc8f45 RDI=ffffffff9cf11f80 RBP=ffffffff9cf11f40 RSP=ffffc900069ef368 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000034 R14=000000000000000f R15=ffffc900069ef680 RIP=ffffffff85bc8f6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe17aace6c0 ffffffff 00c00000 GS =0000 ffff8880d46b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=00000000429df000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2d064f054a8176b f270f26438e29e08 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ccbcce83ccbcce83 ccbcce83ccbcce83 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ec34e63ce71f6ba 960359cd0e5d3333 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe179c3714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe179c37184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003600000036 0000003600000036 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0f0e0d0c0f0e0d 0c0f0e0d0c0f0e0d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe179df95f8 00007fe179df95c8 00007fe179df9600 00007fe179df95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000009b023 RBX=ffff888020ac2580 RCX=ffffffff8be65325 RDX=0000000000000001 RSI=ffffffff8e6161a6 RDI=ffffffff8c831680 RBP=ffffed10041584b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d466825 R10=ffff88806a33412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8be637bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d47b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ab081 CR3=0000000043121000 CR4=00352ef0 DR0=0000000000010000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 0000000000000120 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e8a03c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6e8a03c6 00007ffd6e8a03cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48e543714a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48e5437184 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48e54372e8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48e5437176 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48e55f9600 00007f48e55f95e0 00007f48e55f95e8 00007f48e55f9618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48e55f95f8 00007f48e55f95c8 00007f48e55f9600 00007f48e55f95e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ee3dc62b96cbc65 5d59c572baad4ea7 2741aae6227617c5 2c7b47d8ab5118b1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fab433646de13490 1204d13f089d557b 8fa8992646e829c5 594007f77b4c8222 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 53877e7e2efc43a9 f0ed9d13f6fddb76 46c17df9593d38a1 48ed514a31e00392 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe7b3055daaf8fb1 e10b128ab703ca88 d63f5fb5f981a703 1e7047199a6836a3 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000