last executing test programs: 6m35.536701759s ago: executing program 2 (id=2589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x3808, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x37d8, 0x2, [@TCA_BASIC_ACT={0x23c4, 0x3, [@m_gact={0x10cc, 0x7, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x7, 0x5, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x323, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xcfd, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9df}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6ff434ae, 0xe1d, 0xffffffffffffffff, 0x4, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x7fffffff, 0x8, 0x1, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x0, 0x7, 0xb0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x3, 0x401}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x1090, 0x16, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x200, 0x7, 0xf93, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x2, 0x7, 0x8, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x1, 0x2, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xcfd, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x228e, 0x10000000}}]}, {0x1004, 0x6, "5d23876de5154fbb9ee927a1b857f5be21069c67507cd48c8601797bd93ad783d04984da39a74de6231b56d7004493c023f150a3015dd6b229331195ab582aee0eca673915ddc44ce250cb6fa765eac0d9be8eca430c72681cfb73639837de22d4fb38fe99184c9d15ef73cc05dbd010fb0eb8878915993da53944ec8681fcdf8fb44f1b581a1806cc05f82ad4de611bb06b3371e052cb92d340b69bb0b09eb9a5fba0da9ee26e3e76474a296eb9a25bdfa69b7e13070c219ab7dfc539a5412dc7d6cea7193c1cf737d5c61c3f12bc6e235d054e922671f5ec8668d7c80808e5b13328dfe5bf6c6e6ad4b1da42b2cfdc41154af2294908e9b6b88b67f2434240e06f6323d33bc69043647c3b36c3ae6c588f82a2ec4c5b8f8dbcd003fa7cde8612df1d0d177303cb5df5fb5763e1dff6a4e6cbab119f8802556085265f77bf6b094e95ebbaee06d34a1b4356a01e3322ecc250378edd82f270a96cb5414896733b0f2f03620ee11cb8a3bb52f17dab3179896f8f6d186bc23e0071483c327e151f34d1f3e4f9fe68c1d9f4223b0b55e599a6acdc5c74e02000d61f258069e15d795b85246730819bd22bc65c5faddfe162ee76896ffc3da41c6d0163954412cc9a27915db067bdd75bacbbab07db130223ad77ed7a8afbe5787b09f71de4b0bb71a02ee46ee28a85a5612c3eff7c638a6086e2b591484406dd74c7e367417608118cc2d06987b10c38ba3a66737f49c6519648f25a8bdd1f2498ae8256c5c3e946de4000aef67d75e06e866242e93fa2b686491f8b47c8c94ce0f0c518497d86f150e24721210facabcc5056e00d7deb40cdfe29dcae2c2dda1485e236c4209046742f354cdd9921dc974a240c3606b87ad7767f80379a671e321f958cc8007c7bfd64a837baff8fde95d7718cd0f3a10770d8d350bbac279cd36f9f7b65fa64af01dfc2ba20c0c270cb45c78a6a29bb1c0725c931da989d97458f5e943ecfb4dd9aec10a1bb9a53949039073f66550edb53af1a724aa56211a099422c03baa3b773c9cf089291c7eb70a5ddd57e006027a4110e373a755dc65bfdddef9d35098500618098ff86bb4d289e359d099d55afac0ad5d875a84cc3177f730bb4ac119c1f3e622e768315f4eab4ee951334e7474c2dd3271fec6afb49454e6b4bcff1d5df652edef7b5339efdba3378e825be9b3b420b902a0bc66537344299234d5e5aa3f1d264a23e6f915650bba5e4317920c9161c81a76c26ddac9b45a0ebbd199897e58ef38302f75d198a82766cbea46247a97548bfbd54f063bb37e94c3bfcf09c5b92c2568ef643df2a0fbeae88e72600386e9f3c13306bdc80870f21de64ca4b0a88d813f75141529880db3f6f493e4c2959280d7ed95305d8763abd7b7443ac46931471b2673c06c2d44d82e9544964502543e8b2919e0a962646b7dc79bbadc9793fb8d547898cb85c8bce7f97f7fc89d17cd5a4a3294f8b347aafd6377d400abb3d954d03f97fc2864e1fb7d0be130cb8ec2a5cfb91fee2d1d245cfa58775319bb5b1a591cb278844caced52f78b795f67623fd93a865e12274eef0374b5d0cac93423743809f9da7c2e2e99ff4a3954b5e42c2630740d9a68069ce775861c9c512ff1c4d94640fde2fe08d739fe1b770d6bc4d4ed74edfa3ccf4f2aff5448eca97586b682040b99c4566387bcaefc63741ee84690ac8c260d4de3fce5b5635854b385eefc8b6018dbe15d9593c41cb8ac0727a158360e72548dcbbeb47a2f56014289c5c6e2b7765462d5f82e51b7f964ec0994f3aaba63d3a48e6985529260a4504aa235ce4d120917072f881e177fa53d7566c8d18eb4c9b5b835c31e40c2b8c172938336256cb9acfbeb18b2c5b7c05e2f85fa392c2ef8a09c26e4487e3154a7df2476c37dbb850d3a5f649998468d52a0f6cedc80577e2ffd85b2fda372df6fdde4abb469b7e2c1143a0e35633e4213b8efb5a0013a95c6ff386be3305c4c2e157b64dbc2f6ebab45015c48534f1e5ff691896dab27a29fed26253050f95678cefeb4c9281578bf2b28eeb37501ff5a21ed19f548353bf93c5931fbbc12bda7f5d16bf5a84684505585f977272b72db85f3c9c64fba1797b2f71f121cfbe0ec369d82e0ee35e9107811e32f0183d20d17c8cbf2a6360b2822a4f1f40ae41edddb6dd2e64bb64ecc22f0d998e97c647593516ffdd6be04270d43d448b6a4f0d4a2997bf2599c78b0aa4c1a95b3e35390bf07c3d0bd990891644015ed1bf70eeb849346566671072735d0cd394ac27fdfd0e9052025d226f2d4c61a31312c321ab7298f9a62590466197d057b9abb4029aa0079a477b162d0249c0e0ed11707a6e3f887b1d8761c8133fb299cbebf2ef1edde8b4308e02b38959d78bf620e9a38a9135401e1e7d49ff2d4b1ae8fb86b8651f97512db5f6467c29feecf7e4e4612de59f713dfc4536a932b936b5071f6d9ce26556990105d1147db0c0613785b64a06f4a0ac422a8206efcf53a891a67a5b1241260eb1af5284b67663c0bbaf968b3a9ccc79c6a8c7eafef43fe678ef307146c1a6f0c590432c918b64ce14e3ffa548fdcc006b2af61bc9107e0f162ac18860acf8a74be2a447f5ec639ebc525dd5675fa8b57120bde899291cdd680e30880783e00ba4a158590cb235f99ef22ba8206b742323ee93e225cd421b0d669b7718ffb1e4f2c0ebc9bec9b464e438cc2bd2d36af01215e6ebb4d4ed3c6a175272cde31a3e0d116a8b8283397ce0366fe266491f90e8dfd5597fa370105ff614b2f77ffe4596017d225a5c255215f28397b0dbdeedabe108891c0d541fdc0520f028409f84e758b42a2ff0ed3c7ac901c55330218608bbb921294236f5531c8420639cce53266c28556942d4633ef9326a475ed3a8653da10512a2aeb3dfb051b45ddaf150cd863b8c7e1db00011536f8e88061c2a590b959b8c28fed686429c5ee1e561c8a2e4a5268dba324ece25ed2b618fbbdb06dde9256528dc7cdcdc24d96227890b1524a3e838b86aca1f56ece76536e89c6f91638867a541cdc0e54b61be2048e004655e671f6a59ac6a1bb1c40fd8254bac7ecb908b6724f2991e43bca810de44809b2c2aed12a6adac59cf9ca73349824e7f85c8975517e6a4de337e72b84b7db3580c22ba23b783d480a2864bf02524d5dc6215f2b115d007178c239f4a225903d9e4524afdfb668f56745f78a45d26e6af6bf4dcc9bbd82e69e8deae0860b088bb4413f9b53857def6a71656a3bbedd1706b55a0842ad0e9f65e5201998b899fabb9cb03ff9a929741de3654ce18ee95042f6d46b4d3b7207fef51f3dea01d2f2a1f134c4d8a355c3c8da2528191a4f325eb95f5e162c3f54880ff6c889d6c8b5861a09bc8e8972b72685e762fa14fb4dc0fa1dc779fe3ba4fc833a80b27ae2cb3bdf413cb7456b1c08a945f8b21b40bfb8128789e7970d62ca31171077f702e50c5c17cef06e045f7f3ab1b51c550643e84c55409ef0ebbdde1d720873eee23a7d9927bcd4fb5d8d08654e9e7dc6e6b463b32f0fc3ec5e96ff8ba86fdd517e5c1a620dea615fa09d3435ef6093a356feac598273739667de2c9424393e26b38513aee7716459b0e9e4c4e27ce99498f5e15c4b76ac6974df3a99e9554e852ee4e92c5b2c5d63fc26d8e0e2de086376aa735d6d9581e7698b7310677f353ff464a2e5f5e33f14d80214542821565a8d9e94c49558242dd52e15df03f21d5b8101b7a54d7c944a0bc27b2c75e403002a92d5e74434a7cc8487c27c539687f6fd6ef698dbf8c78b13629dd5039c53680b9c14f491d11a2fa984d1e6b79c154c498b1210fe2aaed4795c45705a02ce2854d18752be9586be2bd69d156d3a45ddb740726bc7ebfd40f65a7c5460e0923ae8086304038bc9a109b2431457432c8e1d4caae5b9c4aa9a9e09a340792ab488196b05131880298af184c8fec6fd54dbad09b14b2aacde4e6bf4d7e70758d1531ebbe19d2448ffcea7a421dbf07734b4da29b80cfe76eed9a18ef79f48fba79be2e50638477c896dd574e912d584f398a104efa80d3d5beaecd0c17a9abd51a39afb23e0b28190b1fb768fff44be3c5ed641efd45ff8dd921d4faf7b393fb0ea6297c711ad8029a2d971a79b460e9c9cfae63f86273dddc140926b37b9451561473065daf4192449930267ad12fdae266aad9d59b97a847fe3725f071ed0b6547e9844616f0456de29016c4c38d3d996ddeaeb811f4d2f0965525c8478574f411b783a903341da38e5f2ddb6e5235b74f623d7b440bac124bd025b990d195e6d3dc55f226f915ba80d584aca50f121b76d25c72cd208ee3dda60cf8ab3e3426b2f8556169bc9adba0c4a1259ef8b47b38d9c450949f9445d5ba009607a6e3e2b794ddcd71cc2633d70a10aafff264d25e7fd571422a8dc39fb19bad88369284a974d5e621b80d3b3b91974f5a3d8d40538ae9a0b6226eb51abe03b727c2e42c544c79e2b5afc52427147d998c087c4dfcf5bb4124e0af425c9b2629a694e7203377e439d2ba925374cc3b2d2a6fe7509d5ea265bbe233dfc4ba7669fde79483bc50f7222a1ed9859adf94152f93c3c4766264d81ee034e62a0a43de2204bd40429a3c23fc5c709a39137ceb01b005e4cb0020106890accedab83c7d153389b57111b1879856ada7ab99ef91325225597f85fe64d5d1e75d50442c894cd1f298688e48875b268c70a0477763cb4f9b0f9aba1e11df2991a9414889e733a71c63fbbf090488513aa4e0faeb460a396fc4b68242386abb75cf14713e183dab3ae5690fd107f944c33cdcec41881c5d844d5545898891ee9df4fb890f07c5e753bf2b11a3bce4451f582f5ddbc2be9a0e31cff0cc49ca239d5f3d178e722847813a7c4d5940b9ec768d9aab2c5381f5ce71318271640da778402181e4e5d9ff8921ff4f9dad8ed5ee52972dba6ab4e0ac82e7da4d3c21b7f8fa5a94d748a92aa169edf2d47eb1207a627e4583f83f0ccd8deea6939e97d93885a460c7f87f53071a57d15ed052fad445ff00330eadef15ef604ae64c1e419dabdfd089617f3eb86c4303cb15541b3ec9ee6708ef16896b5f7617475a7c2e1722c6c50fbfe94044acc71e632246fccc20086e23f73a685f6cc5393a4d103563857506b37c17a02043a10b7569327f76f5a4981ee3274fc6b1b8c5819f278728a1e3e9e5ecc651843745aaa6f2442bca3db89caeae0079638b98f061385b798bf41230f3e269a27cc5c5acbe3e16f157746a4dc28d648c1ae0ba51be9b6b46b0163e3558b48a147a78e60669921c1be2b4d1b8d03e226740ddace9ef53cffd8b09119ae5e12d980d01ce61bd02ece6dc200ed82e645025789e5fa934f85e6162d7fda46e2a8c262d0105d2e065592a2dad51df8ef16767a4a479f93719b285da9900756930f54172d13f576c116bf8c6388b74e6b9f442022ecfa7dce9f5880169d331452bf4d4caaefab33b43b6ecc9513543b01170ee240face82ecbb2f3cba7d845ec382ac31dd07e76c1d3a3bddc0e1f6498e6ce3dfaa0c89f704b3a19ddc73ad1226ab519e72f3f004dddc6b3f8c8e85a4cb13c61611ef164bc851cd5d50b864284e1561cdd5f4ba1f5e989951d6ceffe77fe1cd967334807e528f98bc16ce6a865ff399f7283ef8b58b8e02e838c037fbe75120f61cfbd6f8ffa81b90fde3de1c0952675266cee50a5d499ee55bb66ed5da47c3bc9dcf29bab8726894619379c4a57abd25ff4ecb8e9ede5d5eefd822af8f01f5b985e847736ed0dd26a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x100, 0x20, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x20000003, 0x9, 0x5}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x2, 0x7ff, 0x7fffffff}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6edc, 0x2, 0x6, 0x3, 0x5}, 0x4d}}]}, {0x7e, 0x6, "8e9e3d1d083fbd7117a86f816604048b8d4fff502a48712b803f08d06775e86b85c79646a67a6462d3254bf7c87aeb90c00f8a01be5c5088014e25e368ec5ad0c746f8018e89b0d9c1797efeb067fa2aafe3c5b31a45ab54543495ec2c32dadf82049ad37e65ed095308ef863c07ff74e7ce32ce358ee36977c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x164, 0x6, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}]}, {0xd2, 0x6, "2466e3648267860619595a92c3fbfb3af70b8949cc99dee5a8af08ab318537bc37276e41a7372f902a954ef13438d0b8c2c299a7e728b5370b36e97ea9fb577d0afecce6ddece94c60513911966b91d3666358eda0ae2c49966ed9d24c3aeae458cdf9634f5648a2a59e633483b721efabf150f292656991edf4e78b0c18cdc41ec8949b5cf49ebd8533b80366183611d7695018487ffa962c66f1b60abbbfbb9e435272e0145021c38242835add6ac9131d0da11244c247dec221017d6899cafa12a7e09521ad0f981dde130ddf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x132c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0x81, 0x0, 0xffff}, "aed076d682795c746e24145165fff860636121957617855e5acf0af75eb0dcf88b28"}}]}, @TCA_EMATCH_TREE_LIST={0x1288, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x108, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "f1f72abdb66b0607868142cea0efe8e45a49639f819114d11ea33c531e97d817761789d80ce4f54fc80dd604e148afae89a4255eb3fa0d0d3506284a80226ba7319611490e834706276a34086c27b5c8f33638932f96cd18d77618460a9da4f2a0123be6c22834e8152af104a4a1c96ef9751363563bf30295a08eb8c91e92902ee5699030b0280fe98ae417ccf5421ffb0aa38611b02bbb8ffff562210dae8fdea50939d70257f70f52339aec9020f8e106761eb00989ea36f487df69594914c2dba6b827b92ae10c114a4c22e9a146777cd585efbb04f707c1d706cb4fda6dad"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x9}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffc, 0x7, 0xfff8}, {{0x3, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x40}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xb}, {0x4, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xe0, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x4}, "1eddee98cca125f1666bd80501d88d6260eed5b1a21d022d918b15ab86ccd02a2667d87350fbc429eb30ca72abf6633b2b8c3b7a359832b0ed27ce51c06736a4b649fa22388641d95d2dd6be44bcf7f3006d816f7174e360dec7f22bbee842f3f2a4df12c65c6fd379aa12282f7a2b1755a7e2b8f78a1fd8624ac264bb600618370e8a551d1f22cfd9836020d5955b0de56e7befb17fa5c9f41d95a6e0b3e291e03ecaccd352c4aa190365e97b93ba9994426e85e332776383f3a92704ca2f1ed1623699615b1dde7bed69d3001085b3202f1d"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x8, 0x10001, 0x2030, 0x7}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x2508}, {0x1, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x8000}, {0x7ff, 0x2, 0x0, 0x4, 0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x100}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="1e79f7eedb", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ab", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9f, 0x2}, {0x0, 0x2, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x5}}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0x401, 0x81, 0x2, {0x2, 0x4, 0x5, 0x1, 0xff, 0x2}, {0x9, 0x2, 0xff80, 0xf0, 0x3, 0x1ff}, 0x2, 0x6, 0x8}}]}, @TCA_BASIC_ACT={0x94, 0x3, [@m_ct={0x90, 0x8, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x401}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8001}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x81, 0x7, 0x5, 0x80000000}}]}, {0x17, 0x6, "e1b976ec9a0119965da6967e540a855471090f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x89bd38ddee51792e}}}}]}]}}]}, 0x3808}}, 0x400c084) 6m35.443671758s ago: executing program 2 (id=2593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0xeeef0000, 0x1000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19018eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bdfae87aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f342589dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36d88a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a687210698c1319531ac53de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d503001070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb7888951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1de68d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6ffffffffffffffff7044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29380900000000000040a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd5b418652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) (fail_nth: 4) 6m35.156111749s ago: executing program 2 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) 6m35.155684089s ago: executing program 2 (id=2598): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x44, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r8 = creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000040)='.\x00') mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r8, 0xc0285443, 0x0) splice(r1, 0x0, r7, 0x0, 0x4ffe6, 0x0) 6m34.986270985s ago: executing program 2 (id=2599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000f09e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 6m34.92641726s ago: executing program 2 (id=2600): r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r2}}]}}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xd, 0x4, 0x6, 0x0, 0xb, "4e2e10e3e9dd34180b687c006f6edcb311ce81"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xd, 0x4, 0x6, 0x0, 0xb, "4e2e10e3e9dd34180b687c006f6edcb311ce81"}) sendmsg$IPSET_CMD_TYPE(r0, 0xffffffffffffffff, 0x4c032) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/100, 0x0, 0x64, 0x0, 0x9, 0x0, @void, @value}, 0x20) write(r4, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000010000000000080008000100000000ff", 0x24) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r9, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async) pread64(r9, &(0x7f0000001440)=""/126, 0x7e, 0x41) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r12, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x7, 0xf0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x5, 0x8, "7ac8ea2e96"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0xc2be, 0x8, "a693d1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0x6, "", "eb254a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0x8, 0x5, "38bf9deb400a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf3, 0x9, {0x7, 0x25, 0x1, 0x80, 0x4, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0xf1, 0x6, "97c1e92351"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0xfffd, 0x5, "9c6e63"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x81, 0x7, 0x0, "f433e6e728"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x8, "a5f6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x5, 0x2, {0x7, 0x25, 0x1, 0x2, 0xe, 0x3}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xb, 0x63, 0x80, 0x68, 0x6}, 0x44, &(0x7f0000000140)={0x5, 0xf, 0x44, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "033315636db7470ddea5be33eafa0c89"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x8c, 0x10}, @generic={0x21, 0x10, 0x1, "d4b83bb52847a9a5fde5e37d8af5e7114b19f6cc5ff1c171a68d84852d8f"}]}, 0x3, [{0x95, &(0x7f0000000240)=@string={0x95, 0x3, "b8a9e32bcdeed2499dd0f3ac2eee354ec2ba6cf4380146d176bee2de67b296eaab81cf11dc34eb7fddbf63a7931c0ee31d718b617e9415bf96917f72a0ea46fa20fcee73fb91b85d2df73f3521a3adf8b82e6688748bb556ad449d29fb3bb16fa329822e40ae479b4650e0ae451f66651d8da27351778d84f722351098adbc1618b40494bc18036fd3abfd067ed6d2746ac008"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41f}}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "62a50c570af4c849a371d715eb5a6701809a8c7d2786b51ccc780ac8b1f4e0bb7a3e91b372777bd5d7ea9341d2"}}]}) 6m19.743521613s ago: executing program 32 (id=2600): r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r2}}]}}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xd, 0x4, 0x6, 0x0, 0xb, "4e2e10e3e9dd34180b687c006f6edcb311ce81"}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xd, 0x4, 0x6, 0x0, 0xb, "4e2e10e3e9dd34180b687c006f6edcb311ce81"}) sendmsg$IPSET_CMD_TYPE(r0, 0xffffffffffffffff, 0x4c032) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/100, 0x0, 0x64, 0x0, 0x9, 0x0, @void, @value}, 0x20) write(r4, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000010000000000080008000100000000ff", 0x24) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r9, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async) pread64(r9, &(0x7f0000001440)=""/126, 0x7e, 0x41) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r12, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x7, 0xf0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x5, 0x8, "7ac8ea2e96"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0xc2be, 0x8, "a693d1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0x6, "", "eb254a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x40, 0x8, 0x5, "38bf9deb400a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf3, 0x9, {0x7, 0x25, 0x1, 0x80, 0x4, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0xf1, 0x6, "97c1e92351"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0xfffd, 0x5, "9c6e63"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x81, 0x7, 0x0, "f433e6e728"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x8, "a5f6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x5, 0x2, {0x7, 0x25, 0x1, 0x2, 0xe, 0x3}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xb, 0x63, 0x80, 0x68, 0x6}, 0x44, &(0x7f0000000140)={0x5, 0xf, 0x44, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "033315636db7470ddea5be33eafa0c89"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x8c, 0x10}, @generic={0x21, 0x10, 0x1, "d4b83bb52847a9a5fde5e37d8af5e7114b19f6cc5ff1c171a68d84852d8f"}]}, 0x3, [{0x95, &(0x7f0000000240)=@string={0x95, 0x3, "b8a9e32bcdeed2499dd0f3ac2eee354ec2ba6cf4380146d176bee2de67b296eaab81cf11dc34eb7fddbf63a7931c0ee31d718b617e9415bf96917f72a0ea46fa20fcee73fb91b85d2df73f3521a3adf8b82e6688748bb556ad449d29fb3bb16fa329822e40ae479b4650e0ae451f66651d8da27351778d84f722351098adbc1618b40494bc18036fd3abfd067ed6d2746ac008"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x41f}}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "62a50c570af4c849a371d715eb5a6701809a8c7d2786b51ccc780ac8b1f4e0bb7a3e91b372777bd5d7ea9341d2"}}]}) 3m38.730185162s ago: executing program 0 (id=4595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x59, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000010003b1528bd700000000000000000ff", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000100000400028008000300000000000500110001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m38.729964748s ago: executing program 0 (id=4596): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b95380000000003000600000000000200000000000000000000000000fffd02000100000000030000000000000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 3m38.662322759s ago: executing program 0 (id=4598): unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x260, 0x0, 0x0, 0x1c8, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x2d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0xff000000, 'macvtap0\x00', 'bridge_slave_0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100, 0xff000000, 0xff, 'ip6gretap0\x00', 'ip6erspan0\x00', {}, {0x75816b9d8404136c}, 0x0, 0x3, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = dup(r2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x4, 0x2004c9, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000008, 0x2], 0x100000, 0x10800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m38.659645441s ago: executing program 0 (id=4600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r0, r2, 0x17, 0x0, 0x4, @void, @value=r1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) socket$inet6(0xa, 0x5, 0x9) 3m38.529034441s ago: executing program 0 (id=4602): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40001043, r3, 0x0) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000000500)="6bf4", 0x2}], 0x1, 0x1) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000240)={0x0, 0x1ff, 0x5, 0x40, 0x1, [], [0x2, 0x4, 0x4, 0x1], [0x7, 0x5, 0x8, 0x1], [0x42, 0x0, 0x80000000, 0x2]}) write$binfmt_script(r2, &(0x7f0000000580)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '@\x1d$.%{'}, {0x20, '&'}], 0xa, "0000783348b29e910024000029f50a899336010000000000000000ebf7fade3d580388d290d96721ec137228b60a0fd94415ad24ed37066498a2e1fed31075654e1b44ce9354e57979626903f434b5d6957398b43841d87d000e28863c05541ca0c9"}, 0x81) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) r7 = fanotify_init(0x4, 0x0) r8 = open(&(0x7f0000000040)='.\x00', 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007911b8000000000004000000000000009500000c00000000c3ab23da6776106fc295493c964ae2fb412d8aebc49a3f5bb83b81fcf8578bd93eba8e43a4b81ce05576331fa8326018e2ed922a0d2298bdc2e4cefb31a8b56716a2aed9f82003491f392e77c9fccc711fb718e90fd3504017cf3eb5b68176991d2034fcaeda2683"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r7, 0x441, 0x8000029, r8, 0x0) 3m38.381872674s ago: executing program 0 (id=4605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket(0x23, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x8eff, 0x4, 0x20}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000380)={'nr0\x00', {0x2, 0x4e21, @remote}}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r9, 0x1) 3m23.425055101s ago: executing program 33 (id=4605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket(0x23, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000080)={0x8eff, 0x4, 0x20}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000380)={'nr0\x00', {0x2, 0x4e21, @remote}}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r9, 0x1) 3m11.834507062s ago: executing program 5 (id=4788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@bridge_delvlan={0x48, 0x71, 0x300, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xf89128ae4a7ffed2, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c000a"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xcb4}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7f, 0x200}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="010026bd70000000e6ff6d79300000000000000000000000000000004f9bce0ffe01015fab3a93d78635d8730e3f275e7a1252352520d2ee01000000000000003d2d5948a520cf343b8f937ead0324be3c37336691bdb06b3e99926450716dbee5faf935c4d4cbc2e29aacb29c2748af6210b73eb76f27873de76525bbccb044357a86fe8079da692c79dd4a49454875bbe751c9b704b96d6135"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x8880) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0xc26080b) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="490cec74112062d6bcb64cd111af46a0c1c5d6c766381f296327754c30a2467176495f3079da76dbf4e3213e25fff2948d2bacc6cffefe4a4fa5534fe4d45a80b048ac2745bf86998f77bab23cc934a8e6dc7d1745b03a1fd0ee1a21ae581a48f04a40a0fa86e7ab842411a0281e8939c38a3783c16c44d3f2a9036337a7beb6dec3de1d5667512746"]) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="7d2c0473", @ANYRES16=r13, @ANYBLOB="000226bd7000ffdbdf25380000000c00580031000000000000000c0058004800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xb62e0dd8d7811f7d}, 0x10) 3m11.612225764s ago: executing program 5 (id=4791): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x4, @mcast1, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003a40)=@raw={'raw\x00', 0x8, 0x3, 0xca0, 0xac8, 0x11, 0x148, 0x0, 0x0, 0xc08, 0x2a8, 0x2a8, 0xc08, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'geneve1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x48}, 0x0, 0xa80, 0xac8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xffffffff, 0x2}, {0x1bf82b2a}, {0x7, 0xd0a5622197bd9073}, {0xffffffff, 0x2}, {0x5, 0x3}, {0xfffffff7, 0x2}, {0x8, 0x2}, {0x9, 0x3}, {0xc}, {0x2, 0x3}, {0x2, 0x1}], [{0x0, 0x5}, {0xfffffe00, 0x1}, {0x7, 0x800}, {0x7, 0x5}, {0x1, 0xfffffffe}, {0xfff, 0x100}, {0xfffffffa, 0xf}, {0x6, 0x8}, {0x9db1, 0x6}, {0x5, 0xa3}, {0x1ff, 0xffffffff}], 0x9, 0x8}, {[{0x7}, {0xc9, 0x1}, {0x1000, 0x2}, {0x401, 0x2}, {0x400, 0x574ba244a9f6eb99}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {}, {0x30000000}, {0x6, 0x2}], [{0x9, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x8, 0x7}, {0x2, 0xa}, {0x101, 0x5}, {0x879, 0x7}, {0x4, 0x1}, {0xffff, 0x58a}, {0x8, 0xc7d}], 0x6, 0x1}, {[{0xffff, 0x1}, {0x7, 0x1}, {0x4, 0x3}, {0x4, 0x3}, {0x8001}, {0xc3}, {0x2, 0x2}, {0x9, 0x2}, {0x9a, 0x1}, {0x1, 0x2}, {0x3}], [{0x2, 0x400}, {0x150, 0x3}, {0x8000, 0x8}, {0xfffffff7, 0x3}, {0x8, 0x8}, {0x8, 0x8}, {0x6, 0x3}, {0x9, 0x1}, {0xf7, 0x8}, {0x6, 0x6}, {0x7f, 0x3}], 0x8, 0x1}, {[{0x8}, {0x159, 0x4}, {0x8, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0xdd, 0x1}, {0x1ff, 0x1}, {0x100, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0x2}], [{0xce3, 0xfdf}, {0xfff, 0x5}, {0xfffffffd, 0x980b}, {0xffff, 0x3}, {0x1000, 0x80000001}, {0x400, 0x1}, {0x7, 0x5}, {0x200, 0x8}, {0x8001, 0x3ff}, {0x3e, 0x9}, {0xdb, 0xad}], 0x8, 0x5}, {[{0x9, 0x1}, {0x3, 0x3}, {0x2}, {}, {0x5, 0x6}, {0x6, 0x1}, {0x2, 0x1}, {0x10, 0x1}, {0x2, 0x1}, {0xfffffff9, 0x2}, {0x5, 0x1}], [{0x6, 0x7ff}, {0x4, 0x5d8}, {0x6, 0xfffffff8}, {0x0, 0x1}, {0x2, 0xfffffffa}, {0x3, 0x3}, {0x3eda, 0x6}, {0x0, 0xff}, {0x8, 0x3}, {0x0, 0x10001}, {0x3ff, 0x1ff}], 0x3, 0x8}, {[{0x0, 0x1}, {0x800}, {0x3, 0x2}, {0xfffff491, 0x2}, {0x6, 0x1}, {0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x80000000, 0x1}, {0x8, 0x3}, {0x6, 0x2}], [{0x9}, {0x0, 0x2}, {0x2, 0xfffffff9}, {0xb83e, 0x3}, {0x7f, 0x3}, {0xc4}, {0x0, 0x1}, {0x4, 0xce}, {0x8, 0x6}, {0x8, 0x8001}, {0x4}], 0x7, 0xa}, {[{0x639c, 0x905462c401af0b76}, {0x7fff}, {0x1}, {0x6, 0x1}, {0xa, 0x3}, {0x0, 0x3}, {0x5}, {0x8}, {0x800, 0x2}, {0x7b, 0x2}, {0xb4, 0x1}], [{0x4, 0x2}, {0x9, 0x4}, {0x1, 0x9}, {0xe1c, 0x1}, {0x100, 0x3}, {0x10, 0xc69}, {0x100, 0x10000}, {0x3, 0xfffffffa}, {0x15, 0x6710d57f}, {0xfff, 0x80}, {0x3, 0xc97d}], 0x9, 0x1}, {[{0xf}, {0xff, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x3}, {0x81, 0x3}, {0x9, 0x1}, {0x2, 0x3}, {}, {0x10001, 0x3}], [{0xc03, 0xffff}, {0x5, 0x8}, {0x0, 0xfffffe00}, {0x4, 0x1}, {0x9, 0x19}, {0x2, 0x3ff}, {0x0, 0x2}, {0x9, 0x400}, {0xb0bf, 0x101}, {0x3, 0x4}, {0xfffffffc, 0xfffffff9}], 0xb, 0x9}, {[{0x0, 0x2}, {0x4, 0x3}, {}, {0x401, 0x2}, {0x1, 0x1}, {0x40}, {0x87d2}, {0xffffffff, 0x2}, {0x9, 0x2}, {0x1ffb, 0x1}, {0x2, 0x2}], [{0x1, 0x8}, {0x6, 0x7fffffff}, {0x4, 0x7}, {0x5, 0x81}, {0x7, 0x1}, {0x5}, {0xdc, 0x5}, {0x0, 0xfffff56a}, {0x8, 0x7}, {0xfffffffc, 0x4}, {0x1, 0x1}], 0x0, 0x4}, {[{0x2, 0x3}, {0x8, 0x3}, {0x5, 0x3}, {0x2, 0x1}, {0xee, 0x3}, {0x7fff}, {0x9, 0x1}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x3}, {0x80000001, 0x3}], [{0x5, 0x10001}, {0x401, 0xe0000}, {0xd, 0x1ff}, {0x7, 0x10001}, {0x3c, 0x3}, {0x1, 0x6}, {0xe}, {0x5, 0x8000}, {0x9, 0x10}, {}, {0x1, 0xffffffff}], 0x1}, {[{0xaa, 0x1}, {0x1744}, {0x5, 0x2}, {0x3a6, 0x1}, {0x5, 0x2}, {0xc, 0x2}, {0x6, 0x1}, {0xed90, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x5}], [{0x4, 0x5}, {0x101, 0x3}, {0x7, 0xff}, {0x200, 0x7}, {0x9}, {0x3, 0x9}, {0x800, 0x927}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x3}, {0x3, 0x1}], 0xb, 0xb}], 0x2}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x7, 0x0, 0x0, 0x2]}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x8, 0x8, 0x7ff, '\x00', 'syz0\x00', {0x6498}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd00) r6 = semget$private(0x0, 0x4, 0x400) semctl$SEM_STAT(r6, 0x1, 0x12, &(0x7f0000003140)=""/119) r7 = socket$kcm(0x21, 0x2, 0xa) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000000c0)={0x3, @sdr={0x38415261, 0xe}}) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000e7ffffffdb0000000000000080d7ee8caaed0aab895b4668c4b4bdeb637fe4c6a4793e71551e3052082d18933f279bac236d1e4a"], 0x18}, 0x7c00) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) readv(r9, &(0x7f0000000340)=[{&(0x7f0000000180)=""/188, 0xbc}], 0x1) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x30, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m11.361883444s ago: executing program 5 (id=4796): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 3m11.232406123s ago: executing program 5 (id=4798): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) write$char_usb(r3, &(0x7f0000000000)="77ce3746fc0cc61e9d5ae47d32d514dd3ea4ea41751a8532e98c951e78644a4e7fdf056bd5e7b4541bd9a4", 0x2b) syz_usb_control_io(r2, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x5) read$char_usb(r4, 0x0, 0x0) 3m9.853639174s ago: executing program 5 (id=4818): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x32525942, 0x2, @discrete={0x1, 0x3}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102379, &(0x7f00000000c0)=0x18feb) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x1, @raw_data="a425e2f1a54d24f14258313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 3m9.853305265s ago: executing program 5 (id=4819): signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x20000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x81) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8880, 0x0) getdents(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x60, r11, 0x809, 0x70bd29, 0x3, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r12 = eventfd2(0x8, 0x1) read$eventfd(r12, &(0x7f0000000000), 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x5, 0x36, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) iopl(0x0) 2m54.836253409s ago: executing program 34 (id=4819): signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x20000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x81) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8880, 0x0) getdents(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x60, r11, 0x809, 0x70bd29, 0x3, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r12 = eventfd2(0x8, 0x1) read$eventfd(r12, &(0x7f0000000000), 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x5, 0x36, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) iopl(0x3) iopl(0x0) 36.71769531s ago: executing program 3 (id=6980): r0 = socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f0000001480)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x5}, 0x12101) r1 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) 36.667482729s ago: executing program 3 (id=6983): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b95380000000003000600000000000200000000000000000000000000000002000100000000030000034000000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 36.549172731s ago: executing program 3 (id=6986): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000638877fb7f0200017f020001be3e7d2a02d7ff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) (fail_nth: 1) 34.101124721s ago: executing program 3 (id=6990): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff1, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x400c0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)={0x1c, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x240040c4) 34.100155788s ago: executing program 3 (id=6992): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0xe4, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x7d], [0x88000001, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3000014, 0x8, 0xffffffff, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x80000001, 0xffff], [0xffffffff, 0x7, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x100, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 34.003627041s ago: executing program 1 (id=6995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000001c000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x0) 33.931812041s ago: executing program 3 (id=6996): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 33.846315446s ago: executing program 1 (id=6997): socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000302000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf1, @void, @value}, 0x94) 33.758412502s ago: executing program 1 (id=6999): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x1}}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x28, 0x12, 0xa01, 0x0, 0x1, {}, [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="63202a3a2a20727700964169463d96a7eef37fb4f277a8878a45effdfe7d28118225052cdebd26b44209e603e0824b279fdcf2f590455590ebae845d81111bd600"/81], 0x9) 32.836864046s ago: executing program 1 (id=7007): r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1001}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1c0}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000629000/0x2000)=nil, 0x2000}, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc048aeca, &(0x7f0000000200)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000440)}, 0x1) 31.565752557s ago: executing program 1 (id=7013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002"], 0x34}, 0x1, 0x700, 0x0, 0xc000}, 0x0) 31.484255107s ago: executing program 1 (id=7016): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)={0x20, r0, 0xfa005d68b1f96357, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x1000000}, 0x40040) 17.548851398s ago: executing program 35 (id=6996): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.995659772s ago: executing program 4 (id=7133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000160000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x0) 2.930982551s ago: executing program 4 (id=7134): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0xe4, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x7d], [0x88000001, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x902, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x80, 0x1, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x80000001, 0xffff], [0xffffffff, 0x7, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x0, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x100, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 2.807513163s ago: executing program 4 (id=7136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') fstat(r0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14bd7466a1de87299a00006ee63a459006006a20304a48291781279e306ef2095d100000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a400000000073797a300000000008000540000000000800084000000000140000001100018e0eebc88663dc8f3338476f9f1b27c0e21208db1d903c3c792ea2ea3c68bb466a6d6d72daf2d681acbffa7a16ed8c68461d385569ca195016d750b381"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000010000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40001000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a0101893270b8000000000700000009ad07c69f0026eb3f0000000900010073797a30000000002c0003802800008008000340000000021c10028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04220f01ffffffffffff1c030432910a0006db97de1d005ba2675ba39e6a2af4d19584d4b913024b0d05f8c2fe0a5eaddaae00f57c1099dacfb50e071f9a8749348d1955e07e0c68d6b9f20e0a55adec13ab3d1e8607b1b74fa91c335bf725ed200d25ca"], 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.544750692s ago: executing program 4 (id=7139): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002"], 0x34}, 0x1, 0x3f000000, 0x0, 0xc000}, 0x0) 2.525273714s ago: executing program 4 (id=7141): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) 1.466968488s ago: executing program 6 (id=7146): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b95380000000003000600000000000200000000000000000000000000000002000100000000030000fffffffb0000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1.378967132s ago: executing program 6 (id=7147): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$CDROMVOLCTRL(r2, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x7}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f0, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0xffff133a, 0x1], [{0x40, 0xffffffff, 0x0, 0x1}, {0xa96, 0x35}, {0x0, 0x8}, {0xffffffff}, {0x0, 0x800}, {}, {}, {}, {}, {0xff}, {0x400}, {0x0, 0x4}], 0xa}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000240)=0x1000002, 0x4) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES16=r6, @ANYBLOB="2c6163636573731a636c69656e742c6e6f78617474722c6e6f78617474722c009091b7f51076aa151704edb8dc66216827cfd7056ca5a0d5dba448a2894cc64409c8c5f5bbd43bb4227604fd9e6764fd9006c118169a2ad0233a7ac4d0c401d4fc48978440e0cfa4fe4b203a54335ebe38db67de254740ca2ed18c154ba90196d383293e9068865301db6d"]) 1.209940732s ago: executing program 6 (id=7148): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002"], 0x34}, 0x1, 0x60000000, 0x0, 0xc000}, 0x0) 1.124220538s ago: executing program 6 (id=7149): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x7) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 1.016583316s ago: executing program 6 (id=7150): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x106, 0x1, @buffer={0x0, 0x47, &(0x7f0000000040)=""/71}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900}) 704.776153ms ago: executing program 4 (id=7151): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 6 (id=7152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xc0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x8}]}}]}, 0x3c}, 0x1, 0xfffffffffffffff5, 0x0, 0x80}, 0x40) kernel console output (not intermixed with test programs): s in process `syz.1.6761'. [ 669.945234][T24516] sch_fq: defrate 0 ignored. [ 670.042426][T24528] input: syz1 as /devices/virtual/input/input180 [ 670.143070][T24527] xt_hashlimit: size too large, truncated to 1048576 [ 670.486002][T24554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6782'. [ 670.488226][T24555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6781'. [ 670.558571][T24558] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 670.786893][T24572] input: syz1 as /devices/virtual/input/input181 [ 670.964714][ T3229] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 671.129352][ T3229] usb 11-1: Using ep0 maxpacket: 16 [ 671.150893][ T3229] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 671.163132][ T3229] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 671.166131][ T3229] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.172439][ T3229] usb 11-1: Product: syz [ 671.173863][ T3229] usb 11-1: Manufacturer: syz [ 671.175347][ T3229] usb 11-1: SerialNumber: syz [ 671.180793][ T3229] usb 11-1: config 0 descriptor?? [ 671.188152][ T3229] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 671.193235][ T3229] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 671.233227][T24594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6798'. [ 671.557687][T24607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6803'. [ 671.682019][ T3229] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 671.717832][T24617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24617 comm=syz.4.6806 [ 671.726499][T24617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6806'. [ 671.731485][T24617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6806'. [ 671.750473][ T3229] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 671.753921][ T3229] em28xx 11-1:0.0: board has no eeprom [ 671.833366][ T3229] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 671.835962][ T3229] em28xx 11-1:0.0: dvb set to bulk mode. [ 671.839903][ T34] em28xx 11-1:0.0: Binding DVB extension [ 671.845001][ T3229] usb 11-1: USB disconnect, device number 38 [ 671.852003][ T3229] em28xx 11-1:0.0: Disconnecting em28xx [ 671.910732][ T34] em28xx 11-1:0.0: Registering input extension [ 671.915352][ T3229] em28xx 11-1:0.0: Closing input extension [ 671.956392][ T3229] em28xx 11-1:0.0: Freeing device [ 672.124300][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6813'. [ 672.128839][T24629] ceph: No mds server is up or the cluster is laggy [ 672.360127][T24640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.376423][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 672.522849][ T3229] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 672.557736][T24660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6818'. [ 672.569733][T24636] could not allocate digest TFM handle cryptd(blake2b-160) [ 672.711890][ T3229] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 672.715306][ T3229] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 672.727964][ T3229] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 672.738942][ T3229] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 672.743102][ T3229] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 672.755022][ T3229] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 672.758492][ T3229] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 672.765171][ T3229] usb 9-1: Product: syz [ 672.766840][ T3229] usb 9-1: Manufacturer: syz [ 672.780092][ T3229] cdc_wdm 9-1:1.0: skipping garbage [ 672.782225][ T3229] cdc_wdm 9-1:1.0: skipping garbage [ 672.787437][ T3229] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 672.789710][ T3229] cdc_wdm 9-1:1.0: Unknown control protocol [ 672.934843][ T40] kauditd_printk_skb: 2008 callbacks suppressed [ 672.934856][ T40] audit: type=1400 audit(2000000293.045:78299): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 672.952766][ T40] audit: type=1400 audit(2000000293.055:78300): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 672.981950][ T40] audit: type=1400 audit(2000000293.055:78301): avc: denied { create } for pid=24675 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.004259][ T40] audit: type=1400 audit(2000000293.055:78302): avc: denied { write } for pid=24675 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.037047][ T40] audit: type=1400 audit(2000000293.055:78303): avc: denied { read } for pid=24675 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.044776][ T40] audit: type=1400 audit(2000000293.055:78304): avc: denied { read } for pid=24675 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.046066][T24680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6827'. [ 673.073795][ T40] audit: type=1400 audit(2000000293.055:78305): avc: denied { read } for pid=24675 comm="syz.3.6824" dev="nsfs" ino=4026534282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.093556][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.095741][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.097805][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.099728][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.101361][ T40] audit: type=1400 audit(2000000293.064:78306): avc: denied { read open } for pid=24675 comm="syz.3.6824" path="net:[4026534282]" dev="nsfs" ino=4026534282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.101736][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.110604][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.112699][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.114826][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.116278][ T40] audit: type=1400 audit(2000000293.064:78307): avc: denied { create } for pid=24675 comm="syz.3.6824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 673.116905][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.122913][ T40] audit: type=1400 audit(2000000293.064:78308): avc: denied { read write } for pid=19705 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 673.124972][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.125169][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.136216][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.138340][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.140420][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.142483][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.144476][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.146693][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.148743][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.150832][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 673.152819][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 673.154719][ T6727] usb 9-1: USB disconnect, device number 100 [ 673.156657][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 673.243348][T24685] FAULT_INJECTION: forcing a failure. [ 673.243348][T24685] name failslab, interval 1, probability 0, space 0, times 0 [ 673.247335][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.6.6828 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 673.247351][T24685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 673.247358][T24685] Call Trace: [ 673.247362][T24685] [ 673.247367][T24685] dump_stack_lvl+0x16c/0x1f0 [ 673.247387][T24685] should_fail_ex+0x512/0x640 [ 673.247403][T24685] should_failslab+0xc2/0x120 [ 673.247419][T24685] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 673.247435][T24685] ? sidtab_sid2str_get+0x17a/0x680 [ 673.247453][T24685] kmemdup_noprof+0x29/0x60 [ 673.247468][T24685] sidtab_sid2str_get+0x17a/0x680 [ 673.247485][T24685] sidtab_entry_to_string+0x33/0x110 [ 673.247500][T24685] security_sid_to_context_core+0x35c/0x640 [ 673.247516][T24685] avc_audit_post_callback+0x109/0x8f0 [ 673.247533][T24685] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 673.247547][T24685] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 673.247562][T24685] ? skb_put+0x138/0x1b0 [ 673.247574][T24685] ? audit_log_n_string+0x253/0x540 [ 673.247589][T24685] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 673.247605][T24685] common_lsm_audit+0x24b/0x300 [ 673.247619][T24685] ? __pfx_common_lsm_audit+0x10/0x10 [ 673.247632][T24685] ? avc_denied+0x14a/0x190 [ 673.247652][T24685] slow_avc_audit+0x186/0x210 [ 673.247668][T24685] ? __pfx_slow_avc_audit+0x10/0x10 [ 673.247686][T24685] ? find_held_lock+0x2b/0x80 [ 673.247705][T24685] avc_has_perm+0x18b/0x1c0 [ 673.247722][T24685] ? __pfx_avc_has_perm+0x10/0x10 [ 673.247739][T24685] ? is_bpf_text_address+0x94/0x1a0 [ 673.247753][T24685] ? kernel_text_address+0x8d/0x100 [ 673.247767][T24685] sock_has_perm+0x252/0x2f0 [ 673.247779][T24685] ? __pfx_sock_has_perm+0x10/0x10 [ 673.247792][T24685] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 673.247810][T24685] ? __import_iovec+0x1dd/0x650 [ 673.247826][T24685] ? __might_fault+0xe3/0x190 [ 673.247838][T24685] ? __might_fault+0x13b/0x190 [ 673.247859][T24685] security_socket_sendmsg+0x9b/0x240 [ 673.247872][T24685] ____sys_sendmsg+0x865/0xc70 [ 673.247883][T24685] ? copy_msghdr_from_user+0x10a/0x160 [ 673.247898][T24685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.247915][T24685] ___sys_sendmsg+0x134/0x1d0 [ 673.247931][T24685] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.247944][T24685] ? __lock_acquire+0x622/0x1c90 [ 673.247976][T24685] __sys_sendmsg+0x16d/0x220 [ 673.247991][T24685] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.248015][T24685] do_syscall_64+0xcd/0x4c0 [ 673.248032][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.248043][T24685] RIP: 0033:0x7f4951b8e929 [ 673.248052][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.248062][T24685] RSP: 002b:00007f4952989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.248073][T24685] RAX: ffffffffffffffda RBX: 00007f4951db5fa0 RCX: 00007f4951b8e929 [ 673.248079][T24685] RDX: 0000000000040040 RSI: 0000200000003080 RDI: 0000000000000004 [ 673.248086][T24685] RBP: 00007f4952989090 R08: 0000000000000000 R09: 0000000000000000 [ 673.248092][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.248098][T24685] R13: 0000000000000000 R14: 00007f4951db5fa0 R15: 00007fff63a906c8 [ 673.248112][T24685] [ 673.371215][T22318] net_ratelimit: 33 callbacks suppressed [ 673.371228][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.487615][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.628008][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.662292][ T5292] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 673.662316][ T5292] Bluetooth: hci2: unknown advertising packet type: 0x67 [ 673.664563][ T5292] Bluetooth: hci2: Dropping invalid advertising data [ 673.668838][ T5292] Bluetooth: hci2: Malformed LE Event: 0x02 [ 673.744634][T22334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 673.872132][T22303] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.000697][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.011089][ T6727] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 674.118341][T22303] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.171951][ T6727] usb 8-1: Using ep0 maxpacket: 16 [ 674.179856][ T6727] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.185115][ T6727] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.188769][ T6727] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 674.192944][ T6727] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 674.196039][ T6727] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.201657][ T6727] usb 8-1: config 0 descriptor?? [ 674.235883][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.353283][T22303] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.460775][T24721] input: syz1 as /devices/virtual/input/input183 [ 674.472476][T22303] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 674.654956][ T6727] shield 0003:0955:7214.0075: unknown main item tag 0x0 [ 674.657088][ T6727] shield 0003:0955:7214.0075: unknown main item tag 0x0 [ 674.659246][ T6727] shield 0003:0955:7214.0075: unknown main item tag 0x0 [ 674.666827][T24730] ip_vti0: Master is either lo or non-ether device [ 674.674812][ T6727] shield 0003:0955:7214.0075: unknown main item tag 0x0 [ 674.676920][ T6727] shield 0003:0955:7214.0075: unknown main item tag 0x0 [ 674.681169][ T6727] input: HID 0955:7214 Haptics as /devices/virtual/input/input184 [ 674.703831][ T6727] shield 0003:0955:7214.0075: Registered Thunderstrike controller [ 674.709936][ T6727] shield 0003:0955:7214.0075: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 674.759800][T24736] random: crng reseeded on system resumption [ 674.778364][T24736] Restarting kernel threads ... [ 674.782061][T24736] Done restarting kernel threads. [ 674.829603][T24738] FAULT_INJECTION: forcing a failure. [ 674.829603][T24738] name failslab, interval 1, probability 0, space 0, times 0 [ 674.835471][T24738] CPU: 1 UID: 0 PID: 24738 Comm: syz.1.6846 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 674.835487][T24738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 674.835495][T24738] Call Trace: [ 674.835499][T24738] [ 674.835504][T24738] dump_stack_lvl+0x16c/0x1f0 [ 674.835524][T24738] should_fail_ex+0x512/0x640 [ 674.835541][T24738] should_failslab+0xc2/0x120 [ 674.835559][T24738] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 674.835576][T24738] ? sidtab_sid2str_get+0x17a/0x680 [ 674.835595][T24738] kmemdup_noprof+0x29/0x60 [ 674.835610][T24738] sidtab_sid2str_get+0x17a/0x680 [ 674.835629][T24738] sidtab_entry_to_string+0x33/0x110 [ 674.835645][T24738] security_sid_to_context_core+0x35c/0x640 [ 674.835662][T24738] avc_audit_post_callback+0x1aa/0x8f0 [ 674.835680][T24738] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 674.835695][T24738] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 674.835710][T24738] ? skb_put+0x138/0x1b0 [ 674.835722][T24738] ? audit_log_n_string+0x253/0x540 [ 674.835737][T24738] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 674.835753][T24738] common_lsm_audit+0x24b/0x300 [ 674.835768][T24738] ? __pfx_common_lsm_audit+0x10/0x10 [ 674.835781][T24738] ? avc_denied+0x14a/0x190 [ 674.835800][T24738] slow_avc_audit+0x186/0x210 [ 674.835816][T24738] ? __pfx_slow_avc_audit+0x10/0x10 [ 674.835834][T24738] ? find_held_lock+0x2b/0x80 [ 674.835852][T24738] avc_has_perm+0x18b/0x1c0 [ 674.835870][T24738] ? __pfx_avc_has_perm+0x10/0x10 [ 674.835894][T24738] ? is_bpf_text_address+0x94/0x1a0 [ 674.835907][T24738] ? kernel_text_address+0x8d/0x100 [ 674.835921][T24738] sock_has_perm+0x252/0x2f0 [ 674.835933][T24738] ? __pfx_sock_has_perm+0x10/0x10 [ 674.835946][T24738] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 674.835965][T24738] ? __import_iovec+0x1dd/0x650 [ 674.835979][T24738] ? __might_fault+0xe3/0x190 [ 674.835992][T24738] ? __might_fault+0x13b/0x190 [ 674.836007][T24738] security_socket_sendmsg+0x9b/0x240 [ 674.836020][T24738] ____sys_sendmsg+0x865/0xc70 [ 674.836032][T24738] ? copy_msghdr_from_user+0x10a/0x160 [ 674.836046][T24738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.836064][T24738] ___sys_sendmsg+0x134/0x1d0 [ 674.836079][T24738] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.836093][T24738] ? __lock_acquire+0x622/0x1c90 [ 674.836125][T24738] __sys_sendmsg+0x16d/0x220 [ 674.836140][T24738] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.836164][T24738] do_syscall_64+0xcd/0x4c0 [ 674.836181][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.836191][T24738] RIP: 0033:0x7f1da318e929 [ 674.836200][T24738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.836211][T24738] RSP: 002b:00007f1da3f80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.836221][T24738] RAX: ffffffffffffffda RBX: 00007f1da33b5fa0 RCX: 00007f1da318e929 [ 674.836228][T24738] RDX: 0000000000040040 RSI: 0000200000003080 RDI: 0000000000000004 [ 674.836234][T24738] RBP: 00007f1da3f80090 R08: 0000000000000000 R09: 0000000000000000 [ 674.836240][T24738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.836246][T24738] R13: 0000000000000000 R14: 00007f1da33b5fa0 R15: 00007ffda6f10c48 [ 674.836259][T24738] [ 674.873554][T24714] netlink: 'syz.3.6837': attribute type 2 has an invalid length. [ 674.953021][T24714] __nla_validate_parse: 4 callbacks suppressed [ 674.953031][T24714] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6837'. [ 674.959339][ T1329] shield 0003:0955:7214.0075: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 674.959426][T16098] usb 8-1: USB disconnect, device number 86 [ 674.962996][ T1329] shield 0003:0955:7214.0075: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 674.963029][ T1329] shield 0003:0955:7214.0075: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 674.976801][ T1329] shield 0003:0955:7214.0075: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 675.104899][ T5292] Bluetooth: hci3: unknown advertising packet type: 0x6e [ 675.104923][ T5292] Bluetooth: hci3: unknown advertising packet type: 0x67 [ 675.107305][ T5292] Bluetooth: hci3: Dropping invalid advertising data [ 675.113239][ T5292] Bluetooth: hci3: Malformed LE Event: 0x02 [ 675.165960][ T5977] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 675.337726][ T5977] usb 11-1: Using ep0 maxpacket: 32 [ 675.347587][ T5977] usb 11-1: config 0 has an invalid interface number: 126 but max is 0 [ 675.350162][ T5977] usb 11-1: config 0 has no interface number 0 [ 675.352155][ T5977] usb 11-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 675.355325][ T5977] usb 11-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 675.358603][ T5977] usb 11-1: config 0 interface 126 has no altsetting 0 [ 675.376758][ T5977] usb 11-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 675.379659][ T5977] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.382096][ T5977] usb 11-1: Product: syz [ 675.383441][ T5977] usb 11-1: Manufacturer: syz [ 675.384914][ T5977] usb 11-1: SerialNumber: syz [ 675.389017][ T5977] usb 11-1: config 0 descriptor?? [ 675.393890][T24740] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 675.397742][T24740] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 675.562936][T24759] input: syz1 as /devices/virtual/input/input185 [ 675.634532][ T5292] Bluetooth: hci5: unknown advertising packet type: 0x6e [ 675.634571][ T5292] Bluetooth: hci5: unknown advertising packet type: 0x67 [ 675.637635][ T5292] Bluetooth: hci5: Dropping invalid advertising data [ 675.642924][ T5292] Bluetooth: hci5: Malformed LE Event: 0x02 [ 675.865160][ T5977] ir_usb 11-1:0.126: IR Dongle converter detected [ 675.867637][ T5977] usb 11-1: IRDA class descriptor not found, device not bound [ 675.878452][ T5977] usb 11-1: USB disconnect, device number 39 [ 676.047518][T24779] [U] [ 676.048986][T24779] [U] [ 676.049911][T24779] [U] [ 676.050802][T24779] [U] [ 676.051745][T24779] [U] [ 676.052642][T24779] [U] [ 676.053538][T24779] [U] [ 676.054491][T24779] [U] [ 676.055542][T24779] [U] [ 676.056487][T24779] [U] [ 676.057379][T24779] [U] [ 676.058281][T24779] [U] [ 676.059343][T24779] [U] [ 676.060480][T24779] [U] [ 676.061389][T24779] [U] [ 676.062293][T24779] [U] [ 676.067443][T24778] [U] [ 676.137987][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6866'. [ 676.483744][T24795] input: syz1 as /devices/virtual/input/input186 [ 676.502735][ T5292] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 676.535617][ T61] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 676.600846][T24801] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6873'. [ 676.706181][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 676.712947][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.720397][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.723882][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 676.740853][ T61] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 676.743932][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.767636][ T61] usb 8-1: config 0 descriptor?? [ 676.977192][ T5292] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 676.977214][ T5292] Bluetooth: hci2: unknown advertising packet type: 0x67 [ 676.979467][ T5292] Bluetooth: hci2: Dropping invalid advertising data [ 676.988201][ T5292] Bluetooth: hci2: Malformed LE Event: 0x02 [ 676.989281][T24821] netlink: 448 bytes leftover after parsing attributes in process `syz.1.6882'. [ 676.993051][T24821] unsupported nla_type 14345 [ 677.013308][T24821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6882'. [ 677.020902][T24821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6882'. [ 677.024679][T24821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=24821 comm=syz.1.6882 [ 677.028716][T24821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24821 comm=syz.1.6882 [ 677.032568][T24821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=24821 comm=syz.1.6882 [ 677.220197][ T61] shield 0003:0955:7214.0076: unknown main item tag 0x0 [ 677.222404][ T61] shield 0003:0955:7214.0076: unknown main item tag 0x0 [ 677.224582][ T61] shield 0003:0955:7214.0076: unknown main item tag 0x0 [ 677.226756][ T61] shield 0003:0955:7214.0076: unknown main item tag 0x0 [ 677.231281][ T61] shield 0003:0955:7214.0076: unknown main item tag 0x0 [ 677.235534][ T61] input: HID 0955:7214 Haptics as /devices/virtual/input/input187 [ 677.261974][ T61] shield 0003:0955:7214.0076: Registered Thunderstrike controller [ 677.264533][ T61] shield 0003:0955:7214.0076: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 677.465533][T24787] FAULT_INJECTION: forcing a failure. [ 677.465533][T24787] name failslab, interval 1, probability 0, space 0, times 0 [ 677.469601][T24787] CPU: 0 UID: 0 PID: 24787 Comm: syz.3.6868 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 677.469617][T24787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 677.469624][T24787] Call Trace: [ 677.469629][T24787] [ 677.469634][T24787] dump_stack_lvl+0x16c/0x1f0 [ 677.469653][T24787] should_fail_ex+0x512/0x640 [ 677.469670][T24787] should_failslab+0xc2/0x120 [ 677.469686][T24787] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 677.469703][T24787] ? sidtab_sid2str_get+0x17a/0x680 [ 677.469721][T24787] kmemdup_noprof+0x29/0x60 [ 677.469736][T24787] sidtab_sid2str_get+0x17a/0x680 [ 677.469752][T24787] sidtab_entry_to_string+0x33/0x110 [ 677.469768][T24787] security_sid_to_context_core+0x35c/0x640 [ 677.469784][T24787] avc_audit_post_callback+0x109/0x8f0 [ 677.469801][T24787] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 677.469815][T24787] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 677.469830][T24787] ? skb_put+0x138/0x1b0 [ 677.469842][T24787] ? audit_log_n_string+0x253/0x540 [ 677.469857][T24787] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 677.469873][T24787] common_lsm_audit+0x24b/0x300 [ 677.469893][T24787] ? __pfx_common_lsm_audit+0x10/0x10 [ 677.469906][T24787] ? avc_denied+0x14a/0x190 [ 677.469925][T24787] slow_avc_audit+0x186/0x210 [ 677.469942][T24787] ? __pfx_slow_avc_audit+0x10/0x10 [ 677.469959][T24787] ? find_held_lock+0x2b/0x80 [ 677.469978][T24787] avc_has_perm+0x18b/0x1c0 [ 677.469996][T24787] ? __pfx_avc_has_perm+0x10/0x10 [ 677.470012][T24787] ? is_bpf_text_address+0x94/0x1a0 [ 677.470025][T24787] ? kernel_text_address+0x8d/0x100 [ 677.470040][T24787] sock_has_perm+0x252/0x2f0 [ 677.470052][T24787] ? __pfx_sock_has_perm+0x10/0x10 [ 677.470065][T24787] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 677.470084][T24787] ? __import_iovec+0x1dd/0x650 [ 677.470099][T24787] ? __might_fault+0xe3/0x190 [ 677.470112][T24787] ? __might_fault+0x13b/0x190 [ 677.470129][T24787] security_socket_sendmsg+0x9b/0x240 [ 677.470141][T24787] ____sys_sendmsg+0x865/0xc70 [ 677.470153][T24787] ? copy_msghdr_from_user+0x10a/0x160 [ 677.470168][T24787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.470186][T24787] ___sys_sendmsg+0x134/0x1d0 [ 677.470201][T24787] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.470215][T24787] ? __lock_acquire+0x622/0x1c90 [ 677.470248][T24787] __sys_sendmsg+0x16d/0x220 [ 677.470263][T24787] ? __pfx___sys_sendmsg+0x10/0x10 [ 677.470287][T24787] do_syscall_64+0xcd/0x4c0 [ 677.470304][T24787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.470315][T24787] RIP: 0033:0x7f792af8e929 [ 677.470325][T24787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.470335][T24787] RSP: 002b:00007f792beac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.470345][T24787] RAX: ffffffffffffffda RBX: 00007f792b1b5fa0 RCX: 00007f792af8e929 [ 677.470352][T24787] RDX: 0000000000040014 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 677.470358][T24787] RBP: 00007f792beac090 R08: 0000000000000000 R09: 0000000000000000 [ 677.470364][T24787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.470370][T24787] R13: 0000000000000000 R14: 00007f792b1b5fa0 R15: 00007ffe58ae8b48 [ 677.470384][T24787] [ 677.470515][T24787] netlink: 'syz.3.6868': attribute type 2 has an invalid length. [ 677.528748][T24836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6887'. [ 677.529213][T24787] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6868'. [ 677.594124][ T5984] shield 0003:0955:7214.0076: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 677.594170][ T1329] usb 8-1: USB disconnect, device number 87 [ 677.597546][ T5984] shield 0003:0955:7214.0076: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 677.603160][ T5984] shield 0003:0955:7214.0076: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 677.606733][ T5984] shield 0003:0955:7214.0076: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 677.818757][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6890'. [ 677.823070][T24845] openvswitch: : Dropping previously announced user features [ 677.849261][ T5292] Bluetooth: hci3: unknown advertising packet type: 0x6e [ 677.849283][ T5292] Bluetooth: hci3: unknown advertising packet type: 0x67 [ 677.851543][ T5292] Bluetooth: hci3: Dropping invalid advertising data [ 677.855871][ T5292] Bluetooth: hci3: Malformed LE Event: 0x02 [ 678.008465][T24854] netlink: 'syz.6.6894': attribute type 4 has an invalid length. [ 678.185096][T24864] input: syz1 as /devices/virtual/input/input188 [ 678.266610][ T5292] Bluetooth: hci3: unknown advertising packet type: 0x6e [ 678.266632][ T5292] Bluetooth: hci3: unknown advertising packet type: 0x67 [ 678.268939][ T5292] Bluetooth: hci3: Dropping invalid advertising data [ 678.276754][ T5292] Bluetooth: hci3: Malformed LE Event: 0x02 [ 678.297028][ T40] kauditd_printk_skb: 1391 callbacks suppressed [ 678.297039][ T40] audit: type=1400 audit(2000000298.050:79698): avc: denied { read write } for pid=19705 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 678.307707][ T40] audit: type=1400 audit(2000000298.050:79699): avc: denied { read write open } for pid=19705 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 678.315383][ T40] audit: type=1400 audit(2000000298.059:79700): avc: denied { ioctl } for pid=19705 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 678.322959][ T40] audit: type=1400 audit(2000000298.069:79701): avc: denied { read } for pid=24872 comm="syz.3.6904" dev="nsfs" ino=4026534282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 678.329565][ T40] audit: type=1400 audit(2000000298.078:79702): avc: denied { read open } for pid=24872 comm="syz.3.6904" path="net:[4026534282]" dev="nsfs" ino=4026534282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 678.341053][ T40] audit: type=1400 audit(2000000298.078:79703): avc: denied { create } for pid=24872 comm="syz.3.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 678.347494][ T40] audit: type=1400 audit(2000000298.078:79704): avc: denied { read write } for pid=24872 comm="syz.3.6904" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 678.355180][ T40] audit: type=1400 audit(2000000298.078:79705): avc: denied { read write open } for pid=24872 comm="syz.3.6904" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 678.363276][ T40] audit: type=1400 audit(2000000298.078:79706): avc: denied { create } for pid=24872 comm="syz.3.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 678.369662][ T40] audit: type=1400 audit(2000000298.078:79707): avc: denied { write } for pid=24872 comm="syz.3.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 678.373250][T24875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6903'. [ 678.583342][T24891] openvswitch: : Dropping previously announced user features [ 678.693703][T16922] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 678.801343][T22318] net_ratelimit: 35 callbacks suppressed [ 678.801360][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.865153][T16922] usb 11-1: Using ep0 maxpacket: 16 [ 678.873826][T16922] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.878658][ T5942] Bluetooth: hci5: Dropping invalid advertising data [ 678.880824][ T5942] Bluetooth: hci5: Malformed LE Event: 0x02 [ 678.887544][T16922] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.891589][T16922] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 678.895936][T16922] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 678.901882][T16922] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.910483][T16922] usb 11-1: config 0 descriptor?? [ 678.919989][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.046052][ T5997] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 679.046145][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.174353][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.206466][ T5997] usb 6-1: Using ep0 maxpacket: 16 [ 679.217558][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.220959][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.224931][ T5997] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 679.228993][ T5997] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 679.231820][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.237610][ T5997] usb 6-1: config 0 descriptor?? [ 679.304101][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.348310][T24918] input: syz1 as /devices/virtual/input/input189 [ 679.400334][T16922] shield 0003:0955:7214.0077: unknown main item tag 0x0 [ 679.402529][T16922] shield 0003:0955:7214.0077: unknown main item tag 0x0 [ 679.404664][T16922] shield 0003:0955:7214.0077: unknown main item tag 0x0 [ 679.406945][T16922] shield 0003:0955:7214.0077: unknown main item tag 0x0 [ 679.410948][T16922] shield 0003:0955:7214.0077: unknown main item tag 0x0 [ 679.419628][T16922] input: HID 0955:7214 Haptics as /devices/virtual/input/input190 [ 679.422295][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.433897][T16922] shield 0003:0955:7214.0077: Registered Thunderstrike controller [ 679.436449][T16922] shield 0003:0955:7214.0077: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 679.569997][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.582060][T24924] SELinux: ebitmap: map size 5 does not match my size 64 (high bit was 6) [ 679.584912][T24924] SELinux: failed to load policy [ 679.650749][ T8005] shield 0003:0955:7214.0077: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 679.654376][ T8005] shield 0003:0955:7214.0077: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 679.658021][ T839] usb 11-1: USB disconnect, device number 40 [ 679.660614][ T8005] shield 0003:0955:7214.0077: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 679.670968][ T8005] shield 0003:0955:7214.0077: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 679.682220][ T5997] shield 0003:0955:7214.0078: unknown main item tag 0x0 [ 679.684839][ T5997] shield 0003:0955:7214.0078: unknown main item tag 0x0 [ 679.687046][ T5997] shield 0003:0955:7214.0078: unknown main item tag 0x0 [ 679.689287][ T5997] shield 0003:0955:7214.0078: unknown main item tag 0x0 [ 679.691452][ T5997] shield 0003:0955:7214.0078: unknown main item tag 0x0 [ 679.696541][ T5997] input: HID 0955:7214 Haptics as /devices/virtual/input/input191 [ 679.698702][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.720327][ T5997] shield 0003:0955:7214.0078: Registered Thunderstrike controller [ 679.723473][ T5997] shield 0003:0955:7214.0078: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 679.828059][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.900742][T24904] FAULT_INJECTION: forcing a failure. [ 679.900742][T24904] name failslab, interval 1, probability 0, space 0, times 0 [ 679.905348][T24904] CPU: 2 UID: 0 PID: 24904 Comm: syz.1.6913 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 679.905363][T24904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 679.905386][T24904] Call Trace: [ 679.905390][T24904] [ 679.905395][T24904] dump_stack_lvl+0x16c/0x1f0 [ 679.905415][T24904] should_fail_ex+0x512/0x640 [ 679.905431][T24904] should_failslab+0xc2/0x120 [ 679.905447][T24904] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 679.905464][T24904] ? sidtab_sid2str_get+0x17a/0x680 [ 679.905482][T24904] kmemdup_noprof+0x29/0x60 [ 679.905496][T24904] sidtab_sid2str_get+0x17a/0x680 [ 679.905513][T24904] sidtab_entry_to_string+0x33/0x110 [ 679.905529][T24904] security_sid_to_context_core+0x35c/0x640 [ 679.905545][T24904] avc_audit_post_callback+0x1aa/0x8f0 [ 679.905562][T24904] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 679.905577][T24904] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 679.905596][T24904] ? skb_put+0x138/0x1b0 [ 679.905608][T24904] ? audit_log_n_string+0x253/0x540 [ 679.905623][T24904] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 679.905639][T24904] common_lsm_audit+0x24b/0x300 [ 679.905653][T24904] ? __pfx_common_lsm_audit+0x10/0x10 [ 679.905666][T24904] ? avc_denied+0x14a/0x190 [ 679.905685][T24904] slow_avc_audit+0x186/0x210 [ 679.905702][T24904] ? __pfx_slow_avc_audit+0x10/0x10 [ 679.905719][T24904] ? find_held_lock+0x2b/0x80 [ 679.905739][T24904] avc_has_perm+0x18b/0x1c0 [ 679.905756][T24904] ? __pfx_avc_has_perm+0x10/0x10 [ 679.905773][T24904] ? is_bpf_text_address+0x94/0x1a0 [ 679.905786][T24904] ? kernel_text_address+0x8d/0x100 [ 679.905801][T24904] sock_has_perm+0x252/0x2f0 [ 679.905812][T24904] ? __pfx_sock_has_perm+0x10/0x10 [ 679.905825][T24904] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 679.905844][T24904] ? __import_iovec+0x1dd/0x650 [ 679.905859][T24904] ? __might_fault+0xe3/0x190 [ 679.905871][T24904] ? __might_fault+0x13b/0x190 [ 679.905886][T24904] security_socket_sendmsg+0x9b/0x240 [ 679.905899][T24904] ____sys_sendmsg+0x865/0xc70 [ 679.905910][T24904] ? copy_msghdr_from_user+0x10a/0x160 [ 679.905925][T24904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.905943][T24904] ___sys_sendmsg+0x134/0x1d0 [ 679.905958][T24904] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.905972][T24904] ? __lock_acquire+0x622/0x1c90 [ 679.906006][T24904] __sys_sendmsg+0x16d/0x220 [ 679.906021][T24904] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.906045][T24904] do_syscall_64+0xcd/0x4c0 [ 679.906062][T24904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.906073][T24904] RIP: 0033:0x7f1da318e929 [ 679.906082][T24904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.906092][T24904] RSP: 002b:00007f1da3f80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.906102][T24904] RAX: ffffffffffffffda RBX: 00007f1da33b5fa0 RCX: 00007f1da318e929 [ 679.906109][T24904] RDX: 0000000000040014 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 679.906115][T24904] RBP: 00007f1da3f80090 R08: 0000000000000000 R09: 0000000000000000 [ 679.906121][T24904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.906127][T24904] R13: 0000000000000000 R14: 00007f1da33b5fa0 R15: 00007ffda6f10c48 [ 679.906141][T24904] [ 679.906260][T24904] netlink: 'syz.1.6913': attribute type 2 has an invalid length. [ 679.945424][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.947693][ T6727] usb 6-1: USB disconnect, device number 77 [ 679.948903][ T5997] shield 0003:0955:7214.0078: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 680.021215][ T5997] shield 0003:0955:7214.0078: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 680.024516][ T5997] shield 0003:0955:7214.0078: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 680.027938][ T5997] shield 0003:0955:7214.0078: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 680.290503][T24945] input: syz1 as /devices/virtual/input/input192 [ 680.373290][T24947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 680.515036][T24954] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 680.517824][T24954] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 680.570235][T24957] __nla_validate_parse: 4 callbacks suppressed [ 680.570248][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6937'. [ 680.581354][T24957] openvswitch: : Dropping previously announced user features [ 680.797729][ T5942] bt_err_ratelimited: 2 callbacks suppressed [ 680.797745][ T5942] Bluetooth: hci3: unknown advertising packet type: 0x6e [ 680.801805][ T5942] Bluetooth: hci3: unknown advertising packet type: 0x67 [ 680.804453][ T5942] Bluetooth: hci3: Dropping invalid advertising data [ 680.807065][ T5942] Bluetooth: hci3: Malformed LE Event: 0x02 [ 680.837711][ T5942] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 680.842086][ T5942] Bluetooth: hci5: Injecting HCI hardware error event [ 681.141506][ T5997] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 681.173404][ T6727] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 681.301817][ T5997] usb 6-1: Using ep0 maxpacket: 32 [ 681.308579][ T5997] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 681.311509][ T5997] usb 6-1: config 0 has no interface number 0 [ 681.313664][ T5997] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 681.317065][ T5997] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 681.320353][ T5997] usb 6-1: config 0 interface 126 has no altsetting 0 [ 681.323044][ T6727] usb 11-1: device descriptor read/64, error -71 [ 681.329557][ T5997] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 681.332429][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.336044][ T5997] usb 6-1: Product: syz [ 681.337390][ T5997] usb 6-1: Manufacturer: syz [ 681.338946][ T5997] usb 6-1: SerialNumber: syz [ 681.349518][ T5997] usb 6-1: config 0 descriptor?? [ 681.357180][T24971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 681.361579][T24971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 681.401099][T24954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 681.591748][ T6727] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 681.729660][ T6727] usb 11-1: device descriptor read/64, error -71 [ 681.738014][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6950'. [ 681.742931][T24997] openvswitch: : Dropping previously announced user features [ 681.774585][ T5997] ir_usb 6-1:0.126: IR Dongle converter detected [ 681.779817][ T5997] usb 6-1: IRDA class descriptor not found, device not bound [ 681.792183][ T5997] usb 6-1: USB disconnect, device number 78 [ 681.851551][ T6727] usb usb11-port1: attempt power cycle [ 681.864609][T25003] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 682.191856][ T5942] Bluetooth: hci5: unknown advertising packet type: 0x6e [ 682.191878][ T5942] Bluetooth: hci5: unknown advertising packet type: 0x67 [ 682.194248][ T5942] Bluetooth: hci5: Dropping invalid advertising data [ 682.198447][ T5942] Bluetooth: hci5: Malformed LE Event: 0x02 [ 682.225813][ T6727] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 682.245661][ T6727] usb 11-1: device descriptor read/8, error -71 [ 682.381667][ T1329] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 682.449371][T25016] input: syz1 as /devices/virtual/input/input193 [ 682.502453][ T6727] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 682.541427][ T6727] usb 11-1: device descriptor read/8, error -71 [ 682.547162][ T1329] usb 8-1: Using ep0 maxpacket: 16 [ 682.578076][ T1329] usb 8-1: config 0 has no interfaces? [ 682.584623][ T1329] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.587526][ T1329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 682.590159][ T1329] usb 8-1: SerialNumber: syz [ 682.599658][ T1329] usb 8-1: config 0 descriptor?? [ 682.634012][T25019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6957'. [ 682.659459][ T6727] usb usb11-port1: unable to enumerate USB device [ 682.824360][T25003] sg_write: process 1158 (syz.3.6951) changed security contexts after opening file descriptor, this is not allowed. [ 682.830585][ T6727] usb 8-1: USB disconnect, device number 88 [ 683.204649][ T5984] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 683.364932][ T5984] usb 6-1: Using ep0 maxpacket: 32 [ 683.374794][ T5984] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 683.378131][ T5984] usb 6-1: config 0 has no interface number 0 [ 683.380491][ T5984] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 683.384390][ T5984] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 683.388373][ T5984] usb 6-1: config 0 interface 126 has no altsetting 0 [ 683.397888][ T5984] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 683.401411][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.406948][ T5984] usb 6-1: Product: syz [ 683.411017][ T5984] usb 6-1: Manufacturer: syz [ 683.412820][ T5984] usb 6-1: SerialNumber: syz [ 683.417655][ T5984] usb 6-1: config 0 descriptor?? [ 683.424406][T25033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 683.428456][T25033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 683.473225][T25043] input: syz1 as /devices/virtual/input/input194 [ 683.652640][ T40] kauditd_printk_skb: 1642 callbacks suppressed [ 683.652651][ T40] audit: type=1400 audit(2000000303.064:81350): avc: denied { read } for pid=25032 comm="syz.1.6963" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 683.666607][ T40] audit: type=1400 audit(2000000303.064:81351): avc: denied { read open } for pid=25032 comm="syz.1.6963" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 683.674221][ T40] audit: type=1400 audit(2000000303.074:81352): avc: denied { ioctl } for pid=25032 comm="syz.1.6963" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 683.682011][ T40] audit: type=1400 audit(2000000303.074:81353): avc: denied { recv } for pid=40 comm="kauditd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 683.689322][ T40] audit: type=1400 audit(2000000303.074:81354): avc: denied { recv } for pid=40 comm="kauditd" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 683.697137][ T40] audit: type=1400 audit(2000000303.074:81355): avc: denied { create } for pid=25051 comm="syz.3.6971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.703276][ T40] audit: type=1400 audit(2000000303.074:81356): avc: denied { ioctl } for pid=25051 comm="syz.3.6971" path="socket:[136074]" dev="sockfs" ino=136074 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.711543][ T40] audit: type=1400 audit(2000000303.074:81357): avc: denied { recv } for pid=5906 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 683.719687][ T40] audit: type=1400 audit(2000000303.083:81358): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 683.727395][ T40] audit: type=1400 audit(2000000303.083:81359): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 683.924195][ T5984] ir_usb 6-1:0.126: IR Dongle converter detected [ 683.926465][ T5984] usb 6-1: IRDA class descriptor not found, device not bound [ 683.943452][ T5984] usb 6-1: USB disconnect, device number 79 [ 684.156474][T22331] net_ratelimit: 33 callbacks suppressed [ 684.156486][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.185342][ T5942] Bluetooth: hci6: unknown advertising packet type: 0x6e [ 684.185388][ T5942] Bluetooth: hci6: unknown advertising packet type: 0x67 [ 684.190348][ T5942] Bluetooth: hci6: Dropping invalid advertising data [ 684.194461][ T5942] Bluetooth: hci6: Malformed LE Event: 0x02 [ 684.274602][T22303] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.392186][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.519539][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.647910][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.765562][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.882875][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.001670][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.129570][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.257069][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.516812][T25086] FAULT_INJECTION: forcing a failure. [ 686.516812][T25086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.520959][T25086] CPU: 2 UID: 0 PID: 25086 Comm: syz.3.6986 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 686.520975][T25086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 686.520982][T25086] Call Trace: [ 686.520986][T25086] [ 686.520991][T25086] dump_stack_lvl+0x16c/0x1f0 [ 686.521011][T25086] should_fail_ex+0x512/0x640 [ 686.521027][T25086] _copy_from_user+0x2e/0xd0 [ 686.521042][T25086] __sys_bpf+0x21d/0x4d80 [ 686.521059][T25086] ? __pfx___sys_bpf+0x10/0x10 [ 686.521074][T25086] ? ksys_write+0x190/0x250 [ 686.521090][T25086] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 686.521113][T25086] ? fput+0x70/0xf0 [ 686.521129][T25086] ? ksys_write+0x1ac/0x250 [ 686.521142][T25086] ? __pfx_ksys_write+0x10/0x10 [ 686.521157][T25086] __x64_sys_bpf+0x78/0xc0 [ 686.521171][T25086] ? lockdep_hardirqs_on+0x7c/0x110 [ 686.521186][T25086] do_syscall_64+0xcd/0x4c0 [ 686.521203][T25086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.521214][T25086] RIP: 0033:0x7f792af8e929 [ 686.521222][T25086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.521233][T25086] RSP: 002b:00007f792beac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 686.521243][T25086] RAX: ffffffffffffffda RBX: 00007f792b1b5fa0 RCX: 00007f792af8e929 [ 686.521250][T25086] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 686.521256][T25086] RBP: 00007f792beac090 R08: 0000000000000000 R09: 0000000000000000 [ 686.521262][T25086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.521268][T25086] R13: 0000000000000000 R14: 00007f792b1b5fa0 R15: 00007ffe58ae8b48 [ 686.521281][T25086] [ 686.589863][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.898857][T25101] input: syz1 as /devices/virtual/input/input195 [ 686.926097][T25103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6993'. [ 686.929269][T25103] openvswitch: : Dropping previously announced user features [ 687.010426][ T5997] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 687.044390][T25105] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6994'. [ 687.202733][ T5997] usb 9-1: Using ep0 maxpacket: 16 [ 687.211013][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.216156][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.219132][ T5997] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 687.222967][ T5997] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 687.226604][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.232559][ T5997] usb 9-1: config 0 descriptor?? [ 687.237763][T25115] xt_hashlimit: size too large, truncated to 1048576 [ 687.453947][T25121] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7001'. [ 687.538814][T25123] FAULT_INJECTION: forcing a failure. [ 687.538814][T25123] name failslab, interval 1, probability 0, space 0, times 0 [ 687.542756][T25123] CPU: 0 UID: 0 PID: 25123 Comm: syz.6.7002 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 687.542771][T25123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 687.542778][T25123] Call Trace: [ 687.542783][T25123] [ 687.542792][T25123] dump_stack_lvl+0x16c/0x1f0 [ 687.542811][T25123] should_fail_ex+0x512/0x640 [ 687.542824][T25123] ? __kmalloc_noprof+0xbf/0x510 [ 687.542840][T25123] ? bpf_test_init.isra.0+0x9e/0x140 [ 687.542855][T25123] should_failslab+0xc2/0x120 [ 687.542870][T25123] __kmalloc_noprof+0xd2/0x510 [ 687.542886][T25123] bpf_test_init.isra.0+0x9e/0x140 [ 687.542903][T25123] bpf_prog_test_run_skb+0x245/0x2280 [ 687.542914][T25123] ? __fget_files+0x204/0x3c0 [ 687.542930][T25123] ? __fget_files+0x20e/0x3c0 [ 687.542944][T25123] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 687.542956][T25123] ? fput+0x70/0xf0 [ 687.542973][T25123] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 687.542984][T25123] __sys_bpf+0x1488/0x4d80 [ 687.543001][T25123] ? __pfx___sys_bpf+0x10/0x10 [ 687.543015][T25123] ? ksys_write+0x190/0x250 [ 687.543030][T25123] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 687.543054][T25123] ? fput+0x70/0xf0 [ 687.543069][T25123] ? ksys_write+0x1ac/0x250 [ 687.543081][T25123] ? __pfx_ksys_write+0x10/0x10 [ 687.543097][T25123] __x64_sys_bpf+0x78/0xc0 [ 687.543111][T25123] ? lockdep_hardirqs_on+0x7c/0x110 [ 687.543126][T25123] do_syscall_64+0xcd/0x4c0 [ 687.543143][T25123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.543153][T25123] RIP: 0033:0x7f4951b8e929 [ 687.543162][T25123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.543173][T25123] RSP: 002b:00007f4952989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 687.543183][T25123] RAX: ffffffffffffffda RBX: 00007f4951db5fa0 RCX: 00007f4951b8e929 [ 687.543190][T25123] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 687.543196][T25123] RBP: 00007f4952989090 R08: 0000000000000000 R09: 0000000000000000 [ 687.543202][T25123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.543208][T25123] R13: 0000000000000000 R14: 00007f4951db5fa0 R15: 00007fff63a906c8 [ 687.543221][T25123] [ 687.684035][ T5997] shield 0003:0955:7214.0079: unknown main item tag 0x0 [ 687.686468][ T5997] shield 0003:0955:7214.0079: unknown main item tag 0x0 [ 687.688842][ T5997] shield 0003:0955:7214.0079: unknown main item tag 0x0 [ 687.691134][ T5997] shield 0003:0955:7214.0079: unknown main item tag 0x0 [ 687.693372][ T5997] shield 0003:0955:7214.0079: unknown main item tag 0x0 [ 687.698245][ T5997] input: HID 0955:7214 Haptics as /devices/virtual/input/input196 [ 687.719449][ T5997] shield 0003:0955:7214.0079: Registered Thunderstrike controller [ 687.728568][ T5997] shield 0003:0955:7214.0079: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 687.904486][ T34] usb 9-1: USB disconnect, device number 101 [ 687.908028][ T5997] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 687.911562][ T5997] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 687.915293][ T5997] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 687.921208][ T5997] shield 0003:0955:7214.0079: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 687.959669][T25109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 687.963027][T25109] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 687.989317][T25109] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 687.991890][T25109] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 688.007860][T25109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 688.010292][T25109] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 688.140254][T25131] input: syz1 as /devices/virtual/input/input197 [ 689.074913][ T40] kauditd_printk_skb: 1101 callbacks suppressed [ 689.074924][ T40] audit: type=1400 audit(2000000308.144:82461): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.085889][ T40] audit: type=1400 audit(2000000308.153:82462): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.138772][ T40] audit: type=1400 audit(2000000308.200:82463): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.181779][ T40] audit: type=1400 audit(2000000308.237:82464): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.236795][ T40] audit: type=1400 audit(2000000308.293:82465): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.305421][ T40] audit: type=1400 audit(2000000308.349:82466): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.316989][ T40] audit: type=1400 audit(2000000308.359:82467): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.365515][ T40] audit: type=1400 audit(2000000308.415:82468): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.376866][ T40] audit: type=1400 audit(2000000308.424:82469): avc: denied { ioctl } for pid=25147 comm="syz.4.7011" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 689.385309][ T40] audit: type=1400 audit(2000000308.424:82470): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 689.451904][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7013'. [ 689.457468][T25153] openvswitch: : Dropping previously announced user features [ 689.517974][T25155] FAULT_INJECTION: forcing a failure. [ 689.517974][T25155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.523171][T25155] CPU: 3 UID: 0 PID: 25155 Comm: syz.4.7014 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 689.523186][T25155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 689.523193][T25155] Call Trace: [ 689.523197][T25155] [ 689.523202][T25155] dump_stack_lvl+0x16c/0x1f0 [ 689.523220][T25155] should_fail_ex+0x512/0x640 [ 689.523237][T25155] _copy_from_user+0x2e/0xd0 [ 689.523252][T25155] bpf_test_init.isra.0+0xe2/0x140 [ 689.523270][T25155] bpf_prog_test_run_skb+0x245/0x2280 [ 689.523282][T25155] ? __fget_files+0x204/0x3c0 [ 689.523299][T25155] ? __fget_files+0x20e/0x3c0 [ 689.523312][T25155] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 689.523324][T25155] ? fput+0x70/0xf0 [ 689.523341][T25155] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 689.523351][T25155] __sys_bpf+0x1488/0x4d80 [ 689.523368][T25155] ? __pfx___sys_bpf+0x10/0x10 [ 689.523383][T25155] ? ksys_write+0x190/0x250 [ 689.523397][T25155] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 689.523421][T25155] ? fput+0x70/0xf0 [ 689.523436][T25155] ? ksys_write+0x1ac/0x250 [ 689.523449][T25155] ? __pfx_ksys_write+0x10/0x10 [ 689.523464][T25155] __x64_sys_bpf+0x78/0xc0 [ 689.523478][T25155] ? lockdep_hardirqs_on+0x7c/0x110 [ 689.523493][T25155] do_syscall_64+0xcd/0x4c0 [ 689.523509][T25155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.523521][T25155] RIP: 0033:0x7f404d98e929 [ 689.523534][T25155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.523545][T25155] RSP: 002b:00007f404e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 689.523555][T25155] RAX: ffffffffffffffda RBX: 00007f404dbb5fa0 RCX: 00007f404d98e929 [ 689.523562][T25155] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 689.523568][T25155] RBP: 00007f404e851090 R08: 0000000000000000 R09: 0000000000000000 [ 689.523574][T25155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.523581][T25155] R13: 0000000000000000 R14: 00007f404dbb5fa0 R15: 00007ffc46f9ce88 [ 689.523594][T25155] [ 689.597254][T22331] net_ratelimit: 36 callbacks suppressed [ 689.597266][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.701721][T25167] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 689.726149][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.821184][T25172] input: syz1 as /devices/virtual/input/input198 [ 689.862427][T22334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.984207][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.058097][T25177] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 690.060212][T25177] binder: 25175:25177 ioctl 4018620d 200000000100 returned -1 [ 690.099572][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.217824][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.336092][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.337727][ T5942] Bluetooth: hci5: unknown advertising packet type: 0x6e [ 690.338368][ T5942] Bluetooth: hci5: unknown advertising packet type: 0x67 [ 690.340631][ T5942] Bluetooth: hci5: Dropping invalid advertising data [ 690.345041][ T5942] Bluetooth: hci5: Malformed LE Event: 0x02 [ 690.452485][ T839] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 690.452680][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.580782][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.612785][ T839] usb 11-1: Using ep0 maxpacket: 16 [ 690.619488][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.622909][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.625940][ T839] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.629863][ T839] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 690.632631][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.639872][ T839] usb 11-1: config 0 descriptor?? [ 690.698173][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.378120][T25187] netlink: 'syz.6.7026': attribute type 2 has an invalid length. [ 691.380868][T25187] netlink: 244 bytes leftover after parsing attributes in process `syz.6.7026'. [ 691.387950][T25187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.390685][T25187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.396770][ T839] usbhid 11-1:0.0: can't add hid device: -71 [ 691.398804][ T839] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 691.402228][ T839] usb 11-1: USB disconnect, device number 45 [ 692.108931][T25202] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 692.135401][T25204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7032'. [ 692.139921][T25204] openvswitch: : Dropping previously announced user features [ 692.225647][T25207] FAULT_INJECTION: forcing a failure. [ 692.225647][T25207] name failslab, interval 1, probability 0, space 0, times 0 [ 692.230949][T25207] CPU: 3 UID: 0 PID: 25207 Comm: syz.4.7033 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 692.230973][T25207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 692.230984][T25207] Call Trace: [ 692.230991][T25207] [ 692.230998][T25207] dump_stack_lvl+0x16c/0x1f0 [ 692.231029][T25207] should_fail_ex+0x512/0x640 [ 692.231051][T25207] ? __kmalloc_noprof+0xbf/0x510 [ 692.231076][T25207] ? sk_prot_alloc+0x1a8/0x2a0 [ 692.231090][T25207] should_failslab+0xc2/0x120 [ 692.231115][T25207] __kmalloc_noprof+0xd2/0x510 [ 692.231142][T25207] sk_prot_alloc+0x1a8/0x2a0 [ 692.231161][T25207] sk_alloc+0x36/0xc20 [ 692.231184][T25207] bpf_prog_test_run_skb+0x330/0x2280 [ 692.231203][T25207] ? __fget_files+0x204/0x3c0 [ 692.231231][T25207] ? __fget_files+0x20e/0x3c0 [ 692.231253][T25207] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 692.231273][T25207] ? fput+0x70/0xf0 [ 692.231301][T25207] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 692.231319][T25207] __sys_bpf+0x1488/0x4d80 [ 692.231346][T25207] ? __pfx___sys_bpf+0x10/0x10 [ 692.231371][T25207] ? ksys_write+0x190/0x250 [ 692.231396][T25207] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 692.231437][T25207] ? fput+0x70/0xf0 [ 692.231462][T25207] ? ksys_write+0x1ac/0x250 [ 692.231483][T25207] ? __pfx_ksys_write+0x10/0x10 [ 692.231515][T25207] __x64_sys_bpf+0x78/0xc0 [ 692.231539][T25207] ? lockdep_hardirqs_on+0x7c/0x110 [ 692.231564][T25207] do_syscall_64+0xcd/0x4c0 [ 692.231592][T25207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.231611][T25207] RIP: 0033:0x7f404d98e929 [ 692.231626][T25207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.231657][T25207] RSP: 002b:00007f404e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 692.231675][T25207] RAX: ffffffffffffffda RBX: 00007f404dbb5fa0 RCX: 00007f404d98e929 [ 692.231688][T25207] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 692.231700][T25207] RBP: 00007f404e851090 R08: 0000000000000000 R09: 0000000000000000 [ 692.231710][T25207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.231720][T25207] R13: 0000000000000000 R14: 00007f404dbb5fa0 R15: 00007ffc46f9ce88 [ 692.231743][T25207] [ 692.474126][T25216] fuse: Bad value for 'fd' [ 692.476006][T25217] fuse: Bad value for 'fd' [ 692.480754][T25217] fuse: Bad value for 'fd' [ 692.481294][T25216] fuse: Bad value for 'fd' [ 692.505735][T25220] input: syz1 as /devices/virtual/input/input199 [ 695.006947][T22324] net_ratelimit: 35 callbacks suppressed [ 695.006960][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.123921][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.242030][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.359129][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.476680][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.594210][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.722555][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.840730][T22334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.958069][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.075621][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.513619][ T40] kauditd_printk_skb: 677 callbacks suppressed [ 697.513643][ T40] audit: type=1400 audit(2000000316.030:83148): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 697.525890][ T40] audit: type=1400 audit(2000000316.030:83149): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 697.535187][ T40] audit: type=1400 audit(2000000316.030:83150): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 697.544603][ T40] audit: type=1400 audit(2000000316.030:83151): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 700.372612][T22318] net_ratelimit: 35 callbacks suppressed [ 700.372627][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.490445][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.618817][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.746876][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.864564][T22334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.982083][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.100389][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.227953][T22334] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.345379][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.463284][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.448346][ T40] audit: type=1400 audit(2000000321.586:83152): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 703.456584][ T40] audit: type=1400 audit(2000000321.596:83153): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 703.464504][ T40] audit: type=1400 audit(2000000321.596:83154): avc: denied { execute } for pid=25227 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 703.471428][ T40] audit: type=1400 audit(2000000321.596:83155): avc: denied { recv } for pid=5906 comm="sshd-session" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 703.480130][ T40] audit: type=1400 audit(2000000321.596:83156): avc: denied { execute_no_trans } for pid=25227 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 703.487422][ T40] audit: type=1400 audit(2000000321.596:83157): avc: denied { execute } for pid=25227 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 703.494354][ T40] audit: type=1400 audit(2000000321.614:83158): avc: denied { execmem } for pid=25227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 703.636739][ T40] audit: type=1400 audit(2000000321.764:83159): avc: denied { create } for pid=25228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 703.644505][ T40] audit: type=1400 audit(2000000321.773:83160): avc: denied { read write } for pid=25228 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 703.654238][ T40] audit: type=1400 audit(2000000321.773:83161): avc: denied { read write open } for pid=25228 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 704.980058][ T8005] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 705.150982][ T8005] usb 11-1: Using ep0 maxpacket: 16 [ 705.158375][ T8005] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.163477][ T8005] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.166555][ T8005] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 705.170941][ T8005] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 705.175795][ T8005] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.180803][ T8005] usb 11-1: config 0 descriptor?? [ 705.396856][ T1329] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 705.567996][ T1329] usb 9-1: Using ep0 maxpacket: 32 [ 705.578013][ T1329] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 705.582401][ T1329] usb 9-1: config 0 has no interface number 0 [ 705.585073][ T1329] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 705.589414][ T1329] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 705.593513][ T1329] usb 9-1: config 0 interface 126 has no altsetting 0 [ 705.605316][ T1329] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 705.608359][ T1329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.611750][ T1329] usb 9-1: Product: syz [ 705.613450][ T1329] usb 9-1: Manufacturer: syz [ 705.615311][ T1329] usb 9-1: SerialNumber: syz [ 705.620437][ T1329] usb 9-1: config 0 descriptor?? [ 705.625110][T25250] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 705.628535][T25250] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 705.628829][ T8005] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 705.635127][ T8005] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 705.637324][ T8005] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 705.639466][ T8005] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 705.641573][ T8005] shield 0003:0955:7214.007A: unknown main item tag 0x0 [ 705.648551][ T8005] input: HID 0955:7214 Haptics as /devices/virtual/input/input200 [ 705.660186][ T8005] shield 0003:0955:7214.007A: Registered Thunderstrike controller [ 705.662778][ T8005] shield 0003:0955:7214.007A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 705.739216][T22331] net_ratelimit: 35 callbacks suppressed [ 705.739228][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.847751][T25238] netlink: 'syz.6.7046': attribute type 2 has an invalid length. [ 705.850868][T25238] netlink: 244 bytes leftover after parsing attributes in process `syz.6.7046'. [ 705.856351][T16922] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 705.856713][ T6727] usb 11-1: USB disconnect, device number 46 [ 705.856910][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.859917][T16922] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 705.867500][T16922] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 705.870933][T16922] shield 0003:0955:7214.007A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 705.940074][T25250] FAULT_INJECTION: forcing a failure. [ 705.940074][T25250] name failslab, interval 1, probability 0, space 0, times 0 [ 705.944472][T25250] CPU: 0 UID: 0 PID: 25250 Comm: syz.4.7050 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 705.944487][T25250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 705.944494][T25250] Call Trace: [ 705.944499][T25250] [ 705.944503][T25250] dump_stack_lvl+0x16c/0x1f0 [ 705.944522][T25250] should_fail_ex+0x512/0x640 [ 705.944536][T25250] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 705.944553][T25250] should_failslab+0xc2/0x120 [ 705.944569][T25250] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 705.944582][T25250] ? copy_process+0x4b6/0x76a0 [ 705.944603][T25250] copy_process+0x4b6/0x76a0 [ 705.944622][T25250] ? __pfx_copy_process+0x10/0x10 [ 705.944638][T25250] ? lockdep_init_map_type+0x5c/0x280 [ 705.944656][T25250] ? lockdep_init_map_type+0x5c/0x280 [ 705.944673][T25250] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 705.944689][T25250] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 705.944708][T25250] vhost_task_create+0x1d2/0x2e0 [ 705.944718][T25250] ? __pfx_vhost_task_create+0x10/0x10 [ 705.944732][T25250] ? __pfx_vhost_task_fn+0x10/0x10 [ 705.944749][T25250] kvm_mmu_post_init_vm+0x1b7/0x370 [ 705.944763][T25250] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 705.944776][T25250] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 705.944792][T25250] kvm_vcpu_ioctl+0x5eb/0x1690 [ 705.944805][T25250] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 705.944822][T25250] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 705.944839][T25250] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 705.944857][T25250] ? hook_file_ioctl_common+0x145/0x410 [ 705.944878][T25250] ? selinux_file_ioctl+0x180/0x270 [ 705.944892][T25250] ? selinux_file_ioctl+0xb4/0x270 [ 705.944906][T25250] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 705.944919][T25250] __x64_sys_ioctl+0x18b/0x210 [ 705.944932][T25250] do_syscall_64+0xcd/0x4c0 [ 705.944949][T25250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.944959][T25250] RIP: 0033:0x7f404d98e929 [ 705.944969][T25250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.944979][T25250] RSP: 002b:00007f404e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.944989][T25250] RAX: ffffffffffffffda RBX: 00007f404dbb5fa0 RCX: 00007f404d98e929 [ 705.944996][T25250] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 705.945002][T25250] RBP: 00007f404e851090 R08: 0000000000000000 R09: 0000000000000000 [ 705.945008][T25250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.945014][T25250] R13: 0000000000000000 R14: 00007f404dbb5fa0 R15: 00007ffc46f9ce88 [ 705.945027][T25250] [ 705.985501][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.084356][ T1329] ir_usb 9-1:0.126: IR Dongle converter detected [ 706.093913][ T1329] usb 9-1: IRDA class descriptor not found, device not bound [ 706.098346][ T1329] usb 9-1: USB disconnect, device number 102 [ 706.156769][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.273502][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.391064][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.508674][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.626292][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.755224][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.883887][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.968442][T16098] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 707.128598][T16098] usb 11-1: Using ep0 maxpacket: 32 [ 707.135262][T16098] usb 11-1: config 0 has an invalid interface number: 126 but max is 0 [ 707.137868][T16098] usb 11-1: config 0 has no interface number 0 [ 707.142605][T16098] usb 11-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 707.145837][T16098] usb 11-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 707.149198][T16098] usb 11-1: config 0 interface 126 has no altsetting 0 [ 707.163665][T16098] usb 11-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 707.166559][T16098] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.167605][T25270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7058'. [ 707.169024][T16098] usb 11-1: Product: syz [ 707.169034][T16098] usb 11-1: Manufacturer: syz [ 707.175808][T16098] usb 11-1: SerialNumber: syz [ 707.179856][T16098] usb 11-1: config 0 descriptor?? [ 707.186333][T25262] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 707.189290][T25262] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 707.855768][ T1329] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 708.015937][ T1329] usb 9-1: Using ep0 maxpacket: 32 [ 708.027150][ T1329] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 708.030497][ T1329] usb 9-1: config 0 has no interface number 0 [ 708.033006][ T1329] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 708.036934][ T1329] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 708.041241][ T1329] usb 9-1: config 0 interface 126 has no altsetting 0 [ 708.053324][ T1329] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 708.057036][ T1329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.060445][ T1329] usb 9-1: Product: syz [ 708.062163][ T1329] usb 9-1: Manufacturer: syz [ 708.064068][ T1329] usb 9-1: SerialNumber: syz [ 708.070945][ T1329] usb 9-1: config 0 descriptor?? [ 708.076790][T25279] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 708.080852][T25279] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 708.169545][T16098] ir_usb 11-1:0.126: IR Dongle converter detected [ 708.171949][T16098] usb 11-1: IRDA class descriptor not found, device not bound [ 708.178014][T16098] usb 11-1: USB disconnect, device number 47 [ 708.195115][T25252] udevd[25252]: setting owner of /dev/bus/usb/011/047 to uid=0, gid=0 failed: No such file or directory [ 708.469240][ T1329] ir_usb 9-1:0.126: IR Dongle converter detected [ 708.471718][ T1329] usb 9-1: IRDA class descriptor not found, device not bound [ 708.477746][ T1329] usb 9-1: USB disconnect, device number 103 [ 709.024433][ T40] kauditd_printk_skb: 648 callbacks suppressed [ 709.024445][ T40] audit: type=1400 audit(2000000326.806:83810): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.034662][ T40] audit: type=1400 audit(2000000326.806:83811): avc: denied { recv } for pid=5906 comm="sshd-session" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.042344][ T40] audit: type=1400 audit(2000000326.815:83812): avc: denied { read write } for pid=20327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 709.049857][ T40] audit: type=1400 audit(2000000326.815:83813): avc: denied { read write open } for pid=20327 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 709.057853][ T40] audit: type=1400 audit(2000000326.815:83814): avc: denied { ioctl } for pid=20327 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 709.076794][ T40] audit: type=1400 audit(2000000326.853:83815): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.084756][ T40] audit: type=1400 audit(2000000326.853:83816): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.094847][ T40] audit: type=1400 audit(2000000326.853:83817): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.104294][ T40] audit: type=1400 audit(2000000326.853:83818): avc: denied { recv } for pid=5906 comm="sshd-session" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.112193][ T40] audit: type=1400 audit(2000000326.853:83819): avc: denied { recv } for pid=5906 comm="sshd-session" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 709.790266][T25298] xt_hashlimit: size too large, truncated to 1048576 [ 710.083794][T25303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7069'. [ 710.351488][T25307] netlink: 'syz.4.7071': attribute type 9 has an invalid length. [ 710.353948][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7071'. [ 711.107156][T22324] net_ratelimit: 34 callbacks suppressed [ 711.107181][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.160771][T25333] vxcan1 speed is unknown, defaulting to 1000 [ 711.189683][T25335] input: syz1 as /devices/virtual/input/input201 [ 711.234039][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.383420][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.501060][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.620051][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.737781][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.854408][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.971332][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.982128][T16922] usb 11-1: new low-speed USB device number 48 using dummy_hcd [ 712.035655][T16098] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 712.088960][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.168940][T16922] usb 11-1: config index 0 descriptor too short (expected 1307, got 27) [ 712.172190][T16922] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 712.175538][T16922] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 712.179020][T16922] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 712.183232][T16922] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 712.187592][T16922] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 712.191674][T16922] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 712.195707][T16098] usb 9-1: Using ep0 maxpacket: 32 [ 712.205973][T16098] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 712.206442][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.209604][T16098] usb 9-1: config 0 has no interface number 0 [ 712.213327][T16098] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 712.214151][T16922] usb 11-1: string descriptor 0 read error: -22 [ 712.216554][T16098] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 712.220792][T16922] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 712.223407][T16098] usb 9-1: config 0 interface 126 has no altsetting 0 [ 712.226864][T16922] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.232803][T16922] usb 11-1: config 0 descriptor?? [ 712.240391][T16098] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 712.243474][T25359] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 712.244030][T16098] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.250046][T16922] hub 11-1:0.0: bad descriptor, ignoring hub [ 712.252040][T16098] usb 9-1: Product: syz [ 712.255001][T16922] hub 11-1:0.0: probe with driver hub failed with error -5 [ 712.255012][T16098] usb 9-1: Manufacturer: syz [ 712.255029][T16098] usb 9-1: SerialNumber: syz [ 712.261796][T16922] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input202 [ 712.265460][T16098] usb 9-1: config 0 descriptor?? [ 712.270165][T25361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 712.273815][T25361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 712.578356][T25361] FAULT_INJECTION: forcing a failure. [ 712.578356][T25361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 712.582577][T25361] CPU: 0 UID: 0 PID: 25361 Comm: syz.4.7095 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 712.582591][T25361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 712.582598][T25361] Call Trace: [ 712.582602][T25361] [ 712.582606][T25361] dump_stack_lvl+0x16c/0x1f0 [ 712.582625][T25361] should_fail_ex+0x512/0x640 [ 712.582640][T25361] should_fail_alloc_page+0xe7/0x130 [ 712.582657][T25361] prepare_alloc_pages+0x3c2/0x610 [ 712.582667][T25361] ? rcu_is_watching+0x12/0xc0 [ 712.582683][T25361] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 712.582699][T25361] ? rcu_is_watching+0x12/0xc0 [ 712.582711][T25361] ? trace_mm_page_alloc+0x11f/0x1a0 [ 712.582721][T25361] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 712.582737][T25361] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 712.582752][T25361] ? is_bpf_text_address+0x8a/0x1a0 [ 712.582765][T25361] ? bpf_ksym_find+0x127/0x1c0 [ 712.582780][T25361] ? is_bpf_text_address+0x94/0x1a0 [ 712.582793][T25361] ? __kernel_text_address+0xd/0x40 [ 712.582805][T25361] ? unwind_get_return_address+0x59/0xa0 [ 712.582827][T25361] alloc_pages_bulk_noprof+0x71c/0x1410 [ 712.582840][T25361] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.582854][T25361] ? policy_nodemask+0xea/0x4e0 [ 712.582870][T25361] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 712.582885][T25361] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 712.582906][T25361] kasan_populate_vmalloc+0xf1/0x1f0 [ 712.582921][T25361] alloc_vmap_area+0x959/0x29c0 [ 712.582944][T25361] ? __pfx_alloc_vmap_area+0x10/0x10 [ 712.582964][T25361] __get_vm_area_node+0x1ca/0x330 [ 712.582977][T25361] __vmalloc_node_range_noprof+0x271/0x14b0 [ 712.582989][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.582999][T25361] ? local_lock_release+0x99/0x140 [ 712.583019][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.583029][T25361] ? rcu_read_unlock+0x17/0x60 [ 712.583046][T25361] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.583057][T25361] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 712.583078][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.583087][T25361] __vmalloc_node_noprof+0xad/0xf0 [ 712.583098][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.583109][T25361] copy_process+0x2c70/0x76a0 [ 712.583129][T25361] ? __pfx_copy_process+0x10/0x10 [ 712.583144][T25361] ? lockdep_init_map_type+0x5c/0x280 [ 712.583163][T25361] ? lockdep_init_map_type+0x5c/0x280 [ 712.583180][T25361] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 712.583195][T25361] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 712.583213][T25361] vhost_task_create+0x1d2/0x2e0 [ 712.583223][T25361] ? __pfx_vhost_task_create+0x10/0x10 [ 712.583237][T25361] ? __pfx_vhost_task_fn+0x10/0x10 [ 712.583253][T25361] kvm_mmu_post_init_vm+0x1b7/0x370 [ 712.583267][T25361] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 712.583280][T25361] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 712.583300][T25361] kvm_vcpu_ioctl+0x5eb/0x1690 [ 712.583313][T25361] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 712.583329][T25361] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 712.583346][T25361] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 712.583365][T25361] ? hook_file_ioctl_common+0x145/0x410 [ 712.583385][T25361] ? selinux_file_ioctl+0x180/0x270 [ 712.583398][T25361] ? selinux_file_ioctl+0xb4/0x270 [ 712.583413][T25361] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 712.583426][T25361] __x64_sys_ioctl+0x18b/0x210 [ 712.583439][T25361] do_syscall_64+0xcd/0x4c0 [ 712.583455][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.583466][T25361] RIP: 0033:0x7f404d98e929 [ 712.583475][T25361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.583485][T25361] RSP: 002b:00007f404e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.583497][T25361] RAX: ffffffffffffffda RBX: 00007f404dbb5fa0 RCX: 00007f404d98e929 [ 712.583504][T25361] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 712.583510][T25361] RBP: 00007f404e851090 R08: 0000000000000000 R09: 0000000000000000 [ 712.583516][T25361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.583522][T25361] R13: 0000000000000000 R14: 00007f404dbb5fa0 R15: 00007ffc46f9ce88 [ 712.583535][T25361] [ 712.583931][T25361] warn_alloc: 1 callbacks suppressed [ 712.583938][T25361] syz.4.7095: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 712.737445][T25361] CPU: 0 UID: 0 PID: 25361 Comm: syz.4.7095 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 712.737462][T25361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 712.737469][T25361] Call Trace: [ 712.737475][T25361] [ 712.737481][T25361] dump_stack_lvl+0x16c/0x1f0 [ 712.737504][T25361] warn_alloc+0x248/0x3a0 [ 712.737524][T25361] ? __pfx_warn_alloc+0x10/0x10 [ 712.737538][T25361] ? kfree+0x2b4/0x4d0 [ 712.737552][T25361] ? __get_vm_area_node+0x208/0x330 [ 712.737566][T25361] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 712.737578][T25361] ? local_lock_release+0x99/0x140 [ 712.737599][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.737609][T25361] ? rcu_read_unlock+0x17/0x60 [ 712.737627][T25361] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.737638][T25361] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 712.737659][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.737668][T25361] __vmalloc_node_noprof+0xad/0xf0 [ 712.737680][T25361] ? vhost_task_create+0x1d2/0x2e0 [ 712.737691][T25361] copy_process+0x2c70/0x76a0 [ 712.737712][T25361] ? __pfx_copy_process+0x10/0x10 [ 712.737727][T25361] ? lockdep_init_map_type+0x5c/0x280 [ 712.737745][T25361] ? lockdep_init_map_type+0x5c/0x280 [ 712.737762][T25361] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 712.737778][T25361] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 712.737796][T25361] vhost_task_create+0x1d2/0x2e0 [ 712.737806][T25361] ? __pfx_vhost_task_create+0x10/0x10 [ 712.737820][T25361] ? __pfx_vhost_task_fn+0x10/0x10 [ 712.737836][T25361] kvm_mmu_post_init_vm+0x1b7/0x370 [ 712.737851][T25361] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 712.737864][T25361] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 712.737879][T25361] kvm_vcpu_ioctl+0x5eb/0x1690 [ 712.737893][T25361] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 712.737909][T25361] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 712.737927][T25361] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 712.737946][T25361] ? hook_file_ioctl_common+0x145/0x410 [ 712.737966][T25361] ? selinux_file_ioctl+0x180/0x270 [ 712.737979][T25361] ? selinux_file_ioctl+0xb4/0x270 [ 712.737994][T25361] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 712.738007][T25361] __x64_sys_ioctl+0x18b/0x210 [ 712.738020][T25361] do_syscall_64+0xcd/0x4c0 [ 712.738037][T25361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.738047][T25361] RIP: 0033:0x7f404d98e929 [ 712.738057][T25361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.738067][T25361] RSP: 002b:00007f404e851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.738078][T25361] RAX: ffffffffffffffda RBX: 00007f404dbb5fa0 RCX: 00007f404d98e929 [ 712.738085][T25361] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 712.738091][T25361] RBP: 00007f404e851090 R08: 0000000000000000 R09: 0000000000000000 [ 712.738098][T25361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.738104][T25361] R13: 0000000000000000 R14: 00007f404dbb5fa0 R15: 00007ffc46f9ce88 [ 712.738117][T25361] [ 712.738121][T25361] Mem-Info: [ 712.843835][T25361] active_anon:12289 inactive_anon:17552 isolated_anon:0 [ 712.843835][T25361] active_file:10582 inactive_file:10304 isolated_file:0 [ 712.843835][T25361] unevictable:1768 dirty:69 writeback:0 [ 712.843835][T25361] slab_reclaimable:7622 slab_unreclaimable:91967 [ 712.843835][T25361] mapped:41537 shmem:23563 pagetables:1613 [ 712.843835][T25361] sec_pagetables:320 bounce:0 [ 712.843835][T25361] kernel_misc_reclaimable:0 [ 712.843835][T25361] free:415640 free_pcp:8765 free_cma:0 [ 712.859103][T25361] Node 0 active_anon:48912kB inactive_anon:70208kB active_file:40344kB inactive_file:41072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:166108kB dirty:272kB writeback:0kB shmem:90716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15120kB pagetables:6172kB sec_pagetables:1280kB all_unreclaimable? no Balloon:0kB [ 712.872336][T25361] Node 1 active_anon:244kB inactive_anon:0kB active_file:1984kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 712.882235][T25361] Node 0 DMA free:5300kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:304kB local_pcp:152kB free_cma:0kB [ 712.891260][T25361] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 712.893089][T25361] Node 0 DMA32 free:52548kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48876kB inactive_anon:70208kB active_file:40344kB inactive_file:41060kB unevictable:3536kB writepending:272kB present:2080628kB managed:1264732kB mlocked:0kB bounce:0kB free_pcp:19300kB local_pcp:3752kB free_cma:0kB [ 712.903395][T25361] lowmem_reserve[]: 0 0 0 0 0 [ 712.905037][T25361] Node 1 Normal free:1604712kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244kB inactive_anon:0kB active_file:1984kB inactive_file:144kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:15648kB local_pcp:7880kB free_cma:0kB [ 712.914820][T25361] lowmem_reserve[]: 0 0 0 0 0 [ 712.916364][T25361] Node 0 DMA: 1*4kB (U) 2*8kB (UM) 0*16kB 3*32kB (UM) 5*64kB (UM) 2*128kB (M) 4*256kB (UM) 1*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 5300kB [ 712.921127][T25361] Node 0 DMA32: 630*4kB (UME) 378*8kB (UME) 235*16kB (UME) 311*32kB (UME) 76*64kB (UME) 36*128kB (UM) 29*256kB (UM) 20*512kB (M) 6*1024kB (UM) 0*2048kB 0*4096kB = 52536kB [ 712.926749][T25361] Node 1 Normal: 39*4kB (UME) 68*8kB (UME) 69*16kB (UME) 133*32kB (UME) 129*64kB (UME) 65*128kB (UME) 36*256kB (UME) 34*512kB (UM) 17*1024kB (UME) 5*2048kB (UM) 373*4096kB (UM) = 1604716kB [ 712.932575][T25361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.935600][T25361] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.938495][T25361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.941465][T25361] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.944569][T25361] 44451 total pagecache pages [ 712.946289][T25361] 25 pages in swap cache [ 712.947688][T25361] Free swap = 123660kB [ 712.949029][T25361] Total swap = 124996kB [ 712.950401][T25361] 1048443 pages RAM [ 712.951661][T25361] 0 pages HighMem/MovableOnly [ 712.953309][T25361] 282931 pages reserved [ 712.954724][T25361] 0 pages cma reserved [ 713.082715][T16098] ir_usb 9-1:0.126: IR Dongle converter detected [ 713.085192][T16098] usb 9-1: IRDA class descriptor not found, device not bound [ 713.089729][T16098] usb 9-1: USB disconnect, device number 104 [ 714.380182][ T40] kauditd_printk_skb: 648 callbacks suppressed [ 714.380194][ T40] audit: type=1400 audit(2000000331.811:84468): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 714.391068][ T40] audit: type=1400 audit(2000000331.811:84469): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 714.401277][ T40] audit: type=1400 audit(2000000331.811:84470): avc: denied { read write } for pid=20327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 714.410301][ T40] audit: type=1400 audit(2000000331.811:84471): avc: denied { read write open } for pid=20327 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 714.418465][ T40] audit: type=1400 audit(2000000331.811:84472): avc: denied { ioctl } for pid=20327 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 714.429373][ T40] audit: type=1400 audit(2000000331.848:84473): avc: denied { read write } for pid=25377 comm="syz.4.7098" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 714.440830][ T40] audit: type=1400 audit(2000000331.848:84474): avc: denied { read write open } for pid=25377 comm="syz.4.7098" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 714.455019][ T40] audit: type=1400 audit(2000000331.848:84475): avc: denied { ioctl } for pid=25377 comm="syz.4.7098" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 714.466601][ T40] audit: type=1400 audit(2000000331.876:84476): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 714.475795][ T40] audit: type=1400 audit(2000000331.876:84477): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 714.928132][ T8005] usb 11-1: USB disconnect, device number 48 [ 715.206970][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7101'. [ 715.210707][T25385] openvswitch: : Dropping previously announced user features [ 715.863051][T25411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25411 comm=syz.6.7111 [ 716.240392][T25427] FAULT_INJECTION: forcing a failure. [ 716.240392][T25427] name failslab, interval 1, probability 0, space 0, times 0 [ 716.244692][T25427] CPU: 2 UID: 0 PID: 25427 Comm: syz.6.7117 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 716.244707][T25427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 716.244714][T25427] Call Trace: [ 716.244718][T25427] [ 716.244723][T25427] dump_stack_lvl+0x16c/0x1f0 [ 716.244742][T25427] should_fail_ex+0x512/0x640 [ 716.244758][T25427] should_failslab+0xc2/0x120 [ 716.244775][T25427] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 716.244789][T25427] ? skb_clone+0x190/0x3f0 [ 716.244806][T25427] skb_clone+0x190/0x3f0 [ 716.244821][T25427] bpf_clone_redirect+0xb2/0x3f0 [ 716.244841][T25427] bpf_prog_c08ef512837047f4+0x62/0x6b [ 716.244851][T25427] ? __kernel_text_address+0xd/0x40 [ 716.244862][T25427] ? unwind_get_return_address+0x59/0xa0 [ 716.244879][T25427] ? arch_stack_walk+0xa6/0x100 [ 716.244891][T25427] ? __lock_acquire+0xb8a/0x1c90 [ 716.244908][T25427] ? __lock_acquire+0x622/0x1c90 [ 716.244927][T25427] ? find_held_lock+0x2b/0x80 [ 716.244941][T25427] ? ktime_get+0x200/0x310 [ 716.244956][T25427] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.244972][T25427] ? __pfx___cant_migrate+0x10/0x10 [ 716.244986][T25427] ? bpf_test_timer_continue+0x150/0x3c0 [ 716.245004][T25427] bpf_test_run+0x48c/0xa70 [ 716.245022][T25427] ? __pfx_bpf_test_run+0x10/0x10 [ 716.245073][T25427] ? __asan_memset+0x23/0x50 [ 716.245088][T25427] bpf_prog_test_run_skb+0xb92/0x2280 [ 716.245103][T25427] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 716.245115][T25427] ? fput+0x70/0xf0 [ 716.245132][T25427] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 716.245143][T25427] __sys_bpf+0x1488/0x4d80 [ 716.245160][T25427] ? __pfx___sys_bpf+0x10/0x10 [ 716.245174][T25427] ? ksys_write+0x190/0x250 [ 716.245189][T25427] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 716.245212][T25427] ? fput+0x70/0xf0 [ 716.245227][T25427] ? ksys_write+0x1ac/0x250 [ 716.245240][T25427] ? __pfx_ksys_write+0x10/0x10 [ 716.245255][T25427] __x64_sys_bpf+0x78/0xc0 [ 716.245275][T25427] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.245289][T25427] do_syscall_64+0xcd/0x4c0 [ 716.245306][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.245317][T25427] RIP: 0033:0x7f4951b8e929 [ 716.245326][T25427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.245336][T25427] RSP: 002b:00007f4952989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.245348][T25427] RAX: ffffffffffffffda RBX: 00007f4951db5fa0 RCX: 00007f4951b8e929 [ 716.245354][T25427] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 716.245361][T25427] RBP: 00007f4952989090 R08: 0000000000000000 R09: 0000000000000000 [ 716.245367][T25427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.245373][T25427] R13: 0000000000000000 R14: 00007f4951db5fa0 R15: 00007fff63a906c8 [ 716.245385][T25427] [ 716.357662][T25431] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 716.367131][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.367131][T25431] [ 716.370458][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.374320][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.374320][T25431] [ 716.377549][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.381670][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.381670][T25431] [ 716.396931][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.401984][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.401984][T25431] [ 716.404959][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.408871][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.408871][T25431] [ 716.412550][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.417983][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.417983][T25431] [ 716.424198][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.428013][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.428013][T25431] [ 716.434128][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.438295][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.438295][T25431] [ 716.443547][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.449629][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.449629][T25431] [ 716.454054][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.458717][T25435] netlink: 'syz.6.7119': attribute type 1 has an invalid length. [ 716.461612][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.461612][T25431] [ 716.461617][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7119'. [ 716.461673][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7119'. [ 716.464712][T25431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.466141][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.466141][T25431] [ 716.480929][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.480929][T25431] [ 716.485546][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.485546][T25431] [ 716.490156][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.490156][T25431] [ 716.495813][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.495813][T25431] [ 716.500249][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.500249][T25431] [ 716.504509][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.504509][T25431] [ 716.508808][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.508808][T25431] [ 716.513072][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.513072][T25431] [ 716.518552][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.518552][T25431] [ 716.523452][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.523452][T25431] [ 716.529080][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.529080][T25431] [ 716.533441][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.533441][T25431] [ 716.537675][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.537675][T25431] [ 716.541922][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.541922][T25431] [ 716.545902][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.545902][T25431] [ 716.550034][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.550034][T25431] [ 716.554159][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.554159][T25431] [ 716.557558][T22304] net_ratelimit: 35 callbacks suppressed [ 716.557568][T22304] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.558682][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.558682][T25431] [ 716.565866][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.565866][T25431] [ 716.570562][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.570562][T25431] [ 716.575291][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.575291][T25431] [ 716.580646][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.580646][T25431] [ 716.585579][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.585579][T25431] [ 716.590009][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.590009][T25431] [ 716.594434][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.594434][T25431] [ 716.598646][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.598646][T25431] [ 716.602990][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.602990][T25431] [ 716.607182][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.607182][T25431] [ 716.611372][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.611372][T25431] [ 716.617134][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.617134][T25431] [ 716.621349][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.621349][T25431] [ 716.625639][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.625639][T25431] [ 716.630340][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.630340][T25431] [ 716.634787][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.634787][T25431] [ 716.638993][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.638993][T25431] [ 716.643088][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.643088][T25431] [ 716.647890][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.647890][T25431] [ 716.652786][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.652786][T25431] [ 716.657067][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.657067][T25431] [ 716.662708][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.662708][T25431] [ 716.668943][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.668943][T25431] [ 716.675253][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.681559][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.681559][T25431] [ 716.687729][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.687729][T25431] [ 716.692272][T25438] netlink: 'syz.6.7120': attribute type 1 has an invalid length. [ 716.692970][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.692970][T25431] [ 716.694657][T25438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7120'. [ 716.701225][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.701225][T25431] [ 716.701931][T25438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7120'. [ 716.707349][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.707349][T25431] [ 716.713422][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.713422][T25431] [ 716.717684][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.717684][T25431] [ 716.721794][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.721794][T25431] [ 716.725931][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.725931][T25431] [ 716.730169][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.730169][T25431] [ 716.734232][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.734232][T25431] [ 716.738318][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.738318][T25431] [ 716.743515][T25431] CIFS mount error: No usable UNC path provided in device string! [ 716.743515][T25431] [ 716.792875][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.910630][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.937000][T25444] input: syz1 as /devices/virtual/input/input203 [ 717.027637][T22318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.145371][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.710613][T25456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7128'. [ 717.714456][T25456] openvswitch: : Dropping previously announced user features [ 717.722778][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.840066][T22332] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.928691][T25463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 717.933680][T25463] bond0: (slave bond3): Enslaving as an active interface with an up link [ 717.959009][T22331] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.980376][T25466] SELinux: policydb magic number 0x7379732f does not match expected magic number 0xf97cff8c [ 717.983600][T25466] SELinux: failed to load policy [ 718.085856][T22324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.095314][T25470] input: syz1 as /devices/virtual/input/input204 [ 718.193130][T25475] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7136'. [ 718.443975][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7139'. [ 718.448025][T25482] openvswitch: : Dropping previously announced user features [ 718.743702][T25490] sock: sock_timestamping_bind_phc: sock not bind to device [ 718.791566][ T5997] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 718.962704][ T5997] usb 9-1: Using ep0 maxpacket: 16 [ 718.971814][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.977275][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.980297][ T5997] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 718.985364][ T5997] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 718.999101][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.006435][ T5997] usb 9-1: config 0 descriptor?? [ 719.459344][ T5997] shield 0003:0955:7214.007B: unknown main item tag 0x0 [ 719.461650][ T5997] shield 0003:0955:7214.007B: unknown main item tag 0x0 [ 719.463813][ T5997] shield 0003:0955:7214.007B: unknown main item tag 0x0 [ 719.466556][ T5997] shield 0003:0955:7214.007B: unknown main item tag 0x0 [ 719.468732][ T5997] shield 0003:0955:7214.007B: unknown main item tag 0x0 [ 719.475682][ T5997] input: HID 0955:7214 Haptics as /devices/virtual/input/input206 [ 719.492319][ T5997] shield 0003:0955:7214.007B: Registered Thunderstrike controller [ 719.495172][ T5997] shield 0003:0955:7214.007B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 719.675844][T25486] netlink: 'syz.4.7141': attribute type 2 has an invalid length. [ 719.678285][T25486] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7141'. [ 719.682811][ T5997] shield 0003:0955:7214.007B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 719.683050][ T54] usb 9-1: USB disconnect, device number 105 [ 719.686212][ T5997] shield 0003:0955:7214.007B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.696859][ T5997] shield 0003:0955:7214.007B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.700559][ T5997] shield 0003:0955:7214.007B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.737128][ T40] kauditd_printk_skb: 1987 callbacks suppressed [ 719.737140][ T40] audit: type=1400 audit(2000000336.825:86465): avc: denied { recv } for pid=5908 comm="syz-executor" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 719.747276][ T40] audit: type=1400 audit(2000000336.825:86466): avc: denied { read write } for pid=19705 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 719.755812][ T40] audit: type=1400 audit(2000000336.825:86467): avc: denied { read write open } for pid=19705 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 719.763810][ T40] audit: type=1400 audit(2000000336.825:86468): avc: denied { ioctl } for pid=19705 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 719.773816][ T40] audit: type=1400 audit(2000000336.834:86469): avc: denied { recv } for pid=19705 comm="syz-executor" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 719.792327][ T40] audit: type=1400 audit(2000000336.872:86470): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 719.799720][T25505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 719.800252][ T40] audit: type=1400 audit(2000000336.872:86471): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=54924 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 719.803167][T25505] openvswitch: : Dropping previously announced user features [ 719.810810][ T40] audit: type=1400 audit(2000000336.872:86472): avc: denied { recv } for pid=5906 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54924 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 719.821203][ T40] audit: type=1400 audit(2000000336.872:86473): avc: denied { create } for pid=25504 comm="syz.6.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 719.827295][ T40] audit: type=1400 audit(2000000336.872:86474): avc: denied { recv } for pid=25504 comm="syz.6.7148" saddr=10.0.2.2 src=47530 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 720.587310][ T5984] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 720.747697][ T5984] usb 9-1: Using ep0 maxpacket: 32 [ 720.756573][ T5984] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 720.760604][ T5984] usb 9-1: config 0 has no interface number 0 [ 720.762916][ T5984] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 720.766356][ T5984] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 720.770133][ T5984] usb 9-1: config 0 interface 126 has no altsetting 0 [ 720.784312][ T5984] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 720.787782][ T5984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.792198][ T5984] usb 9-1: Product: syz [ 720.793684][ T5984] usb 9-1: Manufacturer: syz [ 720.795352][ T5984] usb 9-1: SerialNumber: syz [ 720.800787][ T5984] usb 9-1: config 0 descriptor?? [ 720.807685][T25516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 720.811466][T25516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 721.456536][ T5292] Bluetooth: hci5: hardware error 0x00 [ 721.456771][T25109] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 721.460661][T25109] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 721.483856][T16922] ================================================================== [ 721.486424][T16922] BUG: KASAN: slab-use-after-free in __mutex_lock+0xa65/0xb90 [ 721.488751][T16922] Read of size 8 at addr ffff88803b111320 by task kworker/0:5/16922 [ 721.492208][T16922] [ 721.493772][T16922] CPU: 0 UID: 0 PID: 16922 Comm: kworker/0:5 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 721.493790][T16922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 721.493800][T16922] Workqueue: events l2cap_chan_timeout [ 721.493823][T16922] Call Trace: [ 721.493829][T16922] [ 721.493834][T16922] dump_stack_lvl+0x116/0x1f0 [ 721.493854][T16922] print_report+0xcd/0x680 [ 721.493872][T16922] ? __virt_addr_valid+0x81/0x610 [ 721.493887][T16922] ? __phys_addr+0xe8/0x180 [ 721.493901][T16922] ? __mutex_lock+0xa65/0xb90 [ 721.493919][T16922] kasan_report+0xe0/0x110 [ 721.493937][T16922] ? __mutex_lock+0xa65/0xb90 [ 721.493957][T16922] __mutex_lock+0xa65/0xb90 [ 721.493974][T16922] ? add_lock_to_list+0x9d/0x130 [ 721.493994][T16922] ? l2cap_chan_timeout+0x6d/0x310 [ 721.494018][T16922] ? __pfx___mutex_lock+0x10/0x10 [ 721.494035][T16922] ? debug_object_deactivate+0x1ec/0x3a0 [ 721.494064][T16922] ? l2cap_chan_timeout+0x6d/0x310 [ 721.494078][T16922] l2cap_chan_timeout+0x6d/0x310 [ 721.494093][T16922] process_one_work+0x9cc/0x1b70 [ 721.494106][T16922] ? __pfx_process_one_work+0x10/0x10 [ 721.494118][T16922] ? assign_work+0x1a0/0x250 [ 721.494135][T16922] worker_thread+0x6c8/0xf10 [ 721.494147][T16922] ? __kthread_parkme+0x19e/0x250 [ 721.494161][T16922] ? __pfx_worker_thread+0x10/0x10 [ 721.494172][T16922] kthread+0x3c2/0x780 [ 721.494181][T16922] ? __pfx_kthread+0x10/0x10 [ 721.494190][T16922] ? rcu_is_watching+0x12/0xc0 [ 721.494203][T16922] ? __pfx_kthread+0x10/0x10 [ 721.494212][T16922] ret_from_fork+0x5d4/0x6f0 [ 721.494226][T16922] ? __pfx_kthread+0x10/0x10 [ 721.494240][T16922] ret_from_fork_asm+0x1a/0x30 [ 721.494254][T16922] [ 721.494258][T16922] [ 721.495314][T25516] input input207: cannot allocate more than FF_MAX_EFFECTS effects [ 721.497926][T16922] Allocated by task 24873: [ 721.497940][T16922] kasan_save_stack+0x33/0x60 [ 721.497963][T16922] kasan_save_track+0x14/0x30 [ 721.497983][T16922] __kasan_kmalloc+0xaa/0xb0 [ 721.498001][T16922] l2cap_conn_add.part.0+0x60/0xa60 [ 721.498017][T16922] l2cap_chan_connect+0x15e5/0x2020 [ 721.498036][T16922] l2cap_sock_connect+0x3b7/0x740 [ 721.498049][T16922] kernel_connect+0x104/0x180 [ 721.498072][T16922] rfcomm_dlc_open+0x821/0xaa0 [ 721.498093][T16922] rfcomm_sock_connect+0x423/0x670 [ 721.498116][T16922] __sys_connect_file+0x13e/0x1a0 [ 721.578035][T16922] __sys_connect+0x13b/0x160 [ 721.579526][T16922] __x64_sys_connect+0x72/0xb0 [ 721.581066][T16922] do_syscall_64+0xcd/0x4c0 [ 721.582530][T16922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.584400][T16922] [ 721.585204][T16922] Freed by task 5292: [ 721.586511][T16922] kasan_save_stack+0x33/0x60 [ 721.588019][T16922] kasan_save_track+0x14/0x30 [ 721.589541][T16922] kasan_save_free_info+0x3b/0x60 [ 721.591147][T16922] __kasan_slab_free+0x51/0x70 [ 721.592677][T16922] kfree+0x2b4/0x4d0 [ 721.593948][T16922] l2cap_conn_del+0x59c/0x730 [ 721.595442][T16922] l2cap_disconn_cfm+0x96/0xd0 [ 721.596976][T16922] hci_conn_hash_flush+0x10e/0x260 [ 721.598642][T16922] hci_dev_close_sync+0x602/0x11d0 [ 721.600265][T16922] hci_dev_do_close+0x2e/0x90 [ 721.601779][T16922] hci_error_reset+0xbf/0x320 [ 721.603276][T16922] process_one_work+0x9cc/0x1b70 [ 721.604892][T16922] worker_thread+0x6c8/0xf10 [ 721.606701][T16922] kthread+0x3c2/0x780 [ 721.608323][T16922] ret_from_fork+0x5d4/0x6f0 [ 721.610199][T16922] ret_from_fork_asm+0x1a/0x30 [ 721.612099][T16922] [ 721.613076][T16922] The buggy address belongs to the object at ffff88803b111000 [ 721.613076][T16922] which belongs to the cache kmalloc-1k of size 1024 [ 721.618519][T16922] The buggy address is located 800 bytes inside of [ 721.618519][T16922] freed 1024-byte region [ffff88803b111000, ffff88803b111400) [ 721.622745][T16922] [ 721.623436][T16922] The buggy address belongs to the physical page: [ 721.625347][T16922] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b113000 pfn:0x3b110 [ 721.628881][T16922] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 721.631713][T16922] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 721.634825][T16922] page_type: f5(slab) [ 721.636391][T16922] raw: 00fff00000000240 ffff88801b842dc0 ffffea00015cac10 ffffea0000b22c10 [ 721.639578][T16922] raw: ffff88803b113000 0000000000100009 00000000f5000000 0000000000000000 [ 721.642424][T16922] head: 00fff00000000240 ffff88801b842dc0 ffffea00015cac10 ffffea0000b22c10 [ 721.645106][T16922] head: ffff88803b113000 0000000000100009 00000000f5000000 0000000000000000 [ 721.647702][T16922] head: 00fff00000000003 ffffea0000ec4401 00000000ffffffff 00000000ffffffff [ 721.650422][T16922] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 721.653138][T16922] page dumped because: kasan: bad access detected [ 721.655283][T16922] page_owner tracks the page as allocated [ 721.657656][T16922] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 13, tgid 13 (kworker/u32:1), ts 562729942683, free_ts 562662801423 [ 721.664402][T16922] post_alloc_hook+0x1c0/0x230 [ 721.666105][T16922] get_page_from_freelist+0x1321/0x3890 [ 721.668014][T16922] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 721.669912][T16922] alloc_pages_mpol+0x1fb/0x550 [ 721.671481][T16922] new_slab+0x23b/0x330 [ 721.672786][T16922] ___slab_alloc+0xd9c/0x1940 [ 721.674395][T16922] __slab_alloc.constprop.0+0x56/0xb0 [ 721.676132][T16922] __kmalloc_noprof+0x2f2/0x510 [ 721.677703][T16922] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 721.679579][T16922] ieee80211_inform_bss+0x10b/0x1140 [ 721.681300][T16922] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 721.683257][T16922] cfg80211_inform_bss_data+0x224/0x3bc0 [ 721.685051][T16922] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 721.686991][T16922] ieee80211_bss_info_update+0x310/0xab0 [ 721.688783][T16922] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 721.690758][T16922] ieee80211_iface_work+0xbf4/0x1020 [ 721.692404][T16922] page last free pid 20582 tgid 20582 stack trace: [ 721.694447][T16922] __free_frozen_pages+0x7fe/0x1180 [ 721.696112][T16922] qlist_free_all+0x4d/0x120 [ 721.697599][T16922] kasan_quarantine_reduce+0x195/0x1e0 [ 721.699315][T16922] __kasan_slab_alloc+0x69/0x90 [ 721.700858][T16922] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 721.702597][T16922] mas_alloc_nodes+0x18b/0x8b0 [ 721.704122][T16922] mas_node_count_gfp+0x105/0x130 [ 721.705822][T16922] mas_preallocate+0x77b/0xda0 [ 721.707397][T16922] __split_vma+0x34a/0x1070 [ 721.708852][T16922] vms_gather_munmap_vmas+0x1c2/0x1310 [ 721.710619][T16922] __mmap_region+0x3c7/0x25e0 [ 721.712129][T16922] mmap_region+0x1ab/0x3f0 [ 721.713735][T16922] do_mmap+0xa3e/0x1210 [ 721.715151][T16922] vm_mmap_pgoff+0x281/0x450 [ 721.716684][T16922] ksys_mmap_pgoff+0x32c/0x5c0 [ 721.718241][T16922] __x64_sys_mmap+0x125/0x190 [ 721.719762][T16922] [ 721.720556][T16922] Memory state around the buggy address: [ 721.722353][T16922] ffff88803b111200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 721.724860][T16922] ffff88803b111280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 721.727398][T16922] >ffff88803b111300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 721.730122][T16922] ^ [ 721.731682][T16922] ffff88803b111380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 721.734190][T16922] ffff88803b111400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 721.736701][T16922] ================================================================== [ 721.739440][T16922] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 721.741903][T16922] CPU: 0 UID: 0 PID: 16922 Comm: kworker/0:5 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 721.745123][T16922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 721.748481][T16922] Workqueue: events l2cap_chan_timeout [ 721.750229][T16922] Call Trace: [ 721.751296][T16922] [ 721.752240][T16922] dump_stack_lvl+0x3d/0x1f0 [ 721.753735][T16922] panic+0x71c/0x800 [ 721.754983][T16922] ? __pfx_panic+0x10/0x10 [ 721.756446][T16922] ? mark_held_locks+0x49/0x80 [ 721.757977][T16922] ? __mutex_lock+0xa65/0xb90 [ 721.759474][T16922] ? check_panic_on_warn+0x1f/0xb0 [ 721.761099][T16922] ? __mutex_lock+0xa65/0xb90 [ 721.762556][T16922] check_panic_on_warn+0xab/0xb0 [ 721.764110][T16922] end_report+0x107/0x170 [ 721.765582][T16922] kasan_report+0xee/0x110 [ 721.767007][T16922] ? __mutex_lock+0xa65/0xb90 [ 721.768463][T16922] __mutex_lock+0xa65/0xb90 [ 721.769883][T16922] ? add_lock_to_list+0x9d/0x130 [ 721.771426][T16922] ? l2cap_chan_timeout+0x6d/0x310 [ 721.773018][T16922] ? __pfx___mutex_lock+0x10/0x10 [ 721.774585][T16922] ? debug_object_deactivate+0x1ec/0x3a0 [ 721.776329][T16922] ? l2cap_chan_timeout+0x6d/0x310 [ 721.777994][T16922] l2cap_chan_timeout+0x6d/0x310 [ 721.779744][T16922] process_one_work+0x9cc/0x1b70 [ 721.781380][T16922] ? __pfx_process_one_work+0x10/0x10 [ 721.783083][T16922] ? assign_work+0x1a0/0x250 [ 721.784549][T16922] worker_thread+0x6c8/0xf10 [ 721.786010][T16922] ? __kthread_parkme+0x19e/0x250 [ 721.787571][T16922] ? __pfx_worker_thread+0x10/0x10 [ 721.789156][T16922] kthread+0x3c2/0x780 [ 721.790436][T16922] ? __pfx_kthread+0x10/0x10 [ 721.791881][T16922] ? rcu_is_watching+0x12/0xc0 [ 721.793420][T16922] ? __pfx_kthread+0x10/0x10 [ 721.794882][T16922] ret_from_fork+0x5d4/0x6f0 [ 721.796343][T16922] ? __pfx_kthread+0x10/0x10 [ 721.797950][T16922] ret_from_fork_asm+0x1a/0x30 [ 721.799810][T16922] [ 721.801564][T16922] Kernel Offset: disabled [ 721.803043][T16922] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:02:39 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8a55 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc90005e9f540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6233303838386652 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b0872e0 R15=ffffffff855b89f0 RIP=ffffffff855b8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000584000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003072 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951d84488 00007f4951d84480 00007f4951d84478 00007f4951d84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49528ed100 00007f4951d84440 00007f4951d80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951d84498 00007f4951d84490 00007f4951d84488 00007f4951d84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000007c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff888029ef9070 RDX=000000000000009d RSI=ffffffff86a88a28 RDI=ffff888029ef92d0 RBP=0000000000000001 RSP=ffffc900006a0b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff888029ef9070 R15=0000000000000001 RIP=ffffffff86a88a6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555f80500 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555555f9b5c8 CR3=00000000365df000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff63a8f960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4951c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000007c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000002 RBX=ffff88806a63b500 RCX=ffffffff81b018b3 RDX=ffff88801debc880 RSI=ffffffff81b0188d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f06 R12=1ffff9200002af80 R13=0000000000000001 R14=0000000000000001 R15=ffffed100d4c76a1 RIP=ffffffff81bc1ddb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555555f80808 CR3=000000002b08c000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010003 Opmask01=0000000000000001 Opmask02=0000000006000000 Opmask03=0000000000000000 Opmask04=00000000fbffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 534e28215c51a3c5 c1465fffc19e31bd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87c245f10a45eb1b 4bdeb7248500dc73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba9cf8af7b8aef82 4186d0e678381db9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b17ff73a8fd6e54f 0ca5c9969a611df3 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000025c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5ef5aef00000001 ba00800100000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc008001b5ef85ef fe0000014a000001 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c2000001b5ef72c0 b5ef6faf00000001 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5f0624ab5fa8f90 ee008001dc008001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa32e80c3f84887b 0802e1e896db6d53 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a0ea5946dd847 eaf3bef9657e4933 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39323732382e3931 3720205b3e353c00 313d657669737369 6d72657020740000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332373232243331 3720205134353600 3137657663737363 6772657020740000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f70206e65687720 726f727245203a35 696368203a68746f 6f7465756c42205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c637420745f6465 6c6562616c6e753a 725f7463656a626f 3a755f6d65747379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020726565 703d7373616c6374 20745f64656c6562 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c6e753a725f74 63656a626f3a755f 6d65747379733d74 7865746e6f637420 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 745f646873733a72 5f6d65747379733a 755f6d6574737973 3d747865746e6f63 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7320306874653d66 6974656e2032323d 747365642035312e 322e302e30313d72 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff93dd1400 RBX=000000000007417a RCX=ffffffff93f08d60 RDX=584d207889582def RSI=00000000faff010c RDI=ffff88802a86d370 RBP=ffff88802a86c880 RSP=ffffc9002202f648 R8 =ab212a73673aaa01 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=ffff88802a86d370 R13=ffff88802a86d370 R14=0000000093946257 R15=0000000000000003 RIP=ffffffff81986314 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f404e8516c0 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f404e82ff98 CR3=0000000035f85000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f404da11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f404da11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000342e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000