last executing test programs: 2m5.467054811s ago: executing program 2 (id=3676): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup(r0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x20000000001, 0xec27fa5, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000004000003, 0xab55, 0x80000006}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_ENCRYPT_MODE={{0x5}, 0xfd}}}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.232277661s ago: executing program 2 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x94) 2m5.153250809s ago: executing program 2 (id=3683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000440)={0x50, &(0x7f0000000540)="ba6ed74980c847b67ec7228051b682ac632417b9e8eae70397fc6e9a8e73d25c5b6b844fd7515a44d32ea3680e3c2232527b2dc97da7bdc81f723d400f9af9ab5d525a1a17b1a556f82a00279dec7738"}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[r7], &(0x7f0000000040), 0x0, 0x300}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100ffffffff030000801200000008000300", @ANYRES32=r13, @ANYBLOB="0500e4cd0100000004008100"], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x88, r11, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c800}, 0x880) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m4.283374872s ago: executing program 2 (id=3690): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) setuid(0xee01) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x6580a421, 0xa69, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}}, 0x50) 2m4.229177822s ago: executing program 2 (id=3693): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000009c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}, 0x20040010) r1 = socket$inet(0x10, 0x3, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x15, 0x9, 0x171, &(0x7f0000000340)="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"}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_PORT_SELF={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xe}]}, 0x54}}, 0x0) 2m4.000622292s ago: executing program 2 (id=3697): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000100001ff00000000000000a2a049075b26dce400050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, 0x0}, 0x0) 1m48.122296442s ago: executing program 32 (id=3697): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000100001ff00000000000000a2a049075b26dce400050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, 0x0}, 0x0) 1m28.176284084s ago: executing program 4 (id=3955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000018000040"]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0xfc, 0x0, @SEQ_CONTROLLER=0xff, 0x0, 0x0, 0x1}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$sock_netdev_private(r5, 0x8948, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e000709fefffffffcffffff01fc0000040042801c000180100004800c000f00900000000000000006000600bd0a0000040002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000010000000000e7009500ee0000000000f49be0f5974ec105ce5b211a984c63d0c5b84e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r9, 0x0, 0x0}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r8, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a31000000001400038008000140000000000800e901000b000000000000010000000900020073797a31000000000900010073797a30000000000c00038008006ada0afcf9828bca00024000000000140000001000010000000000000000000000000a00000000000000000000000000000000000000000000000000000000f8b76b"], 0xc0}}, 0x0) 1m28.052969238s ago: executing program 4 (id=3957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009c00aecb0000000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x9, &(0x7f0000ffd000/0x1000)=nil, 0x3) 1m28.052655702s ago: executing program 4 (id=3959): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @empty}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="81c81b9a7c56271506e47a7ba4d3ffd35c67618cf50c18d261057edfe333b366e3a6116b3a4e4ec6ae8a048c39a9dfbfacb72bf4652aa87a", 0x38}, {&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb", 0x1d}, {&(0x7f0000000500)="575ea382b9a16bc9825441aaf07ef1c0428f4b7b69ddf489403dd2a1eba568986ae9bb", 0x23}, {&(0x7f0000002280)="42fcd9fe19201ddf64559806cd323da67fe16faa009a56eed81e2e6cb52e913555dbab9388fb8bdd350f69bd31da9567d4eb6e7a8c464f8ea174254ede34582a13f1b4943912b54fd7ad67a9c57c47b00fe8ffb2258378f07aebee33d58fc8eee41ac822ec1bbee3fb2dc04b17cef57e1290c5ce76de3e9bae20f5ae66065e09d43f7f5acb6fcf9ba8ccaaae0dc90516d8b2a43e5e75fe291370258b1d366564f6d122f88d627bffd3ddf230fb4ff6ee313d18969c86936179ad2bc3cec62e21671d13b2f5d67e64c576165938c1ee47474b4d2460637b83585892fe59bb947d4a05f122313e0491a58b3fecaa6824f9a2149f7d309ac85ada754d2857c72f401ff64087be5c99007491d3f601aaea46dcd654f3a7b6b1de40f55034becce1577649b3b734d6114ab5367ac67bdb36b71fa0242a6f0d33c4df6f1b5194c59046afd31dc9baf22d6c3aed2f22ba8a049b31b03ada64583246615e722d4c26b6f56f054f00079a23c663c127b8923c5cc1ec30c8297595199702a445b39c999710198fe6ece47dc3b81753f3f582c26dc096ca4b982d2d754e7a8bff5d15f07017821201f3050d0003b54d19054acaee91585cfccb739510ca10c48e9f04fbdc6160177846ce3749ab387b021c254d3e55beb71d471fcc6048a8fb9475924ae8374e019c89413a297b958102ccb9bf90144fea41f81a5005dd9708e39e902d22c5646c96f4beda8b474b9ab8dd73d2310d35a9377d5a60483e690cfbbdb2120ac743cc3a95824b6c99610658e7148fbd0725b6f40e0df9c8faec14d2d745e37ed39ba223e691cca52a0bb1c39503f267a110b830a8cc14cc56cfbd9d4e49a67246980baf54fb8237969cf9643f5f8acc36d7deaf4f9a5d89fce4922edde62471b29d97c4512500734ea76b61778d31006bfc870a7332330b652d3ca1d229daed80b14a5e85abe27c4dfce234c5da5ca17fff82c426777dfd7beea380ee9413b8d2ab217ee8e631790cf8d110a66ef97aeff125e5ef250dd2f7cc2d2a6922845712953d12e9b7ee68081553aaa13e9761c0e9f33ffbff40633cebba0d20031e2487e572e3ce5b954fd8bb8a38deee871c53037d02337a523c04f4775e87a3a2f4982a485b2c54d9c50db58065347ea05a521291f09af8fecec5f2f304b2a2a90c070d16d8254d128b6e862b017d406add20e73a1f53815a26809f59da1a5c323386975140ee05661541e7a3b39ff833ec4e1cedfe560bac61788cec2e220b40e2427f8b95e326aba73f325f59aab91ddb9152c1c1345e58c552bdc2bdf53c1e78af3e1a51c56560a046535c5f5c5c2d761e31ec24c3dedd29deac6f0f81eb905210844f82cbc19a44613c165b132bf1d4a403744bf47e00c87bb03d84ac3f0509947fd711ca6ce8c6ea4abf23ac2b9044eddce1d63f162c3de29414b0bf92aeafe3d3eae645080044198a05c058eaf1af7ce3e13e56636c5f609c4a2a3ddacae87c6a7bc3d16ac3fe7480f79483d4e2f8b250478f7bf9b4216d0849f6f87f66d8a853af1a32d521796447f5bfbe7233bd5cf24e0ff27652ef23766aca92aa632f428c7e2ede2e0ca2721b58364eed8e3f682fcece9a4f4da47f4de36166b203fa2f1b568281a17746c27ee5d443b2c94807f87499a2ddeea6945304379f8d37f0773375a853000482d1048158c0e8a3bf89686fc21dd932b77003f0aaa802cf730f2ae04120451674c5d811ae6f0bb8c629ee349f1d294a9729f46bf442379ca3723cc8c570f5f14e6fe711b512de3f71061c894a44fe784ef327ec914c871911f6373b67812293793ac5c9da8b1c332eaf6598115dc3057b33bd0af4546ba3c45b9d62ca2587dc785831adf0983655b9d9a1506be8de3dbbcaa2aa60b6072bf48df06231466961bd36c1b2ea3590e027c19b93aa1a73395e651f5415c3dd96baa2cfd51d6a87c52babadaf49b819c6b632bf8fb1a9306a1197ea79dfdaf0e1266ab18bfb2373145b5affb318df060c550dc10bf17b7f703c39b5839776ecbfd0561ed099e6b5685d2dc0558277096a58d7b153c929ae2784222ade9bb4f21b2a57daa85dc883ee739f13b78fa3dcee1e90fc28364ccca68f00b20634bab0edfa46b48418c5c9d18aca894d15ad5f132ef533fdfc24c8bb440b32a406f23057efb0206d4eb0a59ebfa24f8649ee7afd3842e25cfe455f4b7125a9d44ac61c6e44b3ffe864d2f80767b84a191e1f454047c8cfe956482550582996b659309e40e938b1b31bd7d1a5270689c5568c474b19d16fc6a24773a744514b71727de33fc3fbac82d8b21ab753e96bdfac00b48d139d840d2b80d7e726c7f5d8ec2382014321ae83611c6c2edf928e7efcb4bce99377b24106f4d7958164a3f6ab9746deb4a9bcdb3ec79df9d4832e75410aa9a91cc2a52dc20f39a48bd3988ae72cda39ace456e031f83650999f7b612c884332845a25a943ac15286dc183741d42a6d71e39e77faad8c413680ee6864ae683f9f5f3ba4e26f5b46f65decfc0eca3e4508a616bdb51fc284b8c488c8a64ef96f0e0581fe28a27e35c0fc392fa2e4cbdee0d6222237c435cd4114a365743567ee29733e79e058d1d90315b233e5c56bce9b2849095594b3973c0403a4bc8386f0f4605c1fbf71a5020984ef31b12dea55842500dd648c4daece10a1a26fd8eb012ee2993bddf9bb896ea10f45f3318a379e8b1ff4e33b35d4f405775e67123793cdbe472196b405a27f8813cee3504dfb17684d9e387705694cc42178e2b3b776ea0503c67f6b100fc5ef3d844381fa0634cec98c2984ad564503982e14200f3916c6c740889616247e783185a3b1d6a699c35e620ccb7c170826d759b54244efce5df45d8fa2948014c1e917dfd36a5534f13c35435db5d119d25335138f60d3c283cb43504ff23ad6eb727283f570ac047ba017daa0e1657fc227b229d0b3adb7e0a8a597049e9ebd5c3516a11f34478294cb7ff64ce5ea75bbaa839ebbb6aeadee6828db922067d7ff2e5413df98f5fbf667310ac9cb90fc2e8d43c098cdbdd9b24ad0b1ca7104c128ade65ec19fcf5c5ed11f790d8a31f4f342a127e7959eb41b89a56965803b678d60dce160f6362748c978ef13de5812e8246937b7c50f883e54a7b2afb189be617b4890b0f7b3b694dd21519106953e5c9d28544edacb301d1fac4436f32fb2c45116f05c50236b31aefd524f59041d97601150ef806fde14e76ed15a44c42d5256321329b0303a5a2bb839f98231d857b94d387a7e0c216f44186646e80e9e535b01a7e132fba217e1ce52d3b4fbd4de91953b1838a8e1b6c64442ac03683188097986444e2591465893531345c52f9bb499b5195ec396ce49adef4193ec3852a7b95dcd00bf44c4ac1d389e26d93c60c7d4930d3e96fb7df49fd3790f9c8d254e20388c77ae93fbd48294f787b219748e222bc6afc9428ad8c1785ad68d57a727286693b620c6fd24df3a1d0cbc3f6b321d607851faa6836888fa8415d7dd0219d597120d5924990bc924005e7faa5013db217bc216a64fd0bb2b0d2a75364d929069de8669464011f2d77a0bf7253a12b82927e01dd1b26345a167e1d89c31664361aeea97d81ba32fe5e6c391885ecb48e5daa09a453e109b135a09481105dc0cdf2280a2daeafb7dad13ad2d1226816f21b71a49b279686a5478f833741654354711bed27c3028d30fceb31b9f18d1becbdb340c738593e845e7a36a9718b3847d2f7e93c4d3038d0ba522bdbe9b97cb38bea0c3331017fc6d2ad90db4aed34bda13a94312ab85cf40c4ee7f6eb4d77800ec3a2f9f3ca17b973396450e4e8b3f41600e325e0e0acf1e5e355c38f23ac5e42d32641f2f15f0716a84e4ab6dcf45fcf96e5df11db47342b61511f65a55ea7e54dfd70b7f69cd83a5152f98584672acb14b1e75876f59b8a54f1f6888eeba880f7d4a84cff57b6857a57384861704192f6e07669b2b42597fb004c0b0aaae0b36ae72d62cc365df976081f303a75bf9dd8e672f126f622c29ef3794be3e305ba9edc0cfea873fa490336ff1634d71bb81da858b5166cab9bd7d15cad437b524d7719ce753af0a3d5492e06df55af4e87c1b6e569f4ddde1c8297bb24055ec0eeb2b9ff318fb69d3e3b3b101099d3fac6baa42eb24de6ac02226bddc46340e5402bc9b09e8ffd86b543d2ff7683e6dcc4f11cb75f7dff48edcf8b5e0b2e830489033a4f097bbea10b23a7dbee0ab9882e4ec8728cb4c5e9e9833c145633262533b9069dbe5bd97fc4252a247448a9e66e60363d2eff20eb50b672e94267a62394c7a8da94e58d7a49f3296c69fb1555e3e203437a9af2f987513d4eeb6a3777c7b1a049adf1425d67f579d16da9631c0088fd30bd1f5f7763e071ae216eec8d7cbf424b70fcd8a7f569f2585275ea81ed2133410d1ed5ea9b097689a042b7699ab9fbc37eea718229b9609573127a9540f7f49b88a8384e0f0e62b4f293e30cf990650ac772a5137eb104a819e4d251e9f9e067afe86988d7110c5e78278cef6c6b55cbc538f32e3c855aac4308b8b1012d538db22bc0f972e7fcc38d916fa48f05b955119d025ec22379fde9447556fb723f887f424b79f436ff91946abe44723b81f9730b7b98967a5f87018bf1c760c7ea31551a4fe5cdac1b1572ecc9b8aa115a2a0745b89324b50757d2f65cbc2378ed89bb40d6735e9eb7b990155957280a24f635d9a108a1d59bf32ae0ca070eac90b225f4266dbfb914df77cb514969fef8b42759f79ac8b5daf6328898b8a12da69bc1659763fbe6607ae73e1d6a78c1c97f4064d55b64f241beeb118349607a306476330f097e2a056c9f1df22d0028245767bf0531c5172d92ee685281e4df035630be9567b1722a4f8bfce98defc505de1022e3b38c0d1023925043440c14c40be231e38e060ee108f0be5a06291afbc8c7a2cf9543a0eddb183de0f76545eb2249ee7c1fe05adf9e0248056309b572711736df8ab43047102a686584ff176934465ab87dbb025724ea427132f3297789c053a105299fac919859c88ea9c6c8b9a7068ea663b013138655fbe5bf5ec8f60579e2e196067aa5c4499e87a5f07cb0aafbc28b8cdde9f2275005fdc0144a4e0dfe73eb93e9dd892720b2bfa9a03b26b4474448503b9f1d5ed8ab2d7f4a083a804fe0e1562553c975fc93014d7b054419335d5caca2412c2922884bfa00c4dd56b89077fef7fb72150239f2b6fd59e176c636681236c54e01dbf5cf41272a735309658bd1a4ca7dc5767dd7af230612fde60c7ebc0297b16549baddfe07d842f553b40d4867a3551a6a549bfd1db58471fff1dea3a554e06efc49d988cb50b295ef02fad0e402f882d599ee5ce91c215a80beb79bc18ec037b657d2f055e32e6d3989f50215ae9a2ca3f4725f46b62ab5804d13ec2563392308fd5793621cd957a96551cadcadfc58fcabf658ffe6473951f3d61895970e10828e10c227e9f0bc25935905eb65eb7e181865c4ab469f695ce44197aefe4f75f0d85cd104cb426c6dda69fd57937113ba95cfa56cd4c37b57c23e7f0edfe4dfce54bc0b72713b1dbb3cff3148956b0cf32a97f88bb2e9d27c264f3013d672", 0xf86}], 0x4, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x87}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x30}}], 0x1, 0x80) 1m27.992902839s ago: executing program 4 (id=3960): r0 = fanotify_init(0x40, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fanotify_init(0x0, 0x800) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r2, 0x21, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x22, 0x10, r4, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) sendmmsg$alg(r4, &(0x7f0000001f80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="bd9abc4850849221e928c749c3c847e7", 0x10}, {&(0x7f0000000100)="9ea1ce8f1e33409f", 0x8}], 0x2, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x20004004}, {0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)="52584b89604cb16ba4ddfa72f54152603b056429f76b0f11ecccd90f788c829a8060f518253757f818beab2c6b8797dfaee6d685f9faf736bd69d30c0debc27d755d3bfb5941dfa8132b2b03bb048cae6da7d867a57574914e853f21937e4073a9c442d72cef49445eeacdee8ba6275d2ec537d19520890928de00c43417e85ed4f2619a07dfee63d0b86888872285c7c946269d64605807a7caf55820e698b8bb2a00", 0xa3}, {&(0x7f0000000300)="3bff52e52ef0114146d332fd449e5dcbd77b47613e0cdd12144600cebce066bb40ea2fe846b4911fbec9127f63bf9e8664ca72f1eb60406d9a6694e1f50164dda157d8b6f199ed8b43da0f986f1c1492591f4b5ce9c235176ddfe0cdd859c07052a097011e1a08d0334d140d8d2e0ecec0482827be4118ed361632ddd125e6b49256e5c3d68030e193181049be575dd6a9eaf01237adce432556c41a42c4af9f4f91b72acec9388cd5939c722957a2a415fe491293a011ebc1f7032d9ae959f804b85584b230aa262ea263f8bb4fa2b77126313db0016bc5570330a86a5d452751f3e12aeeb77e3e6fc984669f", 0xed}, {&(0x7f0000000400)="3e9ad4c4efa89d90f3ea8013f634ecdd9384929e49777c6868a442ce5177346a986cab2b7a6109595d9f0c9c371e797b95a38ddf8496cb1a015e4595dd08ea65ff7801b7cf7638d97535a83b405b24213f21fee52fe05e88d5d0f589c4ced63bab1ebcf14fd0e4b7c4a7258466cc2aa3554e4471c8cd4acb115d2b34ba5bf208ea7e695e287a5a532b29f2e6fd4c", 0x8e}, {&(0x7f00000004c0)="7c9078ab50630115fe60f6a6180d2a139af48791669f632132558bf3d144fcd2a10d671a9fb8e115638cd1c7cb841e8ccca10fa43afead2f28ece8fc89a3530fbadc438488e1634cfdfc675691546909f0852e932bbd2dc0ae025910e186faaf89e4dd691c8903a405", 0x69}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="790bc0569659c0298adb43a8440ce2", 0xf}], 0x6, &(0x7f0000001600)=[@iv={0xb8, 0x117, 0x2, 0xa3, "4cef04a8ba483dd901f28adddb909dd1338900fbbc6ea7a0f09bf8528f7cbd9b007e331b16501e2014c14546060d9a2dfe7d4952b0d150fef4687be854e720a8e46fe281a321c1efe24333b33d0853323f928752f4723b07a00a8e7c832cb8ff5465fa50f6e5383d672b3110ab27a738b6edc54f68d95f42ad287eb7b47af926fafc4958e25fa88361dd6a001a68685d874d78efc50bbd2a5a11b62fcd5551d9333a30"}, @op={0x18, 0x117, 0x3, 0x1}], 0xd0, 0x840}, {0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)="54c95b41459fe4ff5bfd14043bc248033f7cea09b13465713136fcc8c1d72f3f9f9990c22d83a6ae9bce8eff91ba62af154d15f58ae2c6d5888805a2c9173dc95e4bfdebc2036726e05993e6012cf953c66a059cdc", 0x55}], 0x1, 0x0, 0x0, 0x4040015}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000017c0)="541806f26b844f3b6c97c2b541cadc3e464b359915eeda6f98ce93abd0929083ebacea7fd7cbf12e685f00e697a98345f71ee080ee33df1bfeeb78e321ea5971d6458d654daf414a18b0f21ffa173a88f6b8a38e78e07f57da7c556dded5cd8e8a30653bfd842ffc61d181b2c68b761830c1ae826f562d5d2c7529dc739bcc480541db955331c6c6a1dd0e2e20b6042fc2216ac0cef89d74dd9fe5ffc314d82219c67822490b9c8c172dee3a7c913b247ff7bdc0c6ddc0173f49b2d9d7a21cadc3bdca2fa7a0cb8e58fef507fa9a81c454d89c5d0f8b4c3d47c51608c03cf3e4e0a6cf3487a054bed1868c94", 0xec}, {&(0x7f00000018c0)="4d765f6dde3c602d369deb515cd97b248514a4b8aadb4191d3723e94c87e78e8d444ff66e551a690f8bc4f82aadc11d2dfbf55c441596c85342fc2596eee79d79d653e0952a7206e3d1e6d07ba2ed583843781fcbc108c0413a5ffe73451c88a490cce981ce10a4b41c84ccb086f19384e493cffa99c130d7ed424cf053e2fd3c1f70619ba231e2d146c445324d3877b585b6475ec8ac3896cefb4c81e4eaea26d5394bd5fc20c311a2b9b2d041458f46c5bf33116e775305361a3ef4dd92357864b977e2d9d433197896085d19a25159d01eaf7d8282f3a4865b83978e495cc76be7aec9784f879ffc9890a04bbcfbd64", 0xf1}, {&(0x7f00000019c0)="10fbd51b1b0f84b9f9404b80244835fa988fc8e5f3a2d1e28aa9e687b4967a9fe9c84512629c0f1d8858a13cfcb55444523b9e6f157920da62567e0aa236f314b4fb473172bf91d70bb07fdaea1c88b4103e452e889c55a2b302d57b0396b905735844fdb535d2fbdd5f6075ea9894efcef9bedae063d47a8caef2b4df6213c004a13045b8d98b010dd34c577f997fd515977682a64d67cf9f98cfb2bf6ee186f085144d95736c2aebcd57cd73773be4631f6ade87586797e908a82079b3e0f90b0e035649", 0xc5}, {&(0x7f0000001ac0)="281c4ee0eb24fe81aaf667cc0bd0b710ce23a7b2e2b6b1d37bb1cd3f93680a134c5d103e465fb06c672e558d67bd8e94ac13b1ddd2b79a0f40c94abe1adcd7b72ababfff808580ca94089949f8bbf4847c0e186d99ebc15744a42c55fd21910c5f1ce40a07ab543a65c7885d51ab4ee8f42a754fffb97f83ecf2062cc8146e28d4fdd7425e7bd250234047857838d6999747a364ba91ecbc3bb19203000f29ea84fff423f162039741d3857a9aa1862ed55883e6898f513fcb108b", 0xbb}, {&(0x7f0000001b80)="f79cf90596c6f9dfc9f812aa322902075c36de1ea62b17d45ec02f811cabb1", 0x1f}, {&(0x7f0000001bc0)="be186f6c18fe77342d11f3526b037b2759c050dc04f474f7f5ef237d84863f9ce9b293f22d484bfddb155a451f9697272b41549c2a2724a71ebe04e5a02f9fbc4efdf768aae8cf6bf79adee1acd7bc2fe7d3d96999aad49cf72ab8c27c1b86ace35bb61e306675f9d14cfa64eab50adccb83af2b5a73b796b10939edab9baa425da0659eb93169eef487d5c3de5da763a78431820bf1a22d639502d1c20ae4c6cd89f6eb0d79a61607e46b06f6521e73e3a4bb3c596941e24cf95b6394fdf1d0d9e3c8c8acef8c854c049786a5d1f1b4936a87a8ba6c", 0xd6}], 0x6, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d40)="94809bded4a37a697fa00b6df95af3770f38fcecf37df459dca4e993df67e65df891489f896fff74afa448070b5ad893937203d103eb8c710ea9873dff5886b9353b7498e442f1b3ca04e05801cb4bdb67735440084f9e0c5b131eaa97a4fa7799d336a9fd393f9540ab3308ff3e551eb0b7d78b6fc0", 0x76}, {&(0x7f0000001dc0)="74551902a7fd3ea04ce1d58f38bb61093f1ae4b370b48b7b2fd111608008d5a24430097032f81a649a5059f5628d19d545bd62ac7965045247556a05e5a0c2c7692ce970f3c1b8c277e2bc5d0a5cb822698e519f91da7e67c8a3a789e6df52a386e3ce0a492ea3a33bc1d933d5ebe542541e89816edef25162b36d47d129785994a836de50d078758f530ea668b5e9e537926591b339fcc594391a61c096819648b57a95ce58cbb96eb4cf3c17bd3bde55dcbf2d77af89c2b222345cc5209277afb372f1905acdb785d5076945bf12eca84b0e6bd4b10aa0bfcbc5d8af527c451724d8f5fad1e1", 0xe7}, {&(0x7f0000001ec0)="1d391af9d0355d1a7ae076c3a1a2b0a8956a2dba5c40f213dadfbd57c48bc8b54fc09dd1e45e5278d0405b674e1ba54155cd8527dfdf8dc659819c22487da9771c0e3b96621ac1dac7309b744db68ec27401", 0x52}], 0x3, 0x0, 0x0, 0x20}], 0x5, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20200, 0x0) fanotify_mark(r0, 0x39, 0x1a, r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 1m27.932761008s ago: executing program 4 (id=3963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @remote, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @l2={0x1f, 0x94, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81, 0x2}, 0xa, 0x0, 0x0, 0x0, 0xadea, &(0x7f0000000040)='tunl0\x00', 0x5, 0x3, 0x4}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) getsockname$packet(r3, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) write$yama_ptrace_scope(r6, &(0x7f0000000100)='3\x00', 0x2) 1m27.732901269s ago: executing program 4 (id=3965): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x0, 0x3, 0x1}) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x0, 0x3, 0x1}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000500a80016000a0001400200002000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef528906301b7ce06bbace8017cb", 0x66}, {&(0x7f0000001680)="66672324118a5a090ddd327d57e4e0e1353bb0cb85933035009e0e5dc3bc161cb6289a3389da904f7557a56e6113e564da5b96c6f863c7b8d71515a1897e1ca95f89d69521011a983e85f57f12a1856c9976f2976e645bf7220fcd53214a466fb3de85e1b1df808f772249265e447c034dd0", 0x72}], 0x2}, 0x4004000) 1m27.64887972s ago: executing program 33 (id=3965): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x0, 0x3, 0x1}) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x0, 0x3, 0x1}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000500a80016000a0001400200002000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef528906301b7ce06bbace8017cb", 0x66}, {&(0x7f0000001680)="66672324118a5a090ddd327d57e4e0e1353bb0cb85933035009e0e5dc3bc161cb6289a3389da904f7557a56e6113e564da5b96c6f863c7b8d71515a1897e1ca95f89d69521011a983e85f57f12a1856c9976f2976e645bf7220fcd53214a466fb3de85e1b1df808f772249265e447c034dd0", 0x72}], 0x2}, 0x4004000) 1m15.372783054s ago: executing program 0 (id=4155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4002110, r1, 0xefe26000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x8, 0x6}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x4000000000009, 0x9}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x200000009, 0x3ff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f0000000180)={0x0, 0xffff0000, 0x40, '\x00', &(0x7f0000000080)=0x4}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061190c00000000009500000040000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r6, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r5, 0xab04b000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000001c0)=0x80000001) 1m12.331055213s ago: executing program 0 (id=4167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_clone(0x1080, &(0x7f0000000180)="3614e7ca00cf8cf61a6630bc8e6a070352be3b4a7a63ceee5cf7be98e349bd1a7d3907a52fb16b3332eac8c5f40c17965c63ad21de9bfa2a33bdd9d0c304a02a9cc4dda00a6380247db4b7de479c715377917aa42b787c005617", 0x5a, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="653d0e8d42b3f6d0d14809bfe31db35fccf3f7ed7d1d18dbe8cba865fdc0d88d01f4fae43a94bb4eca5ce6145a7917f4287542c5376b95ce17769a7f1fd2b7ecc3873ee7f02f6bd4981f82878e8c330f9525f9cc7a29d0cc2858a8390bf3541c57485bae6044e6fa9f1b9d6c99a9ebad4386bbfc354c0f994f60c8ad21") read$FUSE(r1, &(0x7f000001a240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, r1, &(0x7f0000000300)={r1, r0, 0x7}) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {}, 0x0, 0x33}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a9e"], 0x64}}, 0x0) 1m12.330810901s ago: executing program 0 (id=4168): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0xab0, 0x1, 0x0, 0x9, 0x4, 0x4, 0x9fe3, 0x5, 0x9, 0x1ad, 0x1, 0x3, 0x8, 0x845}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000012c0)={{r3, 0x9, 0x7, 0x38b, 0x3ef, 0x0, 0xb, 0x6, 0x4, 0x488ec099, 0x7, 0x7, 0xffff, 0x923, 0x7}}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20040880) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000000a000100aaaaaaaaaa150000080004"], 0x318}}, 0x20040800) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r1, 0x1b, 0xc2}, &(0x7f00000022c0)={'enc=', 'pkcs1', ' hash=', {'sha1-asm\x00'}}, &(0x7f0000002340)="4fbafb28f865d4b167257c76771a64215cc90627dd5686db55b62a", &(0x7f0000002380)=""/194) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m12.132950985s ago: executing program 0 (id=4169): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x20, 0x0, &(0x7f0000001040)) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) 1m11.263052493s ago: executing program 0 (id=4171): socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000002080)={'#! ', '', [], 0xa, "e3ab19e0"}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x5) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) write$rfkill(r2, &(0x7f0000000240)={0x8, 0x8, 0x2}, 0x8) getpeername(r1, 0x0, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x44004) sendmsg$NFT_BATCH(r4, 0x0, 0x10) syz_emit_ethernet(0xd6, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3388476f3abfaf00a006000000fe8000000000000000000000000000aa2c0c000000042404000200000000000000f7ffffffffffffffc20400000a29c91000000000000000000000000000000000000100c910fe8000000000000000000000000000aa04010601020000c910fe80000000000000000000000000001ec2040000000200000000000000000000000000000000000300004e2100004e21000000020000000300000000000000000000000100"/200], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x20, &(0x7f0000000040)={@remote, @random="4264019fd326", @void, {@llc_tr={0x11, {@llc={0xd4, 0xbc, "a3", "dd95d60f3337ae7c321de0dcf5163a"}}}}}, &(0x7f0000000080)={0x1, 0x4, [0x70c, 0x62a, 0x51e, 0x70a]}) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa290180c2feff0181caf743e6cc2cf9dc892c004e0008060001080006040000000000000000ac141416"], 0x0) 1m11.262834263s ago: executing program 0 (id=4172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(0x0, 0x20, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x108000, 0x40, 0x0, 0xe0, 0x2004cc, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3, 0x8, 0x200004, 0x0, 0x3, 0xfffffffffffffffd, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 56.260335458s ago: executing program 34 (id=4172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(0x0, 0x20, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x108000, 0x40, 0x0, 0xe0, 0x2004cc, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3, 0x8, 0x200004, 0x0, 0x3, 0xfffffffffffffffd, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.822113736s ago: executing program 1 (id=5075): syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local, @local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x4, 0x1c, 0x64, 0x0, 0x81, 0x1, 0x0, @private=0xa010102, @multicast1}, @address_request={0x11, 0x0, 0x0, 0xff}}}}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5d28}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000012}, 0x0) 1.762071731s ago: executing program 1 (id=5076): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r2, 0xb01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x10b8}, 0xff00) 1.761443837s ago: executing program 1 (id=5078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000101010101016aee080026006c090000040046002400518020000080110001"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.710670965s ago: executing program 1 (id=5080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000"], 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x9, 0xa6, 0x2, 0x4, 0x6}, {0x2000003, 0x4004, 0x0, 0x4, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x9, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) read$usbmon(r6, &(0x7f0000000600)=""/4096, 0x1000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xce84, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.705999965s ago: executing program 1 (id=5082): connect$llc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="c4c19456610066baa10066edf3262e0f22dc640fc738b9800000c00f3235004000000f30b9ad0a00000f320fcd640f30660f388017fe07", 0x37}], 0x1, 0x0, 0x0, 0x0) 1.641742573s ago: executing program 1 (id=5083): r0 = socket(0x1e, 0x4, 0x0) close(0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x92000000000000f4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900"], 0x7c}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 1.577268718s ago: executing program 3 (id=5085): r0 = syz_open_dev$hidraw(&(0x7f0000000180), 0x4, 0x4101) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xa7}, 0xc) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000200)={{r1}, "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"}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2fff, 0x801, 0x6c, 0x0, 0x402, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180"], 0x26c0}}, 0x4010) 1.492436235s ago: executing program 3 (id=5086): openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800005, 0xffffffffffffff40) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) listen(r4, 0x7b36) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000140), 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_user(r6, &(0x7f0000000100)={'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 'root\x00'}, 0x33) 1.442048786s ago: executing program 3 (id=5087): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x8, 0x0, 0x0, r3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000002a40)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0xdd, r4, r3}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x1) r15 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r15, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r13}, &(0x7f0000000480), &(0x7f00000004c0)=r13}, 0x20) r16 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r16, 0x5412, &(0x7f0000000880)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r9}) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x5, 0x7, 0x3, 0x0, r10}) 1.349209501s ago: executing program 3 (id=5090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x31, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffa, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0xec8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0xffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000002, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x2, 0x0, 0x0, 0x9694, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xc4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BLKFINISHZONE(r7, 0x40101288, &(0x7f0000000180)={0x8, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790509050e0320200980070705ab0b78"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x80050000) ppoll(&(0x7f0000001280)=[{r10, 0xe0}], 0x1, &(0x7f00000012c0)={0x0, 0x989680}, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x8a, 0x5, 0x1, 0x42, @local, @private1, 0x8000, 0x700, 0x5, 0x7}}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x3, 0x0, @remote, 0x800005}, 0x1c) 1.182123598s ago: executing program 5 (id=5092): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000fc0)={'gre0\x00', &(0x7f0000000f40)={'syztnl2\x00', 0x0, 0x20, 0x8019, 0xfba6, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @empty}}}}) (async) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x0) (async) keyctl$set_timeout(0xf, r2, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=@ipv4_newrule={0x5c, 0x20, 0x20, 0x70bd2d, 0x25dfdbfe, {0x2, 0x4, 0x10, 0x71, 0xf1, 0x0, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0x80b}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @local}, @FRA_FLOW={0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x24048054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000020601010000000000000000010000000c00078005001500efffffff050005000a0000000900020073797a3000000000050004000100000005000100060000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000001340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0xfe, 'ku', "d49a2c5b417cc08c09b9e350c99d5d680806076224a8d43d5800433ced6426dfeb22e5edf0491397b8c92e765e4acfb96333caba5e702d47b8dbd820c74ba30b27c5a70144c669ff6c2cd15502a5dc883012d202f953df4eb5315da82952ac04ea2d"}}}}}, &(0x7f0000000a40)={0x0, 0x2, [0xaf6, 0xb63, 0x288, 0xee3]}) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) ioctl$EVIOCGID(r8, 0x80084502, &(0x7f0000001300)=""/30) (async) r9 = socket(0x1, 0x803, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r10, &(0x7f0000003340)={0x2020}, 0x2020) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @rand_addr=' \x01\x00', @dev}}}}, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$TIOCL_BLANKSCREEN(r10, 0x541c, &(0x7f00000002c0)) (async) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x3, @local, 0xe15}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000004c0)={r12, 0x9, 0x3, [0x77, 0x40, 0x6b]}, 0xe) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 1.18112247s ago: executing program 5 (id=5093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800ffff", @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000101010101016aee080026006c09000004004600240051"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.110743092s ago: executing program 5 (id=5094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000250001"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xd0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r2, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) getsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000801, 0x0, &(0x7f0000000280)={0xf7dfffffffffff7f, 0x5, 0x0, 0xa27, 0x8000, 0x5, 0x80000000001, 0x1, 0x200ea1}) 1.019224264s ago: executing program 5 (id=5096): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) write$P9_RGETATTR(r1, &(0x7f00000001c0)={0xa0, 0x19, 0xffff, {0x20, {0x10, 0x2, 0x5}, 0x0, r3, r4, 0x5, 0x1, 0x0, 0xfffffffffffff420, 0xa7b, 0x1, 0x3e, 0x45ba, 0x1002, 0x7, 0x3, 0x9, 0xce3, 0x7, 0x8}}, 0xa0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)) read(r0, &(0x7f00000019c0)=""/4093, 0xffd) 1.019045977s ago: executing program 5 (id=5097): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x5df801, 0x24) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(r0, r0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f00000003c0), 0x0}, 0x20) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) timer_delete(r2) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000140)={0x5, 0x0, [{0x400bde6b, 0x9800000, 0xc, [0x7, 0x5, 0x3, 0x9, 0xffff1410, 0x6, 0xaac0, 0x4]}, {0x78000000, 0x10001, 0x6, [0xee, 0x7e41e6c4, 0x1, 0x7, 0x7f, 0xffff878e, 0x6, 0x2]}, {0x1, 0x88, 0xfffffff7, [0x0, 0xb, 0x7e, 0x3, 0x5, 0x9, 0x4, 0x9]}, {0x6, 0x80, 0x8001, [0x0, 0x3, 0xfffffffb, 0xbf0, 0x200, 0x6, 0x2, 0x10000]}, {0xfffeffff, 0x4, 0x3, [0x4, 0x7fffffff, 0x4, 0x3, 0x0, 0x2, 0x66, 0x7]}]}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x10001, 0x402000, 0x1000000, 0xfffffffc, 0xc}) 811.229017ms ago: executing program 6 (id=5101): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xe, "fe4042c317ae82c6d1a51a1e45a7"}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r0, 0xcb, "0db1ddcc671afd4524dd8920cb84c8c19d28d09c91d6dc942d74c1eeefe3b4dfb54811885c65b50eab69528d52f7cd1b6af861e9c313369809f21df2c70f813e7356870810e6dbaaac8d83df649dc6fcccaf43da2d177947986065e8961c06a62e6688b4acd77d1c069fb7c56e2b237f897be12b199713931624e42be9a7b358e822f5a403a1e2c81b8a04605348af3cb31bd1ee5467bd3f7d4929f2ceffebeb6c0bf459ac3893be23c89cd6ee2d2838bdb270c75a4ef394b0db68e9f7bc68d87a60b9d72da57d7a20231a"}, &(0x7f0000000180)=0xd3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'syzkaller1\x00', @ifru_data=&(0x7f0000000040)="4f4f5e42737035cb48380888a60729b442a4a73cacc677d83b1a90c4f9cd4ed3"}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 741.831756ms ago: executing program 6 (id=5102): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xffb) 192.257416ms ago: executing program 6 (id=5103): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) write$tun(r0, &(0x7f0000000080)={@void, @val={0x3, 0x2, 0x9, 0x0, 0x5, 0x1}, @ipv6=@generic={0x2, 0x6, "d76d29", 0x25f, 0xff, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x21}, {[@fragment={0x67, 0x0, 0x6, 0x1, 0x0, 0x13, 0x66}, @srh={0x67, 0x2, 0x4, 0x1, 0xc, 0x30, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0xff, 0xe, 0x0, 0x80, 0x0, [@remote, @empty, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @empty, @empty]}, @fragment={0x5c, 0x0, 0x5, 0x0, 0x0, 0x8, 0x68}, @dstopts={0x2e, 0x16, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x3a, 0x24, [0x80, 0x5, 0x8001, 0xb4, 0x8000000000000000, 0xff, 0x276, 0x0]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x63, 0x4, [0x33b0, 0xa4a]}}, @ra, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0xc073}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x6, [0x80000000, 0xc, 0x9]}}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x73, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @hopopts={0x2f, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xb2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @ra, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0xe2, 0x7fff, [0x9, 0xffffffff, 0x1, 0xbbcb]}}]}], "61e169d7b4198d71d7be05c349b57b6ccc2c3e44fed2f13d374d8ca7a0b6dcce5475efea62a7d3d535e8801c25ba5600261853d195abf183d64d7b2131ec8f1bc374cab8dc6597d846f723e82e98f41a9c5b17dbe0e890692517aa1ce86127d9072bf75c8c2cb3857af4c0fe1612e263a801bdba9f9ba27961d8fc3faa31cf7809085e481dd3c81a71c6f3d51825b9c9c6001183de481aea2e560bafe7b12cdceb4579fa96d95a"}}}, 0x291) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x20800, 0x0) ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f0000000380)={0x5, 0x1, 0x5, 0xb, 0x4, 0x8}) ioctl$CDROMSTART(r1, 0x5308) 173.253733ms ago: executing program 6 (id=5104): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) 172.754894ms ago: executing program 6 (id=5105): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) (async) ptrace$cont(0x20, r0, 0xfffffffffffffffa, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x52680, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xf3, 0x3, 0x0, 0x3}) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)) (async) prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270004004500003800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9a0000085f5a0028097a00050a000000c100000700000000"], 0x46) (async) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x80800) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r6, &(0x7f0000000000), 0x10) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRESOCT, @ANYRES64=r3, @ANYRES16=r4, @ANYRES16=r2, @ANYBLOB="79c13e617921a7d30ccf759d3e86a5ae3b8ac740875472db857e320112beecb2eb9cf94f2ed3dd5a02462700000000000000000000b4c883c3554f3e0000000000"], 0x20000600}}, 0x4004) (async) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ptrace$getregset(0x4204, r0, 0x3, &(0x7f0000000200)={&(0x7f0000000180)=""/121, 0x79}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r9, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) recvmsg$qrtr(r7, &(0x7f0000000700)={&(0x7f00000002c0), 0xc, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/62, 0x3e}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f0000000540)=""/34, 0x22}], 0x9, 0x0, 0x0, 0x2102}, 0x38, 0x3) 102.353829ms ago: executing program 5 (id=5106): syz_emit_ethernet(0xce, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800471500c000670000011190787f0000017f0000018313b0ac1414aa6401010264010100ac141433071f1ae00000010a010101ffffffff00000000ac14142eac1414bb64010102870767a794c079880e251a2ab92e4274111681a684004e234e2000649078020000000000000000000000f01364057601bc16b2b97813d7ee2dfcaef109dc6561584ddcbeed2b95705ba77a4e605dd4ea35dbf827d4d3e39a3d666d86206ce83c1de7a7b5dcb581cb2a"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000043c52933b038109900ffdbdf250a00a100", @ANYRES32=r0, @ANYBLOB="14000100ff0500000000000000000000000000010800080012060000"], 0x34}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 101.213781ms ago: executing program 6 (id=5107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000007c0)={0x0, 0xffa6, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffeffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x48050) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x1, 0x1}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x9, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}}, 0x0, 0x4e, 0x0, 0x1, 0xa8ac}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x1, 0x1}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x9, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}}, 0x0, 0x4e, 0x0, 0x1, 0xa8ac}, 0x28) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000001400)=""/199, 0xc7}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000000c0)) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="00d34d00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e002e8970d8107040a60110000020000000455a1bc0009009c000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25", 0x51}], 0x1}, 0x94) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000001c0)={0x1, 0x3, 0x5, 0x6000}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)=0x5) (async) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000040)=0x5) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigaction(0xe, &(0x7f0000000080)={&(0x7f0000000000)="6467435fc0de0e3636a2357c000000000000c442d59294750000000044d9f036f141dc860900000045d9f0f30f5b590047dff3", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f00000002c0)) (async) rt_sigaction(0xe, &(0x7f0000000080)={&(0x7f0000000000)="6467435fc0de0e3636a2357c000000000000c442d59294750000000044d9f036f141dc860900000045d9f0f30f5b590047dff3", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f00000002c0)) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 213.518µs ago: executing program 3 (id=5108): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3 (id=5109): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x3) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bda", 0x7) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r7], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) (async) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r11, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r12], 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02864c3, &(0x7f0000000100)={&(0x7f00000000c0)=[r12], 0x1000000000, 0x1, 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000280)={&(0x7f0000000240)=[r1, r4, r5, r7, r8, r9, r10, r12, r13, r15], 0xfff, 0xa, 0x1}) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6005, &(0x7f0000000540)=0xa, 0x6, 0x0) kernel console output (not intermixed with test programs): a0 R15: 00007fffec89c538 [ 521.076860][T19072] [ 521.200322][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'. [ 521.283778][T19077] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 521.306866][T19081] FAULT_INJECTION: forcing a failure. [ 521.306866][T19081] name failslab, interval 1, probability 0, space 0, times 0 [ 521.310775][T19081] CPU: 1 UID: 0 PID: 19081 Comm: syz.5.4185 Not tainted syzkaller #0 PREEMPT(full) [ 521.310790][T19081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 521.310797][T19081] Call Trace: [ 521.310801][T19081] [ 521.310806][T19081] dump_stack_lvl+0x16c/0x1f0 [ 521.310824][T19081] should_fail_ex+0x512/0x640 [ 521.310840][T19081] ? fs_reclaim_acquire+0xae/0x150 [ 521.310857][T19081] ? tomoyo_encode2+0x100/0x3e0 [ 521.310873][T19081] should_failslab+0xc2/0x120 [ 521.310886][T19081] __kmalloc_noprof+0xd2/0x510 [ 521.310898][T19081] ? d_absolute_path+0x136/0x1a0 [ 521.310917][T19081] tomoyo_encode2+0x100/0x3e0 [ 521.310936][T19081] tomoyo_encode+0x29/0x50 [ 521.310951][T19081] tomoyo_realpath_from_path+0x18f/0x6e0 [ 521.310972][T19081] tomoyo_path_number_perm+0x245/0x580 [ 521.310986][T19081] ? tomoyo_path_number_perm+0x237/0x580 [ 521.311002][T19081] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 521.311021][T19081] ? find_held_lock+0x2b/0x80 [ 521.311047][T19081] ? find_held_lock+0x2b/0x80 [ 521.311060][T19081] ? hook_file_ioctl_common+0x145/0x410 [ 521.311075][T19081] ? __fget_files+0x20e/0x3c0 [ 521.311090][T19081] security_file_ioctl+0x9b/0x240 [ 521.311108][T19081] __x64_sys_ioctl+0xb7/0x210 [ 521.311126][T19081] do_syscall_64+0xcd/0x4e0 [ 521.311142][T19081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.311154][T19081] RIP: 0033:0x7fb99658eec9 [ 521.311163][T19081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.311174][T19081] RSP: 002b:00007fb997373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.311185][T19081] RAX: ffffffffffffffda RBX: 00007fb9967e6180 RCX: 00007fb99658eec9 [ 521.311192][T19081] RDX: 0000000000000000 RSI: 0000000000005b03 RDI: 0000000000000004 [ 521.311199][T19081] RBP: 00007fb997373090 R08: 0000000000000000 R09: 0000000000000000 [ 521.311206][T19081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.311213][T19081] R13: 00007fb9967e6218 R14: 00007fb9967e6180 R15: 00007ffe8d5221e8 [ 521.311227][T19081] [ 521.311237][T19081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 521.800688][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 521.894827][T19105] dlm: non-version read from control device 0 [ 521.932786][T14829] Bluetooth: hci1: command tx timeout [ 521.968973][T19109] IPv6: addrconf: prefix option has invalid lifetime [ 522.056119][ T40] audit: type=1400 audit(1758804688.026:1001): avc: denied { create } for pid=19112 comm="syz.1.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 522.062115][ T40] audit: type=1400 audit(1758804688.026:1002): avc: denied { getopt } for pid=19112 comm="syz.1.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 522.070919][ T40] audit: type=1400 audit(1758804688.036:1003): avc: denied { setopt } for pid=19112 comm="syz.1.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 522.319879][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'. [ 522.330303][T19120] binder: BINDER_SET_CONTEXT_MGR already set [ 522.332862][T19120] binder: 19119:19120 ioctl 4018620d 200000000280 returned -16 [ 522.689141][T19133] Attempt to restore checkpoint with obsolete wellknown handles [ 522.775365][ T40] audit: type=1400 audit(1758804688.746:1004): avc: denied { setopt } for pid=19137 comm="syz.1.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 523.053005][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.712266][ T40] audit: type=1400 audit(1758804689.676:1005): avc: denied { add_name } for pid=19140 comm="syz.1.4215" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.719098][ T40] audit: type=1400 audit(1758804689.676:1006): avc: denied { create } for pid=19140 comm="syz.1.4215" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 523.725513][ T40] audit: type=1400 audit(1758804689.676:1007): avc: denied { associate } for pid=19140 comm="syz.1.4215" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 523.863708][ T40] audit: type=1400 audit(1758804689.836:1008): avc: denied { ioctl } for pid=19142 comm="syz.1.4216" path="socket:[64923]" dev="sockfs" ino=64923 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 523.878284][ T40] audit: type=1400 audit(1758804689.846:1009): avc: denied { ioctl } for pid=19142 comm="syz.1.4216" path="socket:[64926]" dev="sockfs" ino=64926 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 524.006505][T19150] fuse: Unknown parameter '00000000000000000000' [ 524.012800][T14829] Bluetooth: hci1: command tx timeout [ 524.191698][ T40] audit: type=1400 audit(1758804690.156:1010): avc: denied { watch_with_perm watch_reads } for pid=19157 comm="syz.1.4221" path="/bus" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 524.308996][ T40] audit: type=1400 audit(1758804690.276:1011): avc: denied { setopt } for pid=19161 comm="syz.1.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 524.712755][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 524.864858][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 524.868067][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.871810][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.875354][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 524.879015][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.883387][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.886251][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.892750][ T9] usb 6-1: config 0 descriptor?? [ 524.894956][T19168] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 525.305222][ T9] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 525.312132][ T9] plantronics 0003:047F:FFFF.001D: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 525.503014][ T9] usb 6-1: USB disconnect, device number 43 [ 526.422837][T19081] usbtmc 8-1:16.0: usb_control_msg returned -110 [ 526.433053][ T1462] usb 8-1: USB disconnect, device number 56 [ 526.443727][ T9569] usb 10-1: USB disconnect, device number 3 [ 526.927017][ T40] audit: type=1326 audit(1758804692.896:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.1.4232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf8d8eec9 code=0x50000 [ 526.929574][T19194] fuse: Unknown parameter 'user_i00000000000000000000' [ 526.934043][ T40] audit: type=1326 audit(1758804692.896:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.1.4232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf8d8eec9 code=0x50000 [ 526.934069][ T40] audit: type=1326 audit(1758804692.896:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.1.4232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf8d8eec9 code=0x50000 [ 526.934092][ T40] audit: type=1326 audit(1758804692.896:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.1.4232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf8d8eec9 code=0x50000 [ 526.934115][ T40] audit: type=1326 audit(1758804692.896:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.1.4232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf8d8eec9 code=0x50000 [ 526.934139][ T40] audit: type=1326 audit(1758804692.896:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.1.4232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf8d8eec9 code=0x50000 [ 527.132982][T19201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32636 sclass=netlink_route_socket pid=19201 comm=syz.3.4234 [ 528.464480][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4239'. [ 528.883934][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 528.883951][ T40] audit: type=1400 audit(1758804694.846:1058): avc: denied { write } for pid=19223 comm="syz.1.4240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 529.079748][T19229] fuse: Unknown parameter 'user_i00000000000000000000' [ 529.203430][T19234] netlink: 'syz.3.4244': attribute type 6 has an invalid length. [ 529.522910][ T3359] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 529.692752][ T3359] usb 8-1: Using ep0 maxpacket: 16 [ 529.699142][ T3359] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.703263][ T3359] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.706592][ T3359] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 529.717711][ T3359] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 529.720713][ T3359] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.724962][ T3359] usb 8-1: config 0 descriptor?? [ 529.885938][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4248'. [ 530.139404][ T3359] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:05AC:8241.001E/input/input33 [ 530.221415][ T3359] appleir 0003:05AC:8241.001E: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 530.348457][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4252'. [ 530.514785][ T6256] usb 8-1: USB disconnect, device number 57 [ 530.595318][ T3359] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 530.744362][ T3359] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 530.747056][ T3359] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.750934][ T3359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 530.754818][ T3359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 530.758790][ T3359] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.763198][ T3359] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.766576][ T3359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.772035][ T3359] usb 6-1: config 0 descriptor?? [ 530.775244][T19254] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 530.981757][ T40] audit: type=1400 audit(1758804696.946:1059): avc: denied { bind } for pid=19253 comm="syz.1.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 531.009057][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4257'. [ 531.199673][T19278] fuse: Unknown parameter 'user_id00000000000000000000' [ 531.260263][ T3359] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 531.280160][ T3359] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 531.473714][T19254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.477564][T19254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.624687][T19253] ALSA: mixer_oss: invalid OSS volume ';' [ 531.629375][ T9] usb 6-1: USB disconnect, device number 44 [ 531.988470][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 532.065945][T19301] FAULT_INJECTION: forcing a failure. [ 532.065945][T19301] name failslab, interval 1, probability 0, space 0, times 0 [ 532.070315][T19301] CPU: 1 UID: 0 PID: 19301 Comm: syz.5.4267 Not tainted syzkaller #0 PREEMPT(full) [ 532.070330][T19301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 532.070337][T19301] Call Trace: [ 532.070342][T19301] [ 532.070346][T19301] dump_stack_lvl+0x16c/0x1f0 [ 532.070384][T19301] should_fail_ex+0x512/0x640 [ 532.070404][T19301] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 532.070418][T19301] should_failslab+0xc2/0x120 [ 532.070432][T19301] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 532.070444][T19301] ? __alloc_skb+0x2b2/0x380 [ 532.070459][T19301] __alloc_skb+0x2b2/0x380 [ 532.070472][T19301] ? __pfx___alloc_skb+0x10/0x10 [ 532.070485][T19301] ? genl_rcv_msg+0x470/0x800 [ 532.070501][T19301] ? genl_rcv_msg+0x4bb/0x800 [ 532.070521][T19301] netlink_ack+0x15d/0xb80 [ 532.070545][T19301] netlink_rcv_skb+0x332/0x420 [ 532.070566][T19301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.070584][T19301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.070604][T19301] ? netlink_deliver_tap+0x1ae/0xd30 [ 532.070620][T19301] genl_rcv+0x28/0x40 [ 532.070635][T19301] netlink_unicast+0x5aa/0x870 [ 532.070652][T19301] ? __pfx_netlink_unicast+0x10/0x10 [ 532.070667][T19301] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 532.070686][T19301] netlink_sendmsg+0x8d1/0xdd0 [ 532.070703][T19301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.070725][T19301] ____sys_sendmsg+0xa98/0xc70 [ 532.070743][T19301] ? copy_msghdr_from_user+0x10a/0x160 [ 532.070757][T19301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.070780][T19301] ___sys_sendmsg+0x134/0x1d0 [ 532.070794][T19301] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.070824][T19301] __sys_sendmsg+0x16d/0x220 [ 532.070838][T19301] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.070860][T19301] do_syscall_64+0xcd/0x4e0 [ 532.070882][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.070894][T19301] RIP: 0033:0x7fb99658eec9 [ 532.070903][T19301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.070915][T19301] RSP: 002b:00007fb9973b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.070926][T19301] RAX: ffffffffffffffda RBX: 00007fb9967e5fa0 RCX: 00007fb99658eec9 [ 532.070933][T19301] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 532.070939][T19301] RBP: 00007fb9973b5090 R08: 0000000000000000 R09: 0000000000000000 [ 532.070946][T19301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.070952][T19301] R13: 00007fb9967e6038 R14: 00007fb9967e5fa0 R15: 00007ffe8d5221e8 [ 532.070970][T19301] [ 532.187763][T19303] binder: 19302:19303 ioctl 40189429 200000000180 returned -22 [ 532.257041][ T40] audit: type=1400 audit(1758804698.226:1060): avc: denied { read write } for pid=19307 comm="syz.1.4270" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 532.258839][T19310] fuse: Bad value for 'fd' [ 532.266505][ T3359] hid (null): unknown global tag 0xb5 [ 532.266718][ T40] audit: type=1400 audit(1758804698.226:1061): avc: denied { open } for pid=19307 comm="syz.1.4270" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 532.280926][ T3359] hid (null): global environment stack underflow [ 532.283097][ T3359] hid (null): unknown global tag 0xc [ 532.284746][ T3359] hid (null): invalid report_count 41032 [ 532.293448][ T3359] hid-generic 0101:0005:0000.0020: reserved main item tag 0xd [ 532.298693][ T3359] hid-generic 0101:0005:0000.0020: unknown main item tag 0x6 [ 532.300955][ T3359] hid-generic 0101:0005:0000.0020: unexpected long global item [ 532.303635][ T3359] hid-generic 0101:0005:0000.0020: probe with driver hid-generic failed with error -22 [ 532.314917][ T40] audit: type=1400 audit(1758804698.286:1062): avc: denied { load_policy } for pid=19311 comm="syz.5.4272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 532.315056][T19312] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 532.326102][T19312] SELinux: failed to load policy [ 532.366314][T19314] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4273'. [ 532.367647][ T40] audit: type=1400 audit(1758804698.336:1063): avc: denied { view } for pid=19313 comm="syz.1.4273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 532.395514][T19319] fuse: Bad value for 'user_id' [ 532.397148][T19319] fuse: Bad value for 'user_id' [ 532.802761][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 532.948464][T19336] fuse: Bad value for 'fd' [ 532.956088][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 532.958844][ T9] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 532.964233][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 532.969079][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.972286][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.981040][ T9] usb 6-1: config 0 descriptor?? [ 533.064344][ T40] audit: type=1326 audit(1758804699.036:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19339 comm="syz.3.4282" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8085f8eec9 code=0x0 [ 533.343284][T19353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.348347][T19353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.353177][T19353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.359513][T19353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.363967][T19353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.392868][ T9] usb 6-1: string descriptor 0 read error: -71 [ 533.397854][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 533.404626][ T9] usb 6-1: USB disconnect, device number 45 [ 533.511046][T19351] chnl_net:caif_netlink_parms(): no params data found [ 533.602740][T19351] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.604971][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.607218][T19351] bridge_slave_0: entered allmulticast mode [ 533.609814][T19351] bridge_slave_0: entered promiscuous mode [ 533.615586][T19351] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.618133][T19351] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.620420][T19351] bridge_slave_1: entered allmulticast mode [ 533.623154][T19351] bridge_slave_1: entered promiscuous mode [ 533.653479][T19367] fuse: Bad value for 'fd' [ 533.684273][T19351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.689892][ T40] audit: type=1400 audit(1758804699.656:1065): avc: denied { write } for pid=19368 comm="syz.5.4290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 533.691416][T19351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.760830][T19351] team0: Port device team_slave_0 added [ 533.765607][T19351] team0: Port device team_slave_1 added [ 533.814458][T19351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.817612][T19351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.828611][T19351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.834377][T19351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.837220][T19351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.847191][T19351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.899510][T19351] hsr_slave_0: entered promiscuous mode [ 533.901810][T19351] hsr_slave_1: entered promiscuous mode [ 533.904424][T19351] debugfs: 'hsr0' already exists in 'hsr' [ 533.907038][T19351] Cannot create hsr debugfs directory [ 533.914045][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4297'. [ 533.934619][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'. [ 534.075482][T19351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.082233][T19351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.088641][T19397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19397 comm=syz.1.4301 [ 534.088885][T19351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.095258][ T5974] Bluetooth: hci4: command 0x0406 tx timeout [ 534.107236][T19351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 534.125817][T19351] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.127922][T19351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.130147][T19351] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.132206][T19351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.181541][T19351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.195334][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.200243][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.219577][T19351] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.230981][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.234015][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.243201][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.246027][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.308068][T19415] fuse: Unknown parameter '0x0000000000000004' [ 534.360105][T19351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.534879][T19351] veth0_vlan: entered promiscuous mode [ 534.539739][T19351] veth1_vlan: entered promiscuous mode [ 534.552931][ T913] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 534.558736][T19351] veth0_macvtap: entered promiscuous mode [ 534.562307][T19351] veth1_macvtap: entered promiscuous mode [ 534.570617][T19351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.577953][T19351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.583732][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.586548][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.590002][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.593951][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.633237][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.636309][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.649982][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.652389][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.724820][ T913] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 534.728068][ T913] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 534.731577][ T913] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 534.738359][ T913] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.742111][ T913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.746706][ T913] usb 8-1: config 0 descriptor?? [ 534.758891][ T913] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 534.763789][ T40] audit: type=1400 audit(1758804700.736:1066): avc: denied { append } for pid=19437 comm="syz.5.4310" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.211696][T19447] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 535.213725][T19447] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 535.217971][T19447] vhci_hcd vhci_hcd.0: Device attached [ 535.221458][T19448] vhci_hcd: connection closed [ 535.222563][ T1145] vhci_hcd: stop threads [ 535.229113][ T1145] vhci_hcd: release socket [ 535.230536][ T1145] vhci_hcd: disconnect device [ 535.264821][T19451] binder: BINDER_SET_CONTEXT_MGR already set [ 535.266698][T19451] binder: 19450:19451 ioctl 4018620d 200000004a80 returned -16 [ 535.269673][T19451] binder: 19450:19451 ioctl c0306201 200000000500 returned -14 [ 535.337319][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4315'. [ 535.452850][ T5974] Bluetooth: hci3: command tx timeout [ 535.618492][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4316'. [ 535.814374][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4318'. [ 535.818400][T19470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4318'. [ 535.826550][T19469] FAULT_INJECTION: forcing a failure. [ 535.826550][T19469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.830550][T19469] CPU: 3 UID: 0 PID: 19469 Comm: syz.6.4319 Not tainted syzkaller #0 PREEMPT(full) [ 535.830566][T19469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 535.830573][T19469] Call Trace: [ 535.830577][T19469] [ 535.830581][T19469] dump_stack_lvl+0x16c/0x1f0 [ 535.830601][T19469] should_fail_ex+0x512/0x640 [ 535.830618][T19469] should_fail_alloc_page+0xe7/0x130 [ 535.830635][T19469] prepare_alloc_pages+0x3c2/0x610 [ 535.830650][T19469] ? rcu_is_watching+0x12/0xc0 [ 535.830667][T19469] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 535.830680][T19469] ? __lock_acquire+0xb97/0x1ce0 [ 535.830703][T19469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 535.830715][T19469] ? do_raw_spin_lock+0x12c/0x2b0 [ 535.830728][T19469] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.830740][T19469] ? find_held_lock+0x2b/0x80 [ 535.830757][T19469] ? __lock_acquire+0xb97/0x1ce0 [ 535.830774][T19469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 535.830789][T19469] ? policy_nodemask+0xea/0x4e0 [ 535.830803][T19469] alloc_pages_mpol+0x1fb/0x550 [ 535.830817][T19469] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 535.830834][T19469] folio_alloc_mpol_noprof+0x36/0x2f0 [ 535.830850][T19469] shmem_alloc_folio+0x135/0x160 [ 535.830868][T19469] shmem_alloc_and_add_folio+0x499/0xc20 [ 535.830893][T19469] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 535.830913][T19469] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 535.830928][T19469] shmem_get_folio_gfp+0x67f/0x1600 [ 535.830942][T19469] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 535.830955][T19469] ? filemap_map_pages+0xf58/0x1670 [ 535.830968][T19469] shmem_fault+0x1fe/0xa30 [ 535.830980][T19469] ? __pfx_shmem_fault+0x10/0x10 [ 535.830993][T19469] ? __pfx_filemap_map_pages+0x10/0x10 [ 535.831009][T19469] ? __pfx_filemap_map_pages+0x10/0x10 [ 535.831020][T19469] __do_fault+0x10a/0x490 [ 535.831033][T19469] ? __pfx_filemap_map_pages+0x10/0x10 [ 535.831044][T19469] do_pte_missing+0xf50/0x3ba0 [ 535.831061][T19469] ? find_held_lock+0x2b/0x80 [ 535.831075][T19469] ? __handle_mm_fault+0x14fd/0x2a50 [ 535.831094][T19469] __handle_mm_fault+0x152a/0x2a50 [ 535.831115][T19469] ? __pfx___handle_mm_fault+0x10/0x10 [ 535.831133][T19469] ? __pte_offset_map_lock+0x174/0x310 [ 535.831148][T19469] ? find_held_lock+0x2b/0x80 [ 535.831165][T19469] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 535.831184][T19469] handle_mm_fault+0x589/0xd10 [ 535.831204][T19469] __get_user_pages+0x551/0x34a0 [ 535.831224][T19469] ? __pfx___get_user_pages+0x10/0x10 [ 535.831243][T19469] populate_vma_page_range+0x267/0x3f0 [ 535.831260][T19469] ? __pfx_populate_vma_page_range+0x10/0x10 [ 535.831276][T19469] ? __pfx_find_vma_intersection+0x10/0x10 [ 535.831291][T19469] ? do_mmap+0x69c/0x1210 [ 535.831307][T19469] __mm_populate+0x1d8/0x380 [ 535.831323][T19469] ? __pfx___mm_populate+0x10/0x10 [ 535.831339][T19469] ? up_write+0x1b2/0x520 [ 535.831352][T19469] vm_mmap_pgoff+0x37f/0x470 [ 535.831367][T19469] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 535.831383][T19469] ? __fget_files+0x20e/0x3c0 [ 535.831400][T19469] ksys_mmap_pgoff+0x7d/0x5c0 [ 535.831413][T19469] ? __pfx_ksys_write+0x10/0x10 [ 535.831427][T19469] __x64_sys_mmap+0x125/0x190 [ 535.831440][T19469] do_syscall_64+0xcd/0x4e0 [ 535.831456][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.831468][T19469] RIP: 0033:0x7f5cb238eec9 [ 535.831477][T19469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.831489][T19469] RSP: 002b:00007f5cb32f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 535.831500][T19469] RAX: ffffffffffffffda RBX: 00007f5cb25e5fa0 RCX: 00007f5cb238eec9 [ 535.831507][T19469] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 535.831514][T19469] RBP: 00007f5cb32f4090 R08: 0000000000000003 R09: 0000000028f41000 [ 535.831521][T19469] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 535.831527][T19469] R13: 00007f5cb25e6038 R14: 00007f5cb25e5fa0 R15: 00007ffe29cd3f08 [ 535.831541][T19469] [ 536.211953][T19482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.313110][T19482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.326690][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4327'. [ 536.361855][T19493] fuse: Unknown parameter '0x0000000000000004' [ 536.396121][T19482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.402528][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4329'. [ 536.458236][T19482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.530067][T19500] FAULT_INJECTION: forcing a failure. [ 536.530067][T19500] name failslab, interval 1, probability 0, space 0, times 0 [ 536.536013][T19500] CPU: 1 UID: 0 PID: 19500 Comm: syz.6.4331 Not tainted syzkaller #0 PREEMPT(full) [ 536.536038][T19500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 536.536050][T19500] Call Trace: [ 536.536056][T19500] [ 536.536063][T19500] dump_stack_lvl+0x16c/0x1f0 [ 536.536091][T19500] should_fail_ex+0x512/0x640 [ 536.536113][T19500] ? fs_reclaim_acquire+0xae/0x150 [ 536.536139][T19500] should_failslab+0xc2/0x120 [ 536.536161][T19500] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 536.536182][T19500] ? security_inode_alloc+0x3b/0x2b0 [ 536.536210][T19500] security_inode_alloc+0x3b/0x2b0 [ 536.536234][T19500] inode_init_always_gfp+0xce4/0x1030 [ 536.536259][T19500] ? __pfx_fuse_inode_set+0x10/0x10 [ 536.536283][T19500] alloc_inode+0x86/0x240 [ 536.536308][T19500] iget5_locked+0x338/0x3d0 [ 536.536333][T19500] ? __pfx_fuse_inode_eq+0x10/0x10 [ 536.536359][T19500] ? __pfx_fuse_inode_set+0x10/0x10 [ 536.536386][T19500] ? __pfx_iget5_locked+0x10/0x10 [ 536.536415][T19500] ? kasan_quarantine_put+0x10a/0x240 [ 536.536433][T19500] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.536461][T19500] fuse_iget+0x165/0x8e0 [ 536.536482][T19500] ? __pfx_fuse_iget+0x10/0x10 [ 536.536501][T19500] ? __fuse_simple_request+0x465/0xcb0 [ 536.536529][T19500] fuse_lookup_name+0x481/0x780 [ 536.536551][T19500] ? __pfx_fuse_lookup_name+0x10/0x10 [ 536.536566][T19500] ? find_held_lock+0x2b/0x80 [ 536.536622][T19500] fuse_lookup+0x26a/0x560 [ 536.536673][T19500] ? __pfx_fuse_lookup+0x10/0x10 [ 536.536691][T19500] ? d_alloc_parallel+0x828/0x1480 [ 536.536727][T19500] ? __pfx_d_alloc_parallel+0x10/0x10 [ 536.536759][T19500] fuse_atomic_open+0x2cd/0x470 [ 536.536777][T19500] ? __pfx_fuse_atomic_open+0x10/0x10 [ 536.536795][T19500] lookup_open.isra.0+0x83d/0x1580 [ 536.536819][T19500] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 536.536852][T19500] ? mnt_get_write_access+0x20c/0x300 [ 536.536883][T19500] path_openat+0x893/0x2cb0 [ 536.536912][T19500] ? __pfx_path_openat+0x10/0x10 [ 536.536934][T19500] ? __lock_acquire+0xb97/0x1ce0 [ 536.536964][T19500] do_filp_open+0x20b/0x470 [ 536.536985][T19500] ? __pfx_do_filp_open+0x10/0x10 [ 536.537024][T19500] ? _raw_spin_unlock+0x28/0x50 [ 536.537044][T19500] ? alloc_fd+0x471/0x7d0 [ 536.537070][T19500] do_sys_openat2+0x11b/0x1d0 [ 536.537093][T19500] ? __pfx_do_sys_openat2+0x10/0x10 [ 536.537118][T19500] ? __fget_files+0x20e/0x3c0 [ 536.537141][T19500] __x64_sys_open+0x153/0x1e0 [ 536.537163][T19500] ? __pfx___x64_sys_open+0x10/0x10 [ 536.537190][T19500] ? rcu_is_watching+0x12/0xc0 [ 536.537214][T19500] do_syscall_64+0xcd/0x4e0 [ 536.537260][T19500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.537280][T19500] RIP: 0033:0x7f5cb238eec9 [ 536.537296][T19500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.537313][T19500] RSP: 002b:00007f5cb32d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 536.537331][T19500] RAX: ffffffffffffffda RBX: 00007f5cb25e6090 RCX: 00007f5cb238eec9 [ 536.537343][T19500] RDX: 0000000000000040 RSI: 0000000000001802 RDI: 00002000000001c0 [ 536.537354][T19500] RBP: 00007f5cb32d3090 R08: 0000000000000000 R09: 0000000000000000 [ 536.537365][T19500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.537376][T19500] R13: 00007f5cb25e6128 R14: 00007f5cb25e6090 R15: 00007ffe29cd3f08 [ 536.537400][T19500] [ 536.647325][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.674827][ T84] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.701828][ T84] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.705431][ T84] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.707919][ T84] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.813813][T19508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4334'. [ 536.841614][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 536.896988][T19513] FAULT_INJECTION: forcing a failure. [ 536.896988][T19513] name failslab, interval 1, probability 0, space 0, times 0 [ 536.903447][T19513] CPU: 2 UID: 0 PID: 19513 Comm: syz.5.4336 Not tainted syzkaller #0 PREEMPT(full) [ 536.903463][T19513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 536.903470][T19513] Call Trace: [ 536.903475][T19513] [ 536.903480][T19513] dump_stack_lvl+0x16c/0x1f0 [ 536.903499][T19513] should_fail_ex+0x512/0x640 [ 536.903514][T19513] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 536.903528][T19513] should_failslab+0xc2/0x120 [ 536.903541][T19513] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 536.903553][T19513] ? __alloc_skb+0x2b2/0x380 [ 536.903569][T19513] __alloc_skb+0x2b2/0x380 [ 536.903581][T19513] ? __pfx___alloc_skb+0x10/0x10 [ 536.903596][T19513] ? find_held_lock+0x2b/0x80 [ 536.903612][T19513] alloc_skb_with_frags+0xe0/0x860 [ 536.903627][T19513] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.903644][T19513] ? is_bpf_text_address+0x94/0x1a0 [ 536.903658][T19513] sock_alloc_send_pskb+0x7fb/0x990 [ 536.903676][T19513] ? arch_stack_walk+0xa6/0x100 [ 536.903702][T19513] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 536.903719][T19513] ? __lock_acquire+0xb97/0x1ce0 [ 536.903741][T19513] ? _parse_integer_limit+0x17f/0x1d0 [ 536.903758][T19513] ? __entry_text_end+0xf92eb/0x1020b9 [ 536.903780][T19513] ? _kstrtoull+0x145/0x200 [ 536.903795][T19513] ? __pfx__kstrtoull+0x10/0x10 [ 536.903808][T19513] tun_get_user+0x7f6/0x3ce0 [ 536.903832][T19513] ? __pfx_tun_get_user+0x10/0x10 [ 536.903850][T19513] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 536.903871][T19513] ? find_held_lock+0x2b/0x80 [ 536.903884][T19513] ? tun_get+0x191/0x370 [ 536.903903][T19513] tun_chr_write_iter+0xdc/0x210 [ 536.903924][T19513] vfs_write+0x7d0/0x11d0 [ 536.903937][T19513] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 536.903956][T19513] ? __pfx_vfs_write+0x10/0x10 [ 536.903966][T19513] ? find_held_lock+0x2b/0x80 [ 536.903988][T19513] ksys_write+0x12a/0x250 [ 536.903999][T19513] ? __pfx_ksys_write+0x10/0x10 [ 536.904015][T19513] do_syscall_64+0xcd/0x4e0 [ 536.904030][T19513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.904042][T19513] RIP: 0033:0x7fb99658d97f [ 536.904051][T19513] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 536.904062][T19513] RSP: 002b:00007fb9973b5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 536.904073][T19513] RAX: ffffffffffffffda RBX: 00007fb9967e5fa0 RCX: 00007fb99658d97f [ 536.904080][T19513] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 536.904087][T19513] RBP: 00007fb9973b5090 R08: 0000000000000000 R09: 0000000000000000 [ 536.904094][T19513] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 536.904100][T19513] R13: 00007fb9967e6038 R14: 00007fb9967e5fa0 R15: 00007ffe8d5221e8 [ 536.904114][T19513] [ 537.027330][T19518] fuse: Unknown parameter '0x0000000000000004' [ 537.097986][T19525] trusted_key: encrypted_key: master key parameter 'ec' is invalid [ 537.129785][ T40] audit: type=1400 audit(1758804703.096:1067): avc: denied { setopt } for pid=19526 comm="syz.5.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 537.202458][ T40] audit: type=1400 audit(1758804703.166:1068): avc: denied { mounton } for pid=19532 comm="syz.5.4344" path="/69/file0" dev="tmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 537.243886][T19537] uprobe: syz.6.4346:19537 failed to unregister, leaking uprobe [ 537.262394][ T40] audit: type=1400 audit(1758804703.226:1069): avc: denied { mounton } for pid=19532 comm="syz.5.4344" path="/69/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 537.322876][ T1462] usb 8-1: USB disconnect, device number 58 [ 537.327760][T19539] binder: 19536:19539 ioctl c0306201 200000000500 returned -14 [ 537.345736][ T40] audit: type=1400 audit(1758804703.316:1070): avc: denied { cmd } for pid=19540 comm="syz.3.4347" path="socket:[68119]" dev="sockfs" ino=68119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 537.436928][T19549] fuse: Unknown parameter 'fd0x0000000000000004' [ 537.479748][T19554] netlink: zone id is out of range [ 537.481884][T19554] netlink: get zone limit has 8 unknown bytes [ 537.486970][ T40] audit: type=1400 audit(1758804703.456:1071): avc: denied { execute } for pid=19553 comm="syz.5.4351" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=65895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 537.532841][ T5974] Bluetooth: hci3: command 0x041b tx timeout [ 538.111618][T19580] fuse: Unknown parameter 'fd0x0000000000000004' [ 538.213993][T19584] netlink: 'syz.6.4361': attribute type 1 has an invalid length. [ 538.271270][T19584] veth0_virt_wifi: entered promiscuous mode [ 538.274011][T19584] veth0_virt_wifi: entered allmulticast mode [ 538.668978][T19612] input: syz1 as /devices/virtual/input/input35 [ 539.052783][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.260645][T19624] __nla_validate_parse: 7 callbacks suppressed [ 539.260656][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4373'. [ 539.612752][T14829] Bluetooth: hci3: command 0x041b tx timeout [ 539.648742][ T40] audit: type=1400 audit(1758804705.616:1072): avc: denied { getopt } for pid=19638 comm="syz.6.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 539.878653][ T40] audit: type=1400 audit(1758804705.846:1073): avc: denied { getopt } for pid=19658 comm="syz.3.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 539.919263][T19662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59671 sclass=netlink_route_socket pid=19662 comm=syz.5.4386 [ 539.956176][ T40] audit: type=1400 audit(1758804705.916:1074): avc: denied { remove_name } for pid=19661 comm="syz.5.4386" name="file0" dev="9p" ino=71827631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.966549][ T40] audit: type=1400 audit(1758804705.916:1075): avc: denied { unlink } for pid=19661 comm="syz.5.4386" name="file0" dev="9p" ino=71827631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 539.978984][ T40] audit: type=1400 audit(1758804705.926:1076): avc: denied { setattr } for pid=19669 comm="syz.3.4387" path="socket:[66129]" dev="sockfs" ino=66129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 539.989509][ T40] audit: type=1400 audit(1758804705.926:1077): avc: denied { create } for pid=19661 comm="syz.5.4386" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 540.012163][T19673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4388'. [ 540.015231][T19673] tipc: Invalid UDP bearer configuration [ 540.015254][T19673] tipc: Enabling of bearer rejected, failed to enable media [ 540.094069][T19685] fuse: Unknown parameter '' [ 540.109613][ T40] audit: type=1400 audit(1758804706.076:1078): avc: denied { create } for pid=19686 comm="syz.6.4394" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 540.169540][ T40] audit: type=1400 audit(1758804706.136:1079): avc: denied { listen } for pid=19696 comm="syz.1.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.338835][ T40] audit: type=1400 audit(1758804706.306:1080): avc: denied { listen } for pid=19704 comm="syz.1.4401" lport=45091 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 540.347854][ T40] audit: type=1400 audit(1758804706.306:1081): avc: denied { accept } for pid=19704 comm="syz.1.4401" lport=45091 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 540.355989][ T40] audit: type=1400 audit(1758804706.306:1082): avc: denied { getopt } for pid=19704 comm="syz.1.4401" lport=45091 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 540.363307][ T1462] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 540.514677][ T1462] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 540.517759][ T1462] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 540.523675][ T1462] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.531942][ T1462] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 540.536220][ T1462] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.541239][ T1462] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.545422][ T1462] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.551660][ T1462] usb 10-1: config 0 descriptor?? [ 540.554835][T19690] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 540.660628][T19723] FAULT_INJECTION: forcing a failure. [ 540.660628][T19723] name failslab, interval 1, probability 0, space 0, times 0 [ 540.666062][T19723] CPU: 1 UID: 0 PID: 19723 Comm: syz.3.4405 Not tainted syzkaller #0 PREEMPT(full) [ 540.666105][T19723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.666114][T19723] Call Trace: [ 540.666120][T19723] [ 540.666126][T19723] dump_stack_lvl+0x16c/0x1f0 [ 540.666167][T19723] should_fail_ex+0x512/0x640 [ 540.666195][T19723] should_failslab+0xc2/0x120 [ 540.666212][T19723] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 540.666228][T19723] ? skb_clone+0x190/0x3f0 [ 540.666249][T19723] skb_clone+0x190/0x3f0 [ 540.666267][T19723] netlink_deliver_tap+0xabd/0xd30 [ 540.666291][T19723] netlink_unicast+0x71f/0x870 [ 540.666312][T19723] ? __pfx_netlink_unicast+0x10/0x10 [ 540.666332][T19723] ? genl_rcv_msg+0x4bb/0x800 [ 540.666359][T19723] netlink_ack+0x696/0xb80 [ 540.666388][T19723] netlink_rcv_skb+0x332/0x420 [ 540.666407][T19723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 540.666430][T19723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.666457][T19723] ? netlink_deliver_tap+0x1ae/0xd30 [ 540.666478][T19723] genl_rcv+0x28/0x40 [ 540.666497][T19723] netlink_unicast+0x5aa/0x870 [ 540.666519][T19723] ? __pfx_netlink_unicast+0x10/0x10 [ 540.666538][T19723] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 540.666563][T19723] netlink_sendmsg+0x8d1/0xdd0 [ 540.666585][T19723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.666612][T19723] ____sys_sendmsg+0xa98/0xc70 [ 540.666635][T19723] ? copy_msghdr_from_user+0x10a/0x160 [ 540.666652][T19723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.666685][T19723] ___sys_sendmsg+0x134/0x1d0 [ 540.666704][T19723] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.666747][T19723] __sys_sendmsg+0x16d/0x220 [ 540.666766][T19723] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.666797][T19723] do_syscall_64+0xcd/0x4e0 [ 540.666843][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.666858][T19723] RIP: 0033:0x7f8085f8eec9 [ 540.666870][T19723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.666884][T19723] RSP: 002b:00007f8086e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.666905][T19723] RAX: ffffffffffffffda RBX: 00007f80861e5fa0 RCX: 00007f8085f8eec9 [ 540.666915][T19723] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 540.666928][T19723] RBP: 00007f8086e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 540.666937][T19723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.666946][T19723] R13: 00007f80861e6038 R14: 00007f80861e5fa0 R15: 00007ffffd70e2c8 [ 540.666966][T19723] [ 540.754797][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.968214][ T1462] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 540.990240][ T1462] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 541.018907][ T5384] udevd[5384]: worker [18784] terminated by signal 33 (Unknown signal 33) [ 541.023298][ T5384] udevd[5384]: worker [18784] failed while handling '/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:047F:FFFF.0021/hidraw/hidraw1' [ 541.119950][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4408'. [ 541.227084][T19743] FAULT_INJECTION: forcing a failure. [ 541.227084][T19743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.233103][T19743] CPU: 3 UID: 0 PID: 19743 Comm: syz.6.4409 Not tainted syzkaller #0 PREEMPT(full) [ 541.233129][T19743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 541.233270][T19743] Call Trace: [ 541.233277][T19743] [ 541.233285][T19743] dump_stack_lvl+0x16c/0x1f0 [ 541.233316][T19743] should_fail_ex+0x512/0x640 [ 541.233344][T19743] _copy_from_user+0x2e/0xd0 [ 541.233373][T19743] kstrtouint_from_user+0xd6/0x1d0 [ 541.233395][T19743] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 541.233414][T19743] ? __lock_acquire+0xb97/0x1ce0 [ 541.233456][T19743] proc_fail_nth_write+0x83/0x220 [ 541.233481][T19743] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.233512][T19743] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.233533][T19743] vfs_write+0x29d/0x11d0 [ 541.233557][T19743] ? __pfx___mutex_lock+0x10/0x10 [ 541.233582][T19743] ? __pfx_vfs_write+0x10/0x10 [ 541.233610][T19743] ? __fget_files+0x20e/0x3c0 [ 541.233641][T19743] ksys_write+0x12a/0x250 [ 541.233661][T19743] ? __pfx_ksys_write+0x10/0x10 [ 541.233689][T19743] do_syscall_64+0xcd/0x4e0 [ 541.233717][T19743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.233738][T19743] RIP: 0033:0x7f5cb238d97f [ 541.233754][T19743] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 541.233774][T19743] RSP: 002b:00007f5cb32d3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 541.233793][T19743] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5cb238d97f [ 541.233805][T19743] RDX: 0000000000000001 RSI: 00007f5cb32d30a0 RDI: 0000000000000004 [ 541.233824][T19743] RBP: 00007f5cb32d3090 R08: 0000000000000000 R09: 0000000000000000 [ 541.233836][T19743] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 541.233848][T19743] R13: 00007f5cb25e6128 R14: 00007f5cb25e6090 R15: 00007ffe29cd3f08 [ 541.233875][T19743] [ 541.549169][T19749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4411'. [ 541.642796][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'. [ 541.693178][T14829] Bluetooth: hci3: command 0x041b tx timeout [ 542.402692][ T3359] usb 10-1: reset high-speed USB device number 4 using dummy_hcd [ 542.494640][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4416'. [ 542.495170][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4415'. [ 542.545280][T19768] FAULT_INJECTION: forcing a failure. [ 542.545280][T19768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.548597][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'. [ 542.549788][T19768] CPU: 2 UID: 0 PID: 19768 Comm: syz.3.4418 Not tainted syzkaller #0 PREEMPT(full) [ 542.549811][T19768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.549822][T19768] Call Trace: [ 542.549829][T19768] [ 542.549836][T19768] dump_stack_lvl+0x16c/0x1f0 [ 542.549871][T19768] should_fail_ex+0x512/0x640 [ 542.549898][T19768] should_fail_alloc_page+0xe7/0x130 [ 542.549921][T19768] prepare_alloc_pages+0x3c2/0x610 [ 542.549945][T19768] ? rcu_is_watching+0x12/0xc0 [ 542.549972][T19768] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 542.549992][T19768] ? __lock_acquire+0xb97/0x1ce0 [ 542.550031][T19768] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 542.550052][T19768] ? do_raw_spin_lock+0x12c/0x2b0 [ 542.550072][T19768] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 542.550091][T19768] ? find_held_lock+0x2b/0x80 [ 542.550121][T19768] ? __lock_acquire+0xb97/0x1ce0 [ 542.550152][T19768] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.550175][T19768] ? policy_nodemask+0xea/0x4e0 [ 542.550199][T19768] alloc_pages_mpol+0x1fb/0x550 [ 542.550222][T19768] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 542.550250][T19768] folio_alloc_mpol_noprof+0x36/0x2f0 [ 542.550276][T19768] shmem_alloc_folio+0x135/0x160 [ 542.550304][T19768] shmem_alloc_and_add_folio+0x499/0xc20 [ 542.550339][T19768] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 542.550370][T19768] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 542.550394][T19768] shmem_get_folio_gfp+0x67f/0x1600 [ 542.550418][T19768] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 542.550439][T19768] ? filemap_map_pages+0xf58/0x1670 [ 542.550462][T19768] shmem_fault+0x1fe/0xa30 [ 542.550481][T19768] ? __pfx_shmem_fault+0x10/0x10 [ 542.550504][T19768] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.550530][T19768] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.550547][T19768] __do_fault+0x10a/0x490 [ 542.550567][T19768] ? __pfx_filemap_map_pages+0x10/0x10 [ 542.550584][T19768] do_pte_missing+0xf50/0x3ba0 [ 542.550609][T19768] ? find_held_lock+0x2b/0x80 [ 542.550631][T19768] ? __handle_mm_fault+0x14fd/0x2a50 [ 542.550660][T19768] __handle_mm_fault+0x152a/0x2a50 [ 542.550695][T19768] ? __pfx___handle_mm_fault+0x10/0x10 [ 542.550725][T19768] ? __pte_offset_map_lock+0x174/0x310 [ 542.550748][T19768] ? find_held_lock+0x2b/0x80 [ 542.550777][T19768] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 542.550810][T19768] handle_mm_fault+0x589/0xd10 [ 542.550842][T19768] __get_user_pages+0x551/0x34a0 [ 542.550883][T19768] ? __pfx___get_user_pages+0x10/0x10 [ 542.550914][T19768] populate_vma_page_range+0x267/0x3f0 [ 542.550940][T19768] ? __pfx_populate_vma_page_range+0x10/0x10 [ 542.550964][T19768] ? __pfx_find_vma_intersection+0x10/0x10 [ 542.550989][T19768] ? do_mmap+0x69c/0x1210 [ 542.551014][T19768] __mm_populate+0x1d8/0x380 [ 542.551040][T19768] ? __pfx___mm_populate+0x10/0x10 [ 542.551067][T19768] ? up_write+0x1b2/0x520 [ 542.551089][T19768] vm_mmap_pgoff+0x37f/0x470 [ 542.551113][T19768] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 542.551138][T19768] ? __fget_files+0x20e/0x3c0 [ 542.551166][T19768] ksys_mmap_pgoff+0x7d/0x5c0 [ 542.551188][T19768] ? __pfx_ksys_write+0x10/0x10 [ 542.551210][T19768] __x64_sys_mmap+0x125/0x190 [ 542.551232][T19768] do_syscall_64+0xcd/0x4e0 [ 542.551258][T19768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.551276][T19768] RIP: 0033:0x7f8085f8eec9 [ 542.551291][T19768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.551309][T19768] RSP: 002b:00007f8086e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 542.551328][T19768] RAX: ffffffffffffffda RBX: 00007f80861e5fa0 RCX: 00007f8085f8eec9 [ 542.551340][T19768] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 542.551352][T19768] RBP: 00007f8086e0b090 R08: 0000000000000003 R09: 0000000028f41000 [ 542.551363][T19768] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 542.551374][T19768] R13: 00007f80861e6038 R14: 00007f80861e5fa0 R15: 00007ffffd70e2c8 [ 542.551400][T19768] [ 542.762734][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4423'. [ 542.806489][ T34] IPVS: starting estimator thread 0... [ 542.903021][T19793] IPVS: using max 45 ests per chain, 108000 per kthread [ 543.263470][T19826] netlink: 'syz.3.4436': attribute type 6 has an invalid length. [ 543.272895][T19826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=19826 comm=syz.3.4436 [ 543.278762][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4436'. [ 543.403158][T19842] CIFS mount error: No usable UNC path provided in device string! [ 543.403158][T19842] [ 543.406375][T19842] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 543.413996][T19844] gtp2: entered promiscuous mode [ 543.665783][ T1462] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 543.774618][T14829] Bluetooth: hci3: command 0x041b tx timeout [ 543.840662][T19889] FAULT_INJECTION: forcing a failure. [ 543.840662][T19889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.840671][ T1462] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 543.848116][T19889] CPU: 1 UID: 0 PID: 19889 Comm: syz.5.4457 Not tainted syzkaller #0 PREEMPT(full) [ 543.848139][T19889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 543.848149][T19889] Call Trace: [ 543.848155][T19889] [ 543.848162][T19889] dump_stack_lvl+0x16c/0x1f0 [ 543.848188][T19889] should_fail_ex+0x512/0x640 [ 543.848215][T19889] should_fail_alloc_page+0xe7/0x130 [ 543.848237][T19889] prepare_alloc_pages+0x3c2/0x610 [ 543.848258][T19889] ? rcu_is_watching+0x12/0xc0 [ 543.848282][T19889] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 543.848301][T19889] ? __lock_acquire+0xb97/0x1ce0 [ 543.848336][T19889] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 543.848355][T19889] ? do_raw_spin_lock+0x12c/0x2b0 [ 543.848373][T19889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 543.848391][T19889] ? find_held_lock+0x2b/0x80 [ 543.848419][T19889] ? __lock_acquire+0xb97/0x1ce0 [ 543.848444][T19889] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.848465][T19889] ? policy_nodemask+0xea/0x4e0 [ 543.848487][T19889] alloc_pages_mpol+0x1fb/0x550 [ 543.848507][T19889] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 543.848533][T19889] folio_alloc_mpol_noprof+0x36/0x2f0 [ 543.848557][T19889] shmem_alloc_folio+0x135/0x160 [ 543.848582][T19889] shmem_alloc_and_add_folio+0x499/0xc20 [ 543.848613][T19889] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 543.848650][T19889] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 543.848672][T19889] shmem_get_folio_gfp+0x67f/0x1600 [ 543.848695][T19889] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 543.848714][T19889] ? filemap_map_pages+0xf58/0x1670 [ 543.848735][T19889] shmem_fault+0x1fe/0xa30 [ 543.848754][T19889] ? __pfx_shmem_fault+0x10/0x10 [ 543.848775][T19889] ? __pfx_filemap_map_pages+0x10/0x10 [ 543.848800][T19889] ? __pfx_filemap_map_pages+0x10/0x10 [ 543.848816][T19889] __do_fault+0x10a/0x490 [ 543.848836][T19889] ? __pfx_filemap_map_pages+0x10/0x10 [ 543.848852][T19889] do_pte_missing+0xf50/0x3ba0 [ 543.848877][T19889] ? find_held_lock+0x2b/0x80 [ 543.848898][T19889] ? __handle_mm_fault+0x14fd/0x2a50 [ 543.848926][T19889] __handle_mm_fault+0x152a/0x2a50 [ 543.848958][T19889] ? __pfx___handle_mm_fault+0x10/0x10 [ 543.848984][T19889] ? __pte_offset_map_lock+0x174/0x310 [ 543.849005][T19889] ? find_held_lock+0x2b/0x80 [ 543.849031][T19889] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 543.849061][T19889] handle_mm_fault+0x589/0xd10 [ 543.849091][T19889] __get_user_pages+0x551/0x34a0 [ 543.849123][T19889] ? __pfx___get_user_pages+0x10/0x10 [ 543.849151][T19889] populate_vma_page_range+0x267/0x3f0 [ 543.849198][T19889] ? __pfx_populate_vma_page_range+0x10/0x10 [ 543.849221][T19889] ? __pfx_find_vma_intersection+0x10/0x10 [ 543.849242][T19889] ? do_mmap+0x69c/0x1210 [ 543.849266][T19889] __mm_populate+0x1d8/0x380 [ 543.849290][T19889] ? __pfx___mm_populate+0x10/0x10 [ 543.849315][T19889] ? up_write+0x1b2/0x520 [ 543.849334][T19889] vm_mmap_pgoff+0x37f/0x470 [ 543.849358][T19889] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 543.849380][T19889] ? __fget_files+0x20e/0x3c0 [ 543.849406][T19889] ksys_mmap_pgoff+0x7d/0x5c0 [ 543.849426][T19889] ? __pfx_ksys_write+0x10/0x10 [ 543.849446][T19889] __x64_sys_mmap+0x125/0x190 [ 543.849467][T19889] do_syscall_64+0xcd/0x4e0 [ 543.849491][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.849508][T19889] RIP: 0033:0x7fb99658eec9 [ 543.849523][T19889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.849539][T19889] RSP: 002b:00007fb9973b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 543.849555][T19889] RAX: ffffffffffffffda RBX: 00007fb9967e5fa0 RCX: 00007fb99658eec9 [ 543.849566][T19889] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 543.849577][T19889] RBP: 00007fb9973b5090 R08: 0000000000000003 R09: 0000000028f41000 [ 543.849587][T19889] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 543.849597][T19889] R13: 00007fb9967e6038 R14: 00007fb9967e5fa0 R15: 00007ffe8d5221e8 [ 543.849625][T19889] [ 543.861053][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 543.954656][ T6256] usb 10-1: USB disconnect, device number 4 [ 543.998245][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.001702][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.005120][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.007899][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.012005][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.032471][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.035392][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.039294][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.042246][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.045315][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.049965][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.053069][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.056138][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.059911][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.064506][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.067393][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.070967][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.074162][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.077508][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.081357][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.086001][ T1462] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 544.089712][ T1462] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 544.093619][ T1462] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.098172][ T1462] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 544.100946][ T1462] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 544.104097][ T1462] usb 8-1: Product: syz [ 544.105541][ T1462] usb 8-1: Manufacturer: syz [ 544.107345][ T1462] usb 8-1: SerialNumber: syz [ 544.112259][ T1462] usb 8-1: config 0 descriptor?? [ 544.135635][ T1462] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 544.243119][ T9569] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 544.322852][T15423] usb 8-1: USB disconnect, device number 59 [ 544.340485][T15423] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 544.429746][ T9569] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 544.433644][ T9569] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.438184][ T9569] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 544.442430][ T9569] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 544.448085][ T9569] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 544.454198][ T9569] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 544.457972][ T9569] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.463447][ T9569] usb 11-1: config 0 descriptor?? [ 544.473834][T19903] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 544.556066][T19929] __nla_validate_parse: 1 callbacks suppressed [ 544.556080][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4471'. [ 544.897769][ T9569] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 544.909096][ T9569] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 545.124664][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 545.124726][ T40] audit: type=1326 audit(1758804711.096:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.3.4472" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8085f8eec9 code=0x0 [ 545.166227][ T6256] usb 11-1: USB disconnect, device number 2 [ 545.273307][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4473'. [ 545.276065][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4473'. [ 545.281429][T19937] Bluetooth: MGMT ver 1.23 [ 545.282948][T19937] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 545.285985][T19937] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4473'. [ 545.314665][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4474'. [ 545.372565][ T40] audit: type=1400 audit(1758804711.336:1095): avc: denied { read write } for pid=19940 comm="syz.1.4475" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 545.376198][T19942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=19942 comm=syz.5.4474 [ 545.380016][ T40] audit: type=1400 audit(1758804711.336:1096): avc: denied { open } for pid=19940 comm="syz.1.4475" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 545.532056][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4479'. [ 545.701078][ T40] audit: type=1400 audit(1758804711.666:1097): avc: denied { getopt } for pid=19962 comm="syz.1.4485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.707448][ T40] audit: type=1400 audit(1758804711.666:1098): avc: denied { getopt } for pid=19961 comm="syz.6.4484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 545.822491][ T40] audit: type=1400 audit(1758804711.786:1099): avc: denied { write } for pid=19968 comm="syz.6.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 546.030851][T19986] gretap1: entered promiscuous mode [ 546.044610][T19988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4493'. [ 546.123914][ T40] audit: type=1400 audit(1758804712.096:1100): avc: denied { read } for pid=19992 comm="syz.3.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 546.144562][T19995] fuse: Bad value for 'fd' [ 546.258662][T20001] fuse: Unknown parameter '0x0000000000000006' [ 546.371560][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4499'. [ 547.334606][ T40] audit: type=1400 audit(1758804713.306:1101): avc: denied { setopt } for pid=20060 comm="syz.3.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 547.360205][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4516'. [ 547.421999][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4518'. [ 547.461353][T20074] netlink: 'syz.1.4519': attribute type 10 has an invalid length. [ 547.465846][T20074] team0: Device ipvlan1 failed to register rx_handler [ 547.664354][T14829] Bluetooth: Unexpected continuation frame (len 38) [ 547.664945][T20089] fuse: Bad value for 'user_id' [ 547.668561][T20089] fuse: Bad value for 'user_id' [ 547.932733][ T6256] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 548.085620][ T6256] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 548.088398][ T6256] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.090947][ T6256] usb 8-1: Product: syz [ 548.092265][ T6256] usb 8-1: Manufacturer: syz [ 548.093976][ T6256] usb 8-1: SerialNumber: syz [ 548.102816][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 548.252831][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 548.256595][ T34] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 548.259856][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.266723][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.269819][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.273530][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.277552][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 548.280341][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.345344][ T6256] rtl8150 8-1:1.0: couldn't reset the device [ 548.347378][ T6256] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 548.352025][ T6256] usb 8-1: USB disconnect, device number 60 [ 548.492779][ T34] usb 11-1: usb_control_msg returned -32 [ 548.494551][ T34] usbtmc 11-1:16.0: can't read capabilities [ 548.597620][ T40] audit: type=1400 audit(1758804714.566:1102): avc: denied { setopt } for pid=20109 comm="syz.5.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 548.922996][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 549.075122][ T9] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 549.078096][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.081922][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.085570][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 549.089371][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.093428][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.096704][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.101722][ T9] usb 10-1: config 0 descriptor?? [ 549.104277][T20121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 549.168826][ T40] audit: type=1400 audit(1758804715.136:1103): avc: denied { map } for pid=20125 comm="syz.3.4540" path="/proc/964/task" dev="proc" ino=69973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 549.197896][T20131] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_OUT returned 7 [ 549.450404][T20147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20147 comm=syz.1.4549 [ 549.520964][ T9] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 549.537172][ T9] plantronics 0003:047F:FFFF.0023: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 549.608674][T20159] __nla_validate_parse: 3 callbacks suppressed [ 549.608686][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4553'. [ 549.717272][ T1462] usb 10-1: USB disconnect, device number 5 [ 549.874424][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4559'. [ 550.623647][T20182] fuse: Bad value for 'user_id' [ 550.625324][T20182] fuse: Bad value for 'user_id' [ 550.662601][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'. [ 550.789721][T20189] could not allocate digest TFM handle rmd256-generic [ 550.873349][ T9579] usb 11-1: USB disconnect, device number 3 [ 550.891267][T20211] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4573'. [ 551.049181][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 551.049193][ T40] audit: type=1400 audit(1758804717.016:1105): avc: denied { read } for pid=20228 comm="syz.1.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 551.057593][ T40] audit: type=1400 audit(1758804717.016:1106): avc: denied { bind } for pid=20228 comm="syz.1.4582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.065700][ T40] audit: type=1400 audit(1758804717.016:1107): avc: denied { node_bind } for pid=20228 comm="syz.1.4582" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 551.261159][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4589'. [ 551.394896][T20266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4594'. [ 551.398778][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4594'. [ 551.404529][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4595'. [ 551.408147][T20268] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4595'. [ 551.588395][ T40] audit: type=1400 audit(1758804717.556:1108): avc: denied { connect } for pid=20283 comm="syz.5.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 551.615556][ T40] audit: type=1400 audit(1758804717.586:1109): avc: denied { create } for pid=20281 comm="syz.3.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 551.637707][ T40] audit: type=1400 audit(1758804717.606:1110): avc: denied { write } for pid=20283 comm="syz.5.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 551.718022][T20293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'. [ 551.751849][ T40] audit: type=1400 audit(1758804717.716:1111): avc: denied { create } for pid=20294 comm="syz.3.4603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 551.809014][T20298] FAULT_INJECTION: forcing a failure. [ 551.809014][T20298] name failslab, interval 1, probability 0, space 0, times 0 [ 551.814843][T20298] CPU: 3 UID: 0 PID: 20298 Comm: syz.3.4604 Not tainted syzkaller #0 PREEMPT(full) [ 551.814867][T20298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 551.814880][T20298] Call Trace: [ 551.814885][T20298] [ 551.814894][T20298] dump_stack_lvl+0x16c/0x1f0 [ 551.814950][T20298] should_fail_ex+0x512/0x640 [ 551.814984][T20298] should_failslab+0xc2/0x120 [ 551.815008][T20298] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 551.815030][T20298] ? skb_clone+0x190/0x3f0 [ 551.815058][T20298] skb_clone+0x190/0x3f0 [ 551.815082][T20298] netlink_deliver_tap+0xabd/0xd30 [ 551.815112][T20298] netlink_unicast+0x64c/0x870 [ 551.815138][T20298] ? __pfx_netlink_unicast+0x10/0x10 [ 551.815160][T20298] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 551.815192][T20298] netlink_sendmsg+0x8d1/0xdd0 [ 551.815219][T20298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.815253][T20298] ____sys_sendmsg+0xa98/0xc70 [ 551.815280][T20298] ? copy_msghdr_from_user+0x10a/0x160 [ 551.815302][T20298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.815340][T20298] ___sys_sendmsg+0x134/0x1d0 [ 551.815364][T20298] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.815419][T20298] __sys_sendmsg+0x16d/0x220 [ 551.815441][T20298] ? __pfx___sys_sendmsg+0x10/0x10 [ 551.815480][T20298] do_syscall_64+0xcd/0x4e0 [ 551.815513][T20298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.815531][T20298] RIP: 0033:0x7f8085f8eec9 [ 551.815547][T20298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.815564][T20298] RSP: 002b:00007f8086e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.815590][T20298] RAX: ffffffffffffffda RBX: 00007f80861e5fa0 RCX: 00007f8085f8eec9 [ 551.815602][T20298] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 551.815613][T20298] RBP: 00007f8086e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 551.815624][T20298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.815635][T20298] R13: 00007f80861e6038 R14: 00007f80861e5fa0 R15: 00007ffffd70e2c8 [ 551.815660][T20298] [ 553.028459][ T40] audit: type=1400 audit(1758804718.996:1112): avc: denied { lock } for pid=20341 comm="syz.6.4621" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 553.057312][ T40] audit: type=1400 audit(1758804719.026:1113): avc: denied { map } for pid=20338 comm="syz.3.4620" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 553.099057][ T40] audit: type=1400 audit(1758804719.066:1114): avc: denied { unmount } for pid=15146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 553.171940][T20355] kvm: pic: non byte read [ 553.175510][T20355] kvm: pic: level sensitive irq not supported [ 553.175764][T20355] kvm: pic: non byte read [ 553.180304][T20355] kvm: pic: level sensitive irq not supported [ 553.180549][T20355] kvm: pic: non byte read [ 553.185457][T20355] kvm: pic: level sensitive irq not supported [ 553.185690][T20355] kvm: pic: non byte read [ 553.190159][T20355] kvm: pic: level sensitive irq not supported [ 553.190388][T20355] kvm: pic: non byte read [ 553.194925][T20355] kvm: pic: level sensitive irq not supported [ 553.195155][T20355] kvm: pic: non byte read [ 553.199562][T20355] kvm: pic: level sensitive irq not supported [ 553.199796][T20355] kvm: pic: non byte read [ 553.204344][T20355] kvm: pic: level sensitive irq not supported [ 553.204575][T20355] kvm: pic: non byte read [ 553.208966][T20355] kvm: pic: level sensitive irq not supported [ 553.209205][T20355] kvm: pic: non byte read [ 553.291963][T20372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61762 sclass=netlink_route_socket pid=20372 comm=syz.1.4632 [ 553.470862][T20376] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 553.483524][T20376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.495031][T20376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.497974][T20376] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 553.503189][T20376] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 553.532735][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 553.542708][T20377] gretap1: entered promiscuous mode [ 553.548054][T20377] bond1: (slave gretap1): making interface the new active one [ 553.550755][T20377] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 553.557476][T20378] macvlan2: entered promiscuous mode [ 553.559018][T20378] macvlan2: entered allmulticast mode [ 553.560901][T20378] bond1: entered promiscuous mode [ 553.564024][T20378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.568742][T20378] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 553.576176][T20378] bond1: left promiscuous mode [ 553.596446][T20377] macvlan2: entered promiscuous mode [ 553.598720][T20377] macvlan2: entered allmulticast mode [ 553.601493][T20377] bond1: entered promiscuous mode [ 553.604271][T20377] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.609217][T20377] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 553.617273][T20377] bond1: left promiscuous mode [ 553.692775][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 553.699869][ T34] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 553.702418][ T34] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 553.704866][ T34] usb 11-1: Product: syz [ 553.706105][ T34] usb 11-1: Manufacturer: syz [ 553.707403][ T34] usb 11-1: SerialNumber: syz [ 553.710329][ T34] usb 11-1: config 0 descriptor?? [ 553.914913][ T34] usb 11-1: USB disconnect, device number 4 [ 554.273676][T14829] Bluetooth: hci1: unexpected event 0x01 length: 6 > 1 [ 554.756870][T20423] __nla_validate_parse: 3 callbacks suppressed [ 554.756886][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4647'. [ 554.854164][T20427] FAULT_INJECTION: forcing a failure. [ 554.854164][T20427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.859458][T20427] CPU: 0 UID: 0 PID: 20427 Comm: syz.5.4649 Not tainted syzkaller #0 PREEMPT(full) [ 554.859480][T20427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 554.859490][T20427] Call Trace: [ 554.859498][T20427] [ 554.859505][T20427] dump_stack_lvl+0x16c/0x1f0 [ 554.859552][T20427] should_fail_ex+0x512/0x640 [ 554.859585][T20427] _copy_to_user+0x32/0xd0 [ 554.859611][T20427] simple_read_from_buffer+0xcb/0x170 [ 554.859631][T20427] proc_fail_nth_read+0x197/0x240 [ 554.859652][T20427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.859674][T20427] ? rw_verify_area+0xcf/0x6c0 [ 554.859700][T20427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.859720][T20427] vfs_read+0x1e4/0xcf0 [ 554.859741][T20427] ? __pfx___mutex_lock+0x10/0x10 [ 554.859773][T20427] ? __pfx_vfs_read+0x10/0x10 [ 554.859797][T20427] ? __fget_files+0x20e/0x3c0 [ 554.859823][T20427] ksys_read+0x12a/0x250 [ 554.859840][T20427] ? __pfx_ksys_read+0x10/0x10 [ 554.859864][T20427] do_syscall_64+0xcd/0x4e0 [ 554.859889][T20427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.859907][T20427] RIP: 0033:0x7fb99658d8dc [ 554.859920][T20427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 554.859937][T20427] RSP: 002b:00007fb9973b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.859953][T20427] RAX: ffffffffffffffda RBX: 00007fb9967e5fa0 RCX: 00007fb99658d8dc [ 554.859965][T20427] RDX: 000000000000000f RSI: 00007fb9973b50a0 RDI: 0000000000000004 [ 554.859975][T20427] RBP: 00007fb9973b5090 R08: 0000000000000000 R09: 0000000000000000 [ 554.859985][T20427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.859995][T20427] R13: 00007fb9967e6038 R14: 00007fb9967e5fa0 R15: 00007ffe8d5221e8 [ 554.860018][T20427] [ 555.206795][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4652'. [ 555.230865][T20442] cgroup: Name too long [ 555.321844][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4656'. [ 555.369732][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4657'. [ 556.102221][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4663'. [ 556.216698][T20483] 9pnet_fd: Insufficient options for proto=fd [ 556.321316][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4678'. [ 556.356170][T20506] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4680'. [ 556.359068][T20504] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 556.365711][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 556.365724][ T40] audit: type=1400 audit(1758804722.336:1116): avc: denied { validate_trans } for pid=20505 comm="syz.6.4680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 556.382091][T20506] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 556.642728][ T9] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 556.792758][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 556.795746][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 556.798512][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.801577][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.804814][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 556.808309][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 556.811786][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.815919][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 556.818746][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.032760][ T9] usb 8-1: usb_control_msg returned -32 [ 557.034570][ T9] usbtmc 8-1:16.0: can't read capabilities [ 557.190822][ T40] audit: type=1400 audit(1758804723.156:1117): avc: denied { mount } for pid=20531 comm="syz.5.4688" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 557.219583][T20535] tmpfs: Bad value for 'mpol' [ 557.319881][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4694'. [ 557.426240][T20564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=20564 comm=syz.1.4699 [ 557.430727][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4699'. [ 557.435049][T20564] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4699'. [ 558.475426][ T40] audit: type=1400 audit(1758804724.446:1118): avc: denied { associate } for pid=20603 comm="syz.1.4710" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 558.715402][ T40] audit: type=1400 audit(1758804724.686:1119): avc: denied { name_bind } for pid=20607 comm="syz.1.4712" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 559.068609][T20638] kvm: vcpu 0: requested 4 ns lapic timer period limited to 200000 ns [ 559.071380][T20638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=134217728 (268435456 ns) > initial count (200000 ns). Using initial count to start timer. [ 559.124298][T20639] kvm: pic: non byte write [ 559.430631][ T6256] usb 8-1: USB disconnect, device number 61 [ 559.510508][ T40] audit: type=1400 audit(1758804725.476:1120): avc: denied { accept } for pid=20684 comm="syz.1.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 559.580253][T20695] program syz.6.4737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.683800][ T40] audit: type=1400 audit(1758804725.656:1121): avc: denied { setattr } for pid=20707 comm="syz.6.4742" name="ubi_ctrl" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 559.685411][T20708] openvswitch: netlink: IP tunnel dst address not specified [ 559.776794][ T40] audit: type=1400 audit(1758804725.746:1122): avc: denied { kexec_image_load } for pid=20715 comm="syz.6.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 559.777441][T20716] __nla_validate_parse: 8 callbacks suppressed [ 559.777451][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4745'. [ 559.885465][ T40] audit: type=1400 audit(1758804725.856:1123): avc: denied { open } for pid=20734 comm="syz.3.4752" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 559.894793][ T40] audit: type=1400 audit(1758804725.856:1124): avc: denied { ioctl } for pid=20734 comm="syz.3.4752" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 560.149216][T20748] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 560.228526][T20763] overlayfs: failed to clone upperpath [ 560.233191][ T40] audit: type=1400 audit(1758804726.206:1125): avc: denied { create } for pid=20765 comm="syz.6.4762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 560.259295][T20769] program syz.6.4763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.290508][T20780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.296178][T20780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.300138][T20780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.303662][T20780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.511117][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4774'. [ 560.580162][T20803] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 560.607342][T20799] hsr_slave_1 (unregistering): left promiscuous mode [ 560.742754][ T9569] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 560.871008][T20826] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4783'. [ 560.901637][ T9569] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 560.908110][ T9569] usb 8-1: config 1 has no interface number 0 [ 560.910597][ T9569] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 560.915442][ T9569] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 560.923138][ T9569] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 560.926128][ T9569] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.940468][ T9569] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 560.946629][ T9569] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.949376][ T9569] usb 8-1: Product: syz [ 560.950710][ T9569] usb 8-1: Manufacturer: syz [ 560.952154][ T9569] usb 8-1: SerialNumber: syz [ 560.965105][T20797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 560.968017][T20797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 561.191309][T20844] syz_tun: entered allmulticast mode [ 561.194486][T20844] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 561.197878][T20844] mroute: pending queue full, dropping entries [ 561.200062][T20844] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 561.202736][T20844] mroute: pending queue full, dropping entries [ 561.217139][T20844] netlink: 6296 bytes leftover after parsing attributes in process `syz.5.4790'. [ 561.219970][T20844] ksmbd: Unknown IPC event: 1, ignore. [ 561.228304][T20843] syz_tun: left allmulticast mode [ 561.381526][ T9569] usb 8-1: Error in usbnet_get_endpoints (-71) [ 561.385881][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 561.385891][ T40] audit: type=1400 audit(1758804727.346:1132): avc: denied { mount } for pid=20796 comm="syz.3.4773" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 561.388916][ T9569] usb 8-1: USB disconnect, device number 62 [ 561.395315][ T40] audit: type=1400 audit(1758804727.356:1133): avc: denied { search } for pid=20796 comm="syz.3.4773" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 561.404561][ T40] audit: type=1400 audit(1758804727.356:1134): avc: denied { search } for pid=20796 comm="syz.3.4773" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 561.413624][ T40] audit: type=1400 audit(1758804727.356:1135): avc: denied { read open } for pid=20796 comm="syz.3.4773" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 562.738043][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.740617][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.052855][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.898104][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4793'. [ 573.902883][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4793'. [ 573.908241][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4793'. [ 573.912286][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4793'. [ 573.919218][T20878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4792'. [ 573.971775][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4801'. [ 573.978560][T20901] vlan2: entered promiscuous mode [ 573.980253][T20901] gretap0: entered promiscuous mode [ 574.012517][T20906] tmpfs: Unknown parameter 'grpquota2 }Kyx&UKN0#ɳ^/%o}UC7CfH$ҩ-Sp8*C*3E' [ 574.023699][T20905] comedi comedi3: Buffer allocation failed [ 574.100564][T20898] team0: Port device team_slave_0 removed [ 574.107271][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4803'. [ 574.135998][T20916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.166880][ T9569] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 574.227052][T20932] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 574.239204][T20932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4813'. [ 574.312867][ T9569] usb 11-1: Using ep0 maxpacket: 16 [ 574.321741][ T9569] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 574.325129][ T9569] usb 11-1: config 0 has no interface number 0 [ 574.327716][ T9569] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.332262][ T9569] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 574.339242][ T9569] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 574.342265][ T40] audit: type=1400 audit(1758804740.306:1136): avc: denied { bind } for pid=20938 comm="syz.3.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 574.342402][ T9569] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 574.351394][ T40] audit: type=1400 audit(1758804740.316:1137): avc: denied { listen } for pid=20938 comm="syz.3.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 574.353755][ T9569] usb 11-1: Product: syz [ 574.361894][ T9569] usb 11-1: SerialNumber: syz [ 574.366163][ T9569] usb 11-1: config 0 descriptor?? [ 574.372109][ T9569] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 574.375773][ T9569] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input40 [ 574.592056][ C0] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 574.594414][ T6038] usb 11-1: USB disconnect, device number 5 [ 574.594937][ C0] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 574.605154][ T6038] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 574.783822][T20970] netlink: 'syz.5.4822': attribute type 29 has an invalid length. [ 574.937172][T20977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4826'. [ 574.950756][T20981] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4828'. [ 575.552768][ T6038] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 575.590388][T21001] input: syz1 as /devices/virtual/input/input41 [ 575.592831][T21001] input: failed to attach handler leds to device input41, error: -6 [ 575.705986][ T6038] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 575.708453][ T6038] usb 11-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 575.711741][ T6038] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 575.716431][ T6038] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.719092][ T6038] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.725661][ T6038] usb 11-1: config 0 descriptor?? [ 575.734329][ T6038] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 575.795063][ T40] audit: type=1326 audit(1758804741.766:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21032 comm="syz.5.4845" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb99658eec9 code=0x0 [ 575.897443][T21040] macsec0: entered promiscuous mode [ 575.899199][T21040] macsec0: entered allmulticast mode [ 575.900908][T21040] veth1_macvtap: entered allmulticast mode [ 575.907719][ T40] audit: type=1400 audit(1758804741.876:1139): avc: denied { create } for pid=21041 comm="syz.1.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 575.908727][T21042] netlink: 'syz.1.4848': attribute type 1 has an invalid length. [ 575.916598][ T40] audit: type=1400 audit(1758804741.876:1140): avc: denied { write } for pid=21041 comm="syz.1.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 575.940158][T21042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.943900][T21042] bond3: (slave bond4): making interface the new active one [ 575.946456][T21042] bond3: (slave bond4): Enslaving as an active interface with an up link [ 575.954094][T21042] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.958897][T21042] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 576.000901][T21047] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 576.015910][T21047] CUSE: unknown device info "&b%ZW)3\my " [ 576.019350][T21047] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 576.023857][T21047] CUSE: DEVNAME unspecified [ 576.258463][ T40] audit: type=1400 audit(1758804742.226:1141): avc: denied { read } for pid=21056 comm="syz.5.4852" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 576.265886][ T40] audit: type=1400 audit(1758804742.226:1142): avc: denied { open } for pid=21056 comm="syz.5.4852" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 576.274112][ T40] audit: type=1400 audit(1758804742.226:1143): avc: denied { ioctl } for pid=21056 comm="syz.5.4852" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 576.339744][T21069] netlink: 'syz.3.4856': attribute type 10 has an invalid length. [ 576.346518][T21069] team0: Device hsr_slave_0 failed to register rx_handler [ 576.435013][T21080] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 576.440716][T21080] exFAT-fs (nullb0): invalid boot record signature [ 576.442907][T21080] exFAT-fs (nullb0): failed to read boot sector [ 576.445023][T21080] exFAT-fs (nullb0): failed to recognize exfat type [ 576.453786][T21080] overlayfs: workdir and upperdir must be separate subtrees [ 576.601226][T21087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.605114][T21087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.628212][T21092] macvlan2: entered allmulticast mode [ 576.629984][T21092] veth1_vlan: entered allmulticast mode [ 576.636833][T21093] macvlan3: entered allmulticast mode [ 576.672545][T21087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.676957][T21087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.746213][T21087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.749368][T21087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.835376][T21087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.838661][T21087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.920954][T20855] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.924279][T20855] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.933256][T20855] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.936159][T20855] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.946186][T20863] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.949904][T20863] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.956094][T20855] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.959489][T20855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.524063][T21145] ntfs3(sr0): Primary boot signature is not NTFS. [ 577.526743][T21145] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 577.674354][ T40] audit: type=1400 audit(1758804743.646:1144): avc: denied { getattr } for pid=21147 comm="syz.5.4884" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 577.783420][T21154] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 577.786692][T21154] SELinux: failed to load policy [ 577.890300][T21156] netlink: 'syz.5.4887': attribute type 1 has an invalid length. [ 577.968457][T21156] binder: 21155:21156 ioctl c0306201 200000000080 returned -14 [ 577.972929][T21156] binder: 21155:21156 ioctl c0306201 200000000080 returned -14 [ 577.975513][T21156] binder: 21155:21156 ioctl c0306201 200000000080 returned -14 [ 578.044067][T21169] binfmt_misc: register: failed to install interpreter file ./file0 [ 578.047229][T21170] binfmt_misc: register: failed to install interpreter file ./file0 [ 578.098791][T21173] netlink: 'syz.5.4892': attribute type 10 has an invalid length. [ 578.147974][ T40] audit: type=1400 audit(1758804744.116:1145): avc: denied { setattr } for pid=21174 comm="syz.5.4893" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.242795][ T6276] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 578.318535][ T6256] usb 11-1: USB disconnect, device number 6 [ 578.393127][ T6276] usb 8-1: Using ep0 maxpacket: 32 [ 578.414731][ T6276] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 578.437364][ T6276] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 578.440250][ T6276] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 578.444262][ T6276] usb 8-1: Product: syz [ 578.445739][ T6276] usb 8-1: Manufacturer: syz [ 578.447676][ T6276] usb 8-1: SerialNumber: syz [ 578.451667][ T6276] usb 8-1: config 0 descriptor?? [ 578.456188][T21164] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 578.465085][ T6276] hub 8-1:0.0: bad descriptor, ignoring hub [ 578.470440][ T6276] hub 8-1:0.0: probe with driver hub failed with error -5 [ 578.585237][T21214] cgroup: none used incorrectly [ 578.588033][T21217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21217 comm=syz.1.4907 [ 578.733356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.825301][T21219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=21219 comm=syz.1.4908 [ 578.888074][T21230] io-wq is not configured for unbound workers [ 579.084670][T21164] usb 8-1: reset high-speed USB device number 63 using dummy_hcd [ 579.093936][T21164] usb 8-1: device reset changed ep0 maxpacket size! [ 579.101147][ T9579] usb 8-1: USB disconnect, device number 63 [ 579.243048][ T9579] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 579.393318][ T9579] usb 8-1: Using ep0 maxpacket: 8 [ 579.822319][T21254] __nla_validate_parse: 18 callbacks suppressed [ 579.822332][T21254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4916'. [ 579.827907][T21254] tipc: Invalid UDP bearer configuration [ 579.827938][T21254] tipc: Enabling of bearer rejected, failed to enable media [ 580.011236][T21266] overlayfs: failed to clone upperpath [ 580.088272][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4925'. [ 580.089620][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 580.089634][ T40] audit: type=1400 audit(1758804746.056:1149): avc: denied { connect } for pid=21272 comm="syz.6.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 580.100610][ T40] audit: type=1400 audit(1758804746.056:1150): avc: denied { getopt } for pid=21272 comm="syz.6.4924" laddr=fe80::2c lport=5 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 580.210409][T21283] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4924'. [ 580.213670][T21283] openvswitch: netlink: Key type 14607 is out of range max 32 [ 580.233300][T21285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4928'. [ 580.387723][T21299] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4932'. [ 580.390325][ T40] audit: type=1400 audit(1758804746.356:1151): avc: denied { nlmsg_read } for pid=21298 comm="syz.5.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 580.607742][T21308] syz_tun: entered allmulticast mode [ 580.615717][T21308] dvmrp8: entered allmulticast mode [ 580.623128][T21308] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 580.626063][T21308] mroute: pending queue full, dropping entries [ 580.629334][T21307] syz_tun: left allmulticast mode [ 580.719629][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4937'. [ 580.772283][T21313] GUP no longer grows the stack in syz.5.4937 (21313): 200000007000-20000000a000 (200000004000) [ 580.776061][T21313] CPU: 1 UID: 0 PID: 21313 Comm: syz.5.4937 Not tainted syzkaller #0 PREEMPT(full) [ 580.776077][T21313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 580.776084][T21313] Call Trace: [ 580.776090][T21313] [ 580.776095][T21313] dump_stack_lvl+0x16c/0x1f0 [ 580.776132][T21313] gup_vma_lookup+0x1d2/0x220 [ 580.776153][T21313] __get_user_pages+0x243/0x34a0 [ 580.776173][T21313] ? xsk_setsockopt+0x6db/0x9a0 [ 580.776184][T21313] ? do_sock_setsockopt+0xf0/0x1d0 [ 580.776213][T21313] ? __sys_setsockopt+0x1a0/0x230 [ 580.776226][T21313] ? __x64_sys_setsockopt+0xbd/0x160 [ 580.776240][T21313] ? __pfx___get_user_pages+0x10/0x10 [ 580.776260][T21313] __gup_longterm_locked+0x2dd/0x17e0 [ 580.776280][T21313] ? __lock_acquire+0xb80/0x1ce0 [ 580.776301][T21313] ? __pfx___gup_longterm_locked+0x10/0x10 [ 580.776325][T21313] pin_user_pages+0x13c/0x160 [ 580.776342][T21313] ? __pfx_pin_user_pages+0x10/0x10 [ 580.776359][T21313] ? xdp_umem_create+0x652/0x1270 [ 580.776376][T21313] xdp_umem_create+0x73c/0x1270 [ 580.776393][T21313] xsk_setsockopt+0x6db/0x9a0 [ 580.776405][T21313] ? __pfx_xsk_setsockopt+0x10/0x10 [ 580.776417][T21313] ? find_held_lock+0x2b/0x80 [ 580.776433][T21313] ? selinux_socket_setsockopt+0x6a/0x80 [ 580.776449][T21313] ? __pfx_xsk_setsockopt+0x10/0x10 [ 580.776461][T21313] do_sock_setsockopt+0xf0/0x1d0 [ 580.776480][T21313] __sys_setsockopt+0x1a0/0x230 [ 580.776502][T21313] __x64_sys_setsockopt+0xbd/0x160 [ 580.776519][T21313] ? do_syscall_64+0x91/0x4e0 [ 580.776548][T21313] ? lockdep_hardirqs_on+0x7c/0x110 [ 580.776573][T21313] do_syscall_64+0xcd/0x4e0 [ 580.776599][T21313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.776617][T21313] RIP: 0033:0x7fb99658eec9 [ 580.776636][T21313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.776655][T21313] RSP: 002b:00007fb997394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 580.776675][T21313] RAX: ffffffffffffffda RBX: 00007fb9967e6090 RCX: 00007fb99658eec9 [ 580.776689][T21313] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 580.776700][T21313] RBP: 00007fb996611f91 R08: 0000000000000020 R09: 0000000000000000 [ 580.776711][T21313] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 580.776722][T21313] R13: 00007fb9967e6128 R14: 00007fb9967e6090 R15: 00007ffe8d5221e8 [ 580.776748][T21313] [ 581.135153][ T9579] usb 8-1: unable to get BOS descriptor or descriptor too short [ 581.138730][ T9579] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 581.141191][ T9579] usb 8-1: can't read configurations, error -71 [ 581.215687][T21336] netlink: 'syz.6.4943': attribute type 55 has an invalid length. [ 581.232712][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4943'. [ 581.246225][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4943'. [ 581.248850][ T40] audit: type=1400 audit(1758804747.216:1152): avc: denied { accept } for pid=21337 comm="syz.3.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 581.249061][T21336] openvswitch: netlink: Flow actions attr not present in new flow. [ 581.260362][T14829] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 581.316877][ T40] audit: type=1400 audit(1758804747.286:1153): avc: denied { ioctl } for pid=21337 comm="syz.3.4944" path="socket:[75577]" dev="sockfs" ino=75577 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 581.418911][T21356] fuse: Bad value for 'fd' [ 581.421371][ T40] audit: type=1400 audit(1758804747.386:1154): avc: denied { ioctl } for pid=21355 comm="syz.6.4950" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 581.429134][T21356] overlay: Unknown parameter 'func' [ 581.437516][T21358] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4951'. [ 581.440905][T21356] tmpfs: Unknown parameter '0x0000000000000000' [ 581.511966][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4955'. [ 581.992744][ T6276] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 582.154129][ T6276] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 582.157215][ T6276] usb 11-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 582.161071][ T6276] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 582.166003][ T6276] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.169330][ T6276] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.173084][ T6276] usb 11-1: config 0 descriptor?? [ 582.176667][ T6276] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 582.248512][T21406] netlink: 'syz.5.4968': attribute type 2 has an invalid length. [ 582.363772][ T40] audit: type=1804 audit(1758804748.326:1155): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4972" name="/newroot/201/file0" dev="tmpfs" ino=1085 res=1 errno=0 [ 582.372443][ T40] audit: type=1800 audit(1758804748.336:1156): pid=21417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4972" name="file0" dev="tmpfs" ino=1085 res=0 errno=0 [ 582.491953][T21431] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 582.663665][ T6256] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 582.766914][ T40] audit: type=1400 audit(1758804748.736:1157): avc: denied { setopt } for pid=21458 comm="syz.3.4989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 582.783404][ T40] audit: type=1400 audit(1758804748.746:1158): avc: denied { setopt } for pid=21460 comm="syz.1.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 582.835921][ T6256] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 582.839259][ T6256] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.844113][ T6256] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 582.848311][ T6256] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 582.851669][ T6256] usb 10-1: Manufacturer: syz [ 582.856090][ T6256] usb 10-1: config 0 descriptor?? [ 582.912717][ T6256] rc_core: IR keymap rc-hauppauge not found [ 582.914611][ T6256] Registered IR keymap rc-empty [ 582.917459][ T6256] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 582.922743][ T6256] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input42 [ 583.068861][ T9579] usb 10-1: USB disconnect, device number 6 [ 583.400664][T21493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21493 comm=syz.1.4998 [ 583.465485][T21495] nfs4: Unknown parameter '/file0' [ 584.003423][T21530] netlink: 'syz.1.5012': attribute type 55 has an invalid length. [ 584.018606][T21530] openvswitch: netlink: Flow actions attr not present in new flow. [ 584.355278][T21559] fuse: Bad value for 'fd' [ 584.394580][T21565] netlink: 'syz.1.5024': attribute type 1 has an invalid length. [ 584.573767][ T5974] Bluetooth: hci3: command 0x041b tx timeout [ 584.761629][T15423] usb 11-1: USB disconnect, device number 7 [ 585.032417][T21611] __nla_validate_parse: 8 callbacks suppressed [ 585.032427][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5038'. [ 585.221843][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.274393][T21617] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 585.420589][T21626] netlink: 'syz.6.5043': attribute type 55 has an invalid length. [ 585.438142][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5043'. [ 585.448461][T14829] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 585.452863][T15423] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 585.543102][T21631] team0: No ports can be present during mode change [ 585.546464][T21630] team0: No ports can be present during mode change [ 585.627761][T15423] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 585.631259][T15423] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 585.635815][T15423] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 585.641141][T15423] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.646365][T15423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.664103][T15423] usb 10-1: config 0 descriptor?? [ 585.679258][T15423] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 586.072792][T21649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65520 sclass=netlink_route_socket pid=21649 comm=syz.6.5049 [ 586.077103][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5049'. [ 586.111087][T21577] Set syz1 is full, maxelem 65536 reached [ 586.206143][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 586.206269][ T40] audit: type=1400 audit(1758804752.176:1164): avc: denied { read } for pid=21652 comm="syz.1.5051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 586.312323][ T40] audit: type=1400 audit(1758804752.276:1165): avc: denied { setopt } for pid=21665 comm="syz.1.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 586.397691][ T40] audit: type=1400 audit(1758804752.366:1166): avc: denied { write } for pid=21670 comm="syz.1.5056" lport=51508 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 586.513340][T21677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21677 comm=syz.1.5058 [ 586.831600][ T40] audit: type=1326 audit(1758804752.796:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21684 comm="syz.3.5061" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8085f8eec9 code=0x0 [ 587.048747][ T59] IPVS: starting estimator thread 0... [ 587.051745][T21694] program syz.6.5063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.062169][T21694] geneve2: entered promiscuous mode [ 587.064345][T21694] geneve2: entered allmulticast mode [ 587.067795][T20863] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.070888][T20863] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.075136][T20868] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.078933][T20868] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 587.142338][T21699] netlink: 'syz.6.5065': attribute type 4 has an invalid length. [ 587.149779][T21699] netlink: 'syz.6.5065': attribute type 4 has an invalid length. [ 587.153073][T21695] IPVS: using max 45 ests per chain, 108000 per kthread [ 587.311943][T21702] netlink: 'syz.1.5066': attribute type 27 has an invalid length. [ 587.320018][T21702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.429336][T21711] No source specified [ 587.694600][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5078'. [ 587.725553][T21739] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5080'. [ 587.764711][T21741] netlink: 328 bytes leftover after parsing attributes in process `syz.3.5081'. [ 587.802003][T21745] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 587.887502][T21749] netlink: zone id is out of range [ 587.889653][T21749] netlink: zone id is out of range [ 587.891691][T21749] netlink: zone id is out of range [ 587.893372][T21749] netlink: zone id is out of range [ 587.895449][T21749] netlink: zone id is out of range [ 587.897520][T21749] netlink: zone id is out of range [ 587.899243][T21749] netlink: zone id is out of range [ 587.901064][T21749] netlink: zone id is out of range [ 587.998372][T21756] binder: 21755:21756 ioctl c0306201 0 returned -14 [ 588.003849][ T40] audit: type=1400 audit(1758804753.976:1168): avc: denied { append } for pid=21755 comm="syz.3.5087" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 588.011311][ T40] audit: type=1400 audit(1758804753.976:1169): avc: denied { append } for pid=21755 comm="syz.3.5087" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 588.018728][ T40] audit: type=1400 audit(1758804753.976:1170): avc: denied { map } for pid=21755 comm="syz.3.5087" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 588.027362][ T40] audit: type=1400 audit(1758804753.976:1171): avc: denied { execute } for pid=21755 comm="syz.3.5087" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 588.055852][T21758] erofs (device loop6): cannot find valid erofs superblock [ 588.130195][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5090'. [ 588.197710][T21765] input: syz1 as /devices/virtual/input/input44 [ 588.225570][ T6039] usb 10-1: USB disconnect, device number 7 [ 588.326553][T21777] loop9: detected capacity change from 0 to 7 [ 588.329972][T20945] buffer_io_error: 27 callbacks suppressed [ 588.329982][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.336399][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.339096][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.342338][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.345296][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.348508][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.351759][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.355653][T20945] ldm_validate_partition_table(): Disk read failed. [ 588.357842][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.360315][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.362973][T20945] Buffer I/O error on dev loop9, logical block 0, async page read [ 588.365606][T20945] Dev loop9: unable to read RDB block 0 [ 588.367456][T20945] loop9: unable to read partition table [ 588.369310][T20945] loop9: partition table beyond EOD, truncated [ 588.371989][T21777] ldm_validate_partition_table(): Disk read failed. [ 588.374809][T21777] Dev loop9: unable to read RDB block 0 [ 588.377026][T21777] loop9: unable to read partition table [ 588.378859][T21777] loop9: partition table beyond EOD, truncated [ 588.382200][T21777] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 588.382200][T21777] ) failed (rc=-5) [ 588.442039][T21780] fuse: Bad value for 'fd' [ 588.493356][ T9579] usb 8-1: new low-speed USB device number 66 using dummy_hcd [ 588.519344][ T40] audit: type=1400 audit(1758804754.486:1172): avc: denied { ioctl } for pid=21783 comm="syz.5.5097" path="socket:[78249]" dev="sockfs" ino=78249 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 588.645522][ T9579] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 588.648121][ T9579] usb 8-1: config 0 has no interface number 0 [ 588.650017][ T9579] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.654058][ T9579] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 8224, setting to 8 [ 588.657859][ T9579] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 588.661892][ T9579] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 588.665701][ T9579] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 588.669225][ T9579] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.674799][ T9579] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 588.677688][ T9579] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.681867][ T9579] usb 8-1: config 0 descriptor?? [ 588.684784][T21765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 588.687679][T21765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 588.696385][ T9579] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 589.044935][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a85000: rx timeout, send abort [ 589.055430][ T40] audit: type=1400 audit(1758804755.026:1173): avc: denied { read } for pid=5366 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 589.418187][ T59] usb 8-1: USB disconnect, device number 66 [ 589.428053][ T59] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 589.461512][T21821] ref_ctr_offset mismatch. inode: 0xa70 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 589.462904][T21820] ------------[ cut here ]------------ [ 589.467250][T21820] WARNING: CPU: 2 PID: 21820 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 589.471429][T21820] Modules linked in: [ 589.473514][T21820] CPU: 2 UID: 0 PID: 21820 Comm: syz.3.5109 Not tainted syzkaller #0 PREEMPT(full) [ 589.478478][T21820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 589.483946][T21820] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 589.486597][T21820] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d f1 b5 7e 0e 00 75 0b c6 05 e8 b5 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 589.494535][T21820] RSP: 0018:ffffc9000cb2f7f0 EFLAGS: 00010246 [ 589.496846][T21820] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 589.500037][T21820] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 589.503565][T21820] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 589.506749][T21820] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 589.510031][T21820] R13: 1ffff92001965f13 R14: ffffffff9ae82aa4 R15: 0000000000000016 [ 589.513974][T21820] FS: 00007f8086e0b6c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 589.517387][T21820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.520051][T21820] CR2: 00007fb997394d58 CR3: 000000005965d000 CR4: 0000000000352ef0 [ 589.523565][T21820] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 0000000000000080 [ 589.526795][T21820] DR3: 000000000f000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 589.530061][T21820] Call Trace: [ 589.531471][T21820] [ 589.533266][T21820] ? is_bpf_text_address+0x94/0x1a0 [ 589.534997][T21820] ? kernel_text_address+0x8d/0x100 [ 589.537186][T21820] ? __kernel_text_address+0xd/0x40 [ 589.539373][T21820] ? unwind_get_return_address+0x59/0xa0 [ 589.541760][T21820] ? arch_stack_walk+0xa6/0x100 [ 589.544369][T21820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.546996][T21820] ? stack_trace_save+0x8e/0xc0 [ 589.547700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a85000: abort rx timeout. Force session deactivation [ 589.549044][T21820] ? __lock_acquire+0xb97/0x1ce0 [ 589.549079][T21820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.549104][T21820] ? policy_nodemask+0xea/0x4e0 [ 589.549129][T21820] alloc_pages_mpol+0x1fb/0x550 [ 589.562235][T21820] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.564841][T21820] ? find_held_lock+0x2b/0x80 [ 589.566828][T21820] ? drm_syncobj_array_find+0x35/0x3c0 [ 589.569067][T21820] ___kmalloc_large_node+0xed/0x160 [ 589.571158][T21820] ? drm_syncobj_array_find+0x35/0x3c0 [ 589.573886][T21820] __kmalloc_large_node_noprof+0x1c/0x70 [ 589.575892][T21820] __kmalloc_noprof.cold+0xc/0x61 [ 589.577695][T21820] ? __lock_acquire+0xb97/0x1ce0 [ 589.579762][T21820] drm_syncobj_array_find+0x35/0x3c0 [ 589.581455][T21820] drm_syncobj_signal_ioctl+0x20c/0x450 [ 589.583604][T21820] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 589.585736][T21820] ? drm_dev_exit+0x41/0x60 [ 589.587676][T21820] drm_ioctl_kernel+0x1f4/0x3e0 [ 589.589470][T21820] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 589.591381][T21820] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 589.593243][T21820] drm_ioctl+0x5c9/0xc30 [ 589.594574][T21820] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 589.597018][T21820] ? __pfx_drm_ioctl+0x10/0x10 [ 589.599039][T21820] ? selinux_file_ioctl+0x180/0x270 [ 589.601131][T21820] ? selinux_file_ioctl+0xb4/0x270 [ 589.602807][ T9579] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 589.605478][T21820] ? __pfx_drm_ioctl+0x10/0x10 [ 589.606913][T21820] __x64_sys_ioctl+0x18b/0x210 [ 589.608385][T21820] do_syscall_64+0xcd/0x4e0 [ 589.609819][T21820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.611646][T21820] RIP: 0033:0x7f8085f8eec9 [ 589.613284][T21820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.620603][T21820] RSP: 002b:00007f8086e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.623505][T21820] RAX: ffffffffffffffda RBX: 00007f80861e5fa0 RCX: 00007f8085f8eec9 [ 589.626203][T21820] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000005 [ 589.629385][T21820] RBP: 00007f8086011f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.632566][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.635834][T21820] R13: 00007f80861e6038 R14: 00007f80861e5fa0 R15: 00007ffffd70e2c8 [ 589.638842][T21820] [ 589.640115][T21820] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 589.643131][T21820] CPU: 2 UID: 0 PID: 21820 Comm: syz.3.5109 Not tainted syzkaller #0 PREEMPT(full) [ 589.646892][T21820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 589.651136][T21820] Call Trace: [ 589.652517][T21820] [ 589.653751][T21820] dump_stack_lvl+0x3d/0x1f0 [ 589.655676][T21820] vpanic+0x6e8/0x7a0 [ 589.657418][T21820] ? __pfx_vpanic+0x10/0x10 [ 589.659308][T21820] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 589.661855][T21820] panic+0xca/0xd0 [ 589.663439][T21820] ? __pfx_panic+0x10/0x10 [ 589.665285][T21820] ? check_panic_on_warn+0x1f/0xb0 [ 589.667244][T21820] check_panic_on_warn+0xab/0xb0 [ 589.669302][T21820] __warn+0xf6/0x3c0 [ 589.670952][T21820] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 589.673499][T21820] report_bug+0x3c3/0x580 [ 589.675307][T21820] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 589.677769][T21820] handle_bug+0x184/0x210 [ 589.679418][T21820] exc_invalid_op+0x17/0x50 [ 589.681152][T21820] asm_exc_invalid_op+0x1a/0x20 [ 589.682676][T21820] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 589.684824][T21820] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d f1 b5 7e 0e 00 75 0b c6 05 e8 b5 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 589.692530][T21820] RSP: 0018:ffffc9000cb2f7f0 EFLAGS: 00010246 [ 589.694969][T21820] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 589.698249][T21820] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 589.701470][T21820] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 589.704819][T21820] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 589.707282][T21820] R13: 1ffff92001965f13 R14: ffffffff9ae82aa4 R15: 0000000000000016 [ 589.709679][T21820] ? is_bpf_text_address+0x94/0x1a0 [ 589.711289][T21820] ? kernel_text_address+0x8d/0x100 [ 589.712939][T21820] ? __kernel_text_address+0xd/0x40 [ 589.714564][T21820] ? unwind_get_return_address+0x59/0xa0 [ 589.716347][T21820] ? arch_stack_walk+0xa6/0x100 [ 589.717889][T21820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 589.719847][T21820] ? stack_trace_save+0x8e/0xc0 [ 589.721403][T21820] ? __lock_acquire+0xb97/0x1ce0 [ 589.722969][T21820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.724810][T21820] ? policy_nodemask+0xea/0x4e0 [ 589.726329][T21820] alloc_pages_mpol+0x1fb/0x550 [ 589.727850][T21820] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 589.729528][T21820] ? find_held_lock+0x2b/0x80 [ 589.731004][T21820] ? drm_syncobj_array_find+0x35/0x3c0 [ 589.732703][T21820] ___kmalloc_large_node+0xed/0x160 [ 589.734334][T21820] ? drm_syncobj_array_find+0x35/0x3c0 [ 589.736032][T21820] __kmalloc_large_node_noprof+0x1c/0x70 [ 589.737750][T21820] __kmalloc_noprof.cold+0xc/0x61 [ 589.739324][T21820] ? __lock_acquire+0xb97/0x1ce0 [ 589.740906][T21820] drm_syncobj_array_find+0x35/0x3c0 [ 589.742561][T21820] drm_syncobj_signal_ioctl+0x20c/0x450 [ 589.744296][T21820] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 589.746192][T21820] ? drm_dev_exit+0x41/0x60 [ 589.747568][T21820] drm_ioctl_kernel+0x1f4/0x3e0 [ 589.749097][T21820] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 589.751047][T21820] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 589.752729][T21820] drm_ioctl+0x5c9/0xc30 [ 589.754096][T21820] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 589.755983][T21820] ? __pfx_drm_ioctl+0x10/0x10 [ 589.757519][T21820] ? selinux_file_ioctl+0x180/0x270 [ 589.759148][T21820] ? selinux_file_ioctl+0xb4/0x270 [ 589.760790][T21820] ? __pfx_drm_ioctl+0x10/0x10 [ 589.762293][T21820] __x64_sys_ioctl+0x18b/0x210 [ 589.763797][T21820] do_syscall_64+0xcd/0x4e0 [ 589.765256][T21820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.767065][T21820] RIP: 0033:0x7f8085f8eec9 [ 589.768464][T21820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.774375][T21820] RSP: 002b:00007f8086e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.776953][T21820] RAX: ffffffffffffffda RBX: 00007f80861e5fa0 RCX: 00007f8085f8eec9 [ 589.779338][T21820] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000005 [ 589.781857][T21820] RBP: 00007f8086011f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.784311][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.786723][T21820] R13: 00007f80861e6038 R14: 00007f80861e5fa0 R15: 00007ffffd70e2c8 [ 589.789118][T21820] [ 589.790869][T21820] Kernel Offset: disabled [ 589.792214][T21820] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:52:35 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000c2 RBX=ffffc9000005a2e0 RCX=000000000000003e RDX=1ffff11004484991 RSI=00000000000000c2 RDI=ffffc900007f5b80 RBP=0000000000000003 RSP=ffffc90000127b50 R8 =0000000000000004 R9 =00000000000000c2 R10=0000000000000242 R11=0000000000000000 R12=0000000000000003 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000005a2e0 RIP=ffffffff84e2e9a7 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8086da8d58 CR3=000000005965d000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8d5226f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8d5226f6 00007ffe8d5226fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb996612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb996612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb996612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb996612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb99661305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb99661313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a359233542b9bde9 fedb1c464ad95a00 36254523d346bfd0 68b0c5a627acc555 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800000d82c79c8ff 0cecd151a3592335 42b9bde9fedb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d346bfd068b0c5a6 27acc555c08cc838 0003000000000000 024078a5000ac09a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2acb81b5dcb5a7e7 1d3ce86c20866d66 3d9ae3d3d427f8db 35ead45d604e7aa7 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b70952bedbedc4d 586165dc09f1aefc 2deed71378b9b216 bc0176056413f000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000027890640020 4e234e0084a68116 1174422eb92a1a25 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e8879c094a76707 8702010164bb1414 ac2e1414ac000000 00ffffffff010101 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a641ea0 RCX=ffffffff81af9d91 RDX=ffff8880483e0000 RSI=ffffffff81af9d6b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005d97888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4c83d5 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81af9d6d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000400 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000013fc 0000001400000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080002980322 0800029003001000 0280031000000121 0000000200000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8210000202778e00 1000010800261000 2080809410000280 8010000da8c08004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0141d800000000 0806020176c00fff ffffffffff040380 0400100000080008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0176cc12100003b0 0300100003a00310 1000039003001000 0380030800000500 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0402800400100006 0176b20fffffffff ffff0402b0030fff ffffffffff0402a0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031210000bb00301 10000ba003101000 0b90030ffe10000b 80030192100007f0 ZMM25=e7be9c57e7be9c57 e7be9c57e7be9c57 e7be9c57e7be9c57 e7be9c57e7be9c57 e7be9c57e7be9c57 e7be9c57e7be9c57 e7be9c57e7be9c57 e7be9c57e7be9c57 ZMM26=2d0d993b2d0d993b 2d0d993b2d0d993b 2d0d993b2d0d993b 2d0d993b2d0d993b 2d0d993b2d0d993b 2d0d993b2d0d993b 2d0d993b2d0d993b 2d0d993b2d0d993b ZMM27=f17e3d6af17e3d6a f17e3d6af17e3d6a f17e3d6af17e3d6a f17e3d6af17e3d6a f17e3d6af17e3d6a f17e3d6af17e3d6a f17e3d6af17e3d6a f17e3d6af17e3d6a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4b1800004b180000 4b1800004b180000 4b1800004b180000 4b1800004b180000 4b1800004b180000 4b1800004b180000 4b1800004b180000 4b1800004b180000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c415 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc9000cb2f160 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b1180e0 R15=ffffffff8564c3b0 RIP=ffffffff8564c43f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8086e0b6c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb997394d58 CR3=000000005965d000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=00000000ffffffff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd70e7d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd70e7d6 00007ffffd70e7dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8086012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8086012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8086012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8086012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f808601305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f808601313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffffff8e5c15a0 RCX=ffffffff91d32801 RDX=0000000000000000 RSI=ffffffff816af8a4 RDI=ffffffff8e5c15a0 RBP=0000000000000001 RSP=ffffc90003e3f4e0 R8 =ffffffff91d328fc R9 =0000000000000000 R10=0000000000000001 R11=0000000000086460 R12=ffffffff816af8a4 R13=ffffc90003e3f580 R14=ffffc90003e3ff28 R15=ffffc90003e3f5b4 RIP=ffffffff8197d283 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0c0f966c80 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8086dc9d58 CR3=000000002bfe4000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000080 DR3=000000000f000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000008 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd66f3501b 00007ffd66f3501b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd66f35520 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd66f35520 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f636f6c6c615f5f 20343231353a632e 636f6c6c615f6567 61702f6d6d207461 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f6b6e6c3d7373 616c637420745f72 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61763a725f746365 6a626f3a755f6d65 747379733d747865 746e6f637420745f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64676f6c7379733a 725f6d6574737973 3a755f6d65747379 733d747865746e6f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 637320303130323d 6f6e692022316164 73223d7665642022 676f6c223d656d61 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32383578303d646d 636c74636f692039 343238373d6f6e69 202273666b636f73 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000