last executing test programs: 2m59.899335225s ago: executing program 0 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x14b) getdents(r0, 0x0, 0x0) 2m59.840611314s ago: executing program 0 (id=318): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m59.758124276s ago: executing program 0 (id=321): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000004", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ff300afe4e70"}}}}}}}, 0x0) 2m59.683352613s ago: executing program 0 (id=322): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 2m59.623438675s ago: executing program 0 (id=324): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2m59.3733921s ago: executing program 0 (id=327): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4000891) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m59.293768812s ago: executing program 32 (id=327): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x4000891) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m54.082363257s ago: executing program 4 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2m53.943287168s ago: executing program 4 (id=383): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0007000000000000000000030005000000000002000000000008001211000004"], 0x80}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m53.81064829s ago: executing program 4 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1200}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xf, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m53.732655309s ago: executing program 4 (id=386): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m53.533118993s ago: executing program 4 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) chdir(&(0x7f0000000200)='./file0\x00') 2m52.681761823s ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0xb0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 2m37.642600669s ago: executing program 33 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0xb0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1m41.171117179s ago: executing program 3 (id=1427): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x100, 0x8008, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0x3, 0x0, 0x1000000, 0x105, 0x3fe, 0x3, {0x6, 0x3, 0x0, 0xfe2b25d, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x6000, 0x7, 0x0, 0x0, 0x8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x9, "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"}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) 1m41.032366799s ago: executing program 3 (id=1428): r0 = fanotify_init(0x16, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';-H?', 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000000c0)={r3}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0) close_range(r1, r1, 0x0) r4 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) ftruncate(r4, 0x3) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0003, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @default]}) r6 = dup(r4) fanotify_mark(r0, 0x1, 0x40000010, r6, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000100)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000004000080080002"], 0x1c}], 0x1}, 0x0) execveat(r6, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 1m39.412728832s ago: executing program 3 (id=1441): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 1m39.412343569s ago: executing program 3 (id=1442): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x3, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000c40)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xc}}}}}}}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m39.350687634s ago: executing program 3 (id=1443): r0 = socket$packet(0x11, 0x3, 0x300) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) accept$packet(r0, 0x0, &(0x7f0000000280)) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x4, 0xfffffffffffffe60) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000100)=""/201, 0xc9}], 0x2, 0x2, 0x9) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 1m39.131050382s ago: executing program 3 (id=1446): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m39.049821493s ago: executing program 34 (id=1446): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22.866957107s ago: executing program 2 (id=2909): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x30, 0x0, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000ffff"], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 7) 22.504090643s ago: executing program 2 (id=2911): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="0198000000000000200012800800", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x9, 0x200, 0x6, 0x500, 0x7, 0x398, 0x620b}}}}]}, 0x58}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 22.503316091s ago: executing program 2 (id=2913): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) 21.601797931s ago: executing program 2 (id=2923): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x28) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fanotify_init(0x4c, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x135383) stat(&(0x7f0000000280)='\x00', &(0x7f00000002c0)) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f00000001c0)={0x2, 0x6}) sendmsg$802154_dgram(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40480c0}, 0x44001) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) 21.540805025s ago: executing program 2 (id=2926): r0 = gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) 21.527657664s ago: executing program 2 (id=2927): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f00000000c0)) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) 21.412484656s ago: executing program 35 (id=2927): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f00000000c0)) r2 = dup(r0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) 3.629319229s ago: executing program 7 (id=3142): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x3, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x1, 0x0, 0x1, 0x4}, 0x4b, [0xfffffbff, 0x4, 0x3c, 0x8, 0x2, 0x80000000, 0x8, 0x0, 0x8, 0x2, 0x7, 0x9, 0x1, 0x830, 0x4, 0x40, 0x380, 0x2, 0x8, 0x80000000, 0x5, 0x225, 0x1, 0x2000000, 0x0, 0x5, 0xfff, 0x3, 0x8, 0x1, 0x2c, 0x80000001, 0x101, 0x4, 0x9, 0x101, 0x1, 0x10, 0x4, 0x3d, 0x10001, 0x7, 0xffffffff, 0x2, 0xfb, 0xe, 0x8, 0x5, 0x9, 0x5, 0x8000, 0x100, 0xffffff0e, 0xca, 0x9, 0xffff, 0x0, 0x7, 0xfffff001, 0x80000000, 0x6, 0x86, 0x4, 0x780], [0x800, 0x4, 0x8, 0xffffffff, 0x7fff, 0x401, 0x7, 0x6, 0x7f, 0xbf, 0x5, 0xace6, 0x3, 0x9, 0x2, 0x1, 0x3, 0x9, 0x7, 0x2, 0x6, 0xe, 0x1000, 0x1, 0x2, 0x4, 0x9, 0x6, 0x4, 0x8, 0x7fffffff, 0x9, 0x2, 0x8, 0x2, 0xb9d, 0x1ff, 0x401, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x2, 0x9, 0x2, 0xf5, 0x9319161, 0x4, 0x8, 0x1, 0x6cc, 0x10001, 0x80000001, 0x3, 0x8, 0x8, 0x7, 0x5, 0xb2, 0x100, 0x4], [0x724, 0x6, 0x52, 0x8, 0xe, 0x0, 0x0, 0x3a, 0x7, 0x5, 0x1, 0x800, 0x5, 0xcf43, 0x6, 0x0, 0x4, 0x2, 0x3, 0x6, 0x4, 0x6, 0xfffffff9, 0x4, 0x80000001, 0xfff, 0x101, 0x73, 0x10001, 0x0, 0x4, 0x5, 0x5, 0xde9, 0x3, 0x800, 0xc, 0x2, 0x4, 0x8, 0x9, 0x3, 0x33f4cd36, 0x54, 0x1000, 0x755, 0x1, 0x5, 0x800, 0x6, 0x4, 0x10, 0x5, 0x9, 0x15a, 0x200, 0x8, 0xc4d, 0x5, 0xcd, 0x0, 0x200, 0x4, 0x4], [0x4, 0x6, 0x3, 0x7, 0x7, 0x64, 0x5, 0x3, 0x80, 0x2, 0x0, 0x8, 0xf, 0xe, 0x9, 0xe39e, 0x1, 0x7ff, 0x4, 0xfffffff7, 0x7, 0x800009, 0x80000001, 0x4, 0x6, 0x4, 0x81, 0x1, 0x5, 0x4, 0x5, 0xfffffff8, 0xb, 0x5, 0xfffffff7, 0x7, 0x0, 0x289, 0x4, 0xff, 0x101, 0x400, 0x3, 0x7, 0x80000001, 0xa4dc, 0x9, 0x0, 0x7, 0x2, 0x8, 0xba, 0x7, 0x5, 0x3, 0x0, 0x8000, 0xc21, 0xffff, 0x2, 0x269, 0x8, 0xb, 0x1]}, 0x45c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x92810}) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.478051424s ago: executing program 7 (id=3148): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1800) 3.383412237s ago: executing program 7 (id=3151): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000140)={0x0, "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"}) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000003c0)={&(0x7f0000000180), &(0x7f0000002240)=""/4118, 0x1016}) write(r0, &(0x7f0000000000)="b8d2b38d", 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000140)={0x0, "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"}) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) (async) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000003c0)={&(0x7f0000000180), &(0x7f0000002240)=""/4118, 0x1016}) (async) write(r0, &(0x7f0000000000)="b8d2b38d", 0x4) (async) 3.22139201s ago: executing program 7 (id=3152): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0xeeef0000, 0x0, 0x0}]}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001500192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.219862433s ago: executing program 7 (id=3153): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) write$FUSE_INIT(r0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x5, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x78, 0x0, 0x7, {0xde, 0x1, 0x0, {0x0, 0xe, 0x7, 0x8000000000000001, 0x2, 0x2, 0x2, 0xd361, 0x92d, 0x8000, 0x1, r1, r2, 0x401, 0x536a}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sed\x00', 0x37, 0xffffbffe, 0x7f}, 0x2c) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 2.191729014s ago: executing program 1 (id=3160): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) (async) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) (async) r3 = socket(0x2, 0x5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x1, 0x6, 0x0, @empty, @loopback, 0x20, 0x7, 0xf, 0xfffffc01}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r4, 0x25, 0x2, @void}, 0x10) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) munlockall() (async, rerun: 32) r5 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r5}) 2.191220794s ago: executing program 1 (id=3161): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@mcast2, @in6=@local, 0x200, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x0, 0xffffffffffffffff}, {0x0, 0x4}, {}, 0x0, 0x3501, 0x2, 0x0, 0xfd}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x2004c8c8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x8001, 0x1, 0x6000, 0x1000, &(0x7f0000013000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc0106442, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf257a00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20004043}, 0x4040) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000100)) 2.190526306s ago: executing program 6 (id=3162): r0 = gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r1, r3, 0x6700000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r4, r5+10000000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) mkdirat(0xffffffffffffffff, 0x0, 0xa1) close_range(r6, 0xffffffffffffffff, 0x0) 1.29976001s ago: executing program 6 (id=3167): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x3, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x1, 0x0, 0x1, 0x4}, 0x4b, [0xfffffbff, 0x4, 0x3c, 0x8, 0x2, 0x80000000, 0x8, 0x0, 0x8, 0x2, 0x7, 0x9, 0x1, 0x830, 0x4, 0x40, 0x380, 0x2, 0x8, 0x80000000, 0x5, 0x225, 0x1, 0x2000000, 0x0, 0x5, 0xfff, 0x3, 0x8, 0x1, 0x2c, 0x80000001, 0x101, 0x4, 0x9, 0x101, 0x1, 0x10, 0x4, 0x3d, 0x10001, 0x7, 0xffffffff, 0x2, 0xfb, 0xe, 0x8, 0x5, 0x9, 0x5, 0x8000, 0x100, 0xffffff0e, 0xca, 0x9, 0xffff, 0x0, 0x7, 0xfffff001, 0x80000000, 0x6, 0x86, 0x4, 0x780], [0x800, 0x4, 0x8, 0xffffffff, 0x7fff, 0x401, 0x7, 0x6, 0x7f, 0xbf, 0x5, 0xace6, 0x3, 0x9, 0x2, 0x1, 0x3, 0x9, 0x7, 0x2, 0x6, 0xe, 0x1000, 0x1, 0x2, 0x4, 0x9, 0x6, 0x4, 0x8, 0x7fffffff, 0x9, 0x2, 0x8, 0x2, 0xb9d, 0x1ff, 0x401, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x2, 0x9, 0x2, 0xf5, 0x9319161, 0x4, 0x8, 0x1, 0x6cc, 0x10001, 0x80000001, 0x3, 0x8, 0x8, 0x7, 0x5, 0xb2, 0x100, 0x4], [0x724, 0x6, 0x52, 0x8, 0xe, 0x0, 0x0, 0x3a, 0x7, 0x5, 0x1, 0x800, 0x5, 0xcf43, 0x6, 0x0, 0x4, 0x2, 0x3, 0x6, 0x4, 0x6, 0xfffffff9, 0x4, 0x80000001, 0xfff, 0x101, 0x73, 0x10001, 0x0, 0x4, 0x5, 0x5, 0xde9, 0x3, 0x800, 0xc, 0x2, 0x4, 0x8, 0x9, 0x3, 0x33f4cd36, 0x54, 0x1000, 0x755, 0x1, 0x5, 0x800, 0x6, 0x4, 0x10, 0x5, 0x9, 0x15a, 0x200, 0x8, 0xc4d, 0x5, 0xcd, 0x0, 0x200, 0x4, 0x4], [0x4, 0x6, 0x3, 0x7, 0x7, 0x64, 0x5, 0x3, 0x80, 0x2, 0x0, 0x8, 0xf, 0xe, 0x9, 0xe39e, 0x1, 0x7ff, 0x4, 0xfffffff7, 0x7, 0x800009, 0x80000001, 0x4, 0x6, 0x4, 0x81, 0x1, 0x5, 0x4, 0x5, 0xfffffff8, 0xb, 0x5, 0xfffffff7, 0x7, 0x0, 0x289, 0x4, 0xff, 0x101, 0x400, 0x3, 0x7, 0x80000001, 0xa4dc, 0x9, 0x0, 0x7, 0x2, 0x8, 0xba, 0x7, 0x5, 0x3, 0x0, 0x8000, 0xc21, 0xffff, 0x2, 0x269, 0x8, 0xb, 0x1]}, 0x45c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x92810}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.161425489s ago: executing program 6 (id=3168): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x80, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x833, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x3, 0x6}}}}}]}}]}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 1.090857132s ago: executing program 1 (id=3169): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xf0) 1.021243293s ago: executing program 5 (id=3171): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x1000000, "", [@nested={0x101, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) (fail_nth: 9) 941.861882ms ago: executing program 5 (id=3172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x15, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) 941.729061ms ago: executing program 5 (id=3173): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0xfffc, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x1000000, "", [@nested={0x101, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 870.796396ms ago: executing program 5 (id=3174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000600000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) 870.028182ms ago: executing program 1 (id=3175): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r2, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1b}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x620b}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 869.068493ms ago: executing program 5 (id=3176): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x3, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x1, 0x0, 0x1, 0x4}, 0x4b, [0xfffffbff, 0x4, 0x3c, 0x8, 0x2, 0x80000000, 0x8, 0x0, 0x8, 0x2, 0x7, 0x9, 0x1, 0x830, 0x4, 0x40, 0x380, 0x2, 0x8, 0x80000000, 0x5, 0x225, 0x1, 0x2000000, 0x0, 0x5, 0xfff, 0x3, 0x8, 0x1, 0x2c, 0x80000001, 0x101, 0x4, 0x9, 0x101, 0x1, 0x10, 0x4, 0x3d, 0x10001, 0x7, 0xffffffff, 0x2, 0xfb, 0xe, 0x8, 0x5, 0x9, 0x5, 0x8000, 0x100, 0xffffff0e, 0xca, 0x9, 0xffff, 0x0, 0x7, 0xfffff001, 0x80000000, 0x6, 0x86, 0x4, 0x780], [0x800, 0x4, 0x8, 0xffffffff, 0x7fff, 0x401, 0x7, 0x6, 0x7f, 0xbf, 0x5, 0xace6, 0x3, 0x9, 0x2, 0x1, 0x3, 0x9, 0x7, 0x2, 0x6, 0xe, 0x1000, 0x1, 0x2, 0x4, 0x9, 0x6, 0x4, 0x8, 0x7fffffff, 0x9, 0x2, 0x8, 0x2, 0xb9d, 0x1ff, 0x401, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x5, 0x2, 0x9, 0x2, 0xf5, 0x9319161, 0x4, 0x8, 0x1, 0x6cc, 0x10001, 0x80000001, 0x3, 0x8, 0x8, 0x7, 0x5, 0xb2, 0x100, 0x4], [0x724, 0x6, 0x52, 0x8, 0xe, 0x0, 0x0, 0x3a, 0x7, 0x5, 0x1, 0x800, 0x5, 0xcf43, 0x6, 0x0, 0x4, 0x2, 0x3, 0x6, 0x4, 0x6, 0xfffffff9, 0x4, 0x80000001, 0xfff, 0x101, 0x73, 0x10001, 0x0, 0x4, 0x5, 0x5, 0xde9, 0x3, 0x800, 0xc, 0x2, 0x4, 0x8, 0x9, 0x3, 0x33f4cd36, 0x54, 0x1000, 0x755, 0x1, 0x5, 0x800, 0x6, 0x4, 0x10, 0x5, 0x9, 0x15a, 0x200, 0x8, 0xc4d, 0x5, 0xcd, 0x0, 0x200, 0x4, 0x4], [0x4, 0x6, 0x3, 0x7, 0x7, 0x64, 0x5, 0x3, 0x80, 0x2, 0x0, 0x8, 0xf, 0xe, 0x9, 0xe39e, 0x1, 0x7ff, 0x4, 0xfffffff7, 0x7, 0x800009, 0x80000001, 0x4, 0x6, 0x4, 0x81, 0x1, 0x5, 0x4, 0x5, 0xfffffff8, 0xb, 0x5, 0xfffffff7, 0x7, 0x0, 0x289, 0x4, 0xff, 0x101, 0x400, 0x3, 0x7, 0x80000001, 0xa4dc, 0x9, 0x0, 0x7, 0x2, 0x8, 0xba, 0x7, 0x5, 0x3, 0x0, 0x8000, 0xc21, 0xffff, 0x2, 0x269, 0x8, 0xb, 0x1]}, 0x45c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 811.749346ms ago: executing program 1 (id=3177): r0 = gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000380)) timer_settime(0x0, 0x1, 0x0, 0x0) 710.613562ms ago: executing program 5 (id=3178): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=""/133, &(0x7f0000000140)=0x85) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$sequencer(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a800a00d297f0500"], 0x8) r2 = syz_open_dev$rtc(&(0x7f0000000040), 0x6, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x7a1302) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x3a, 0x37, 0x9, 0x9, 0x1000007, 0x80, 0x6, 0x9, 0xffffffffffffffff}) io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) close_range(r2, r3, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) 131.877784ms ago: executing program 7 (id=3179): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000003c0)=[{0x30, 0x5, 0x53, 0xfffff030}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x30, 0x0, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000ffff"], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x300) 70.967904ms ago: executing program 6 (id=3180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x700, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) 1.974184ms ago: executing program 6 (id=3181): mkdir(&(0x7f0000000840)='./file0\x00', 0x188) r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x74, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x18, 0x1, 'user.incfs.metadata\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x18, 0x1, 'user.incfs.metadata\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x18, 0x1, 'user.incfs.metadata\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8008000}, 0x40) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x520) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1.534024ms ago: executing program 6 (id=3182): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xd, 0x0, 0x5, 0x80200100}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x100000c2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x16, 0x2, 0x1, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000000)={0x1, 0x1}) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$UI_DEV_DESTROY(r7, 0x5502) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r10, 0x4b70, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8ddb589e0d6e5f08}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x394, r8, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x5, 0x30, 0x4, 0x6, 0x48, 0x60, 0x48, 0x7c7a1c7fe5c024b0]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x6, 0x1ff, 0x6, 0x36, 0x401, 0x1844, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x30, 0x10, 0x0, 0x1, 0x8001, 0x7ff, 0xd, 0xb0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc26, 0x9ca5, 0xe, 0x0, 0x6, 0xffff, 0x7, 0xa264]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x648, 0x6, 0x8, 0x7, 0x7fff, 0x8001, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x3, 0x9, 0x531, 0x2, 0x9, 0x8]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0xb3, 0x3ff, 0xd6d6, 0x6, 0x100, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xfffb, 0x5, 0x3ff, 0x2, 0xe, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x68, 0x7, 0x424, 0x190, 0x1, 0xd8b6, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x200, 0x5, 0x5, 0x6, 0x4, 0x1, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x5, 0x6, 0xe, 0xe9, 0x7ea, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x7, 0x8, 0x3, 0x7, 0x1, 0xfffe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x1, 0x7}, {0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x4, 0x3, 0x8, 0x592b, 0x1ff, 0x3, 0x9]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x7}, {0x3, 0x3}, {0x6}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0x8}, {0x4}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x5}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x5, 0x4}, {0x4}, {0x0, 0x6}, {0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x2}, {0x2, 0x8}, {0x2, 0x6}, {0x2, 0x1}, {0x6, 0x5}, {0x6, 0x8}, {0x5}, {0x2, 0x2}, {0x4, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x67, 0x4, 0x2, 0x6c, 0x1, 0x9, 0x3, 0x6c, 0x6c, 0x24, 0x74, 0x60, 0x16, 0x1, 0x60, 0x4, 0x9, 0xc, 0x1, 0x24]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x5}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x0, 0x8000, 0xc04, 0x4, 0x2, 0x40, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1, 0x80, 0x3, 0xfff, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x2, 0x60, 0x16, 0x12, 0x60, 0x5, 0x9, 0xb, 0x9, 0x4, 0x9, 0x6c, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x7, 0x6, 0x2, 0x6, 0x8, 0x4]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x6, 0x7, 0x7f, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4212, 0x200, 0x7, 0x1932, 0xa, 0x0, 0x54]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x4}, {0x3}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x1}, {0x7, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0xa}]}]}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x40005}, 0x4830) 0s ago: executing program 1 (id=3183): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x8, 0x40}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x9, "b270e9a1b4a43ba06b73ea7e5f589cc0e1f4ed9f892bbf59d15a44e8442d9c30"}) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 23pgl [ 212.383067][T13438] a823pgh [ 212.384092][T13438] pcl813 [ 212.385053][T13438] pcl813b [ 212.386431][T13438] acl8113 [ 212.387444][T13438] iso813 [ 212.388415][T13438] acl8216 [ 212.389437][T13438] a826pg [ 212.390428][T13438] comedi: valid board names for pcl730 driver are: [ 212.392575][T13438] pcl730 [ 212.393548][T13438] iso730 [ 212.394523][T13438] acl7130 [ 212.396285][T13438] pcm3730 [ 212.397316][T13438] pcl725 [ 212.398282][T13438] p8r8dio [ 212.399402][T13438] acl7225b [ 212.400433][T13438] p16r16dio [ 212.401575][T13438] pcl733 [ 212.402541][T13438] pcl734 [ 212.403506][T13438] opmm-1616-xt [ 212.404646][T13438] pearl-mm-p [ 212.405851][T13438] ir104-pbf [ 212.406901][T13438] comedi: valid board names for pcl726 driver are: [ 212.409004][T13438] pcl726 [ 212.409950][T13438] pcl727 [ 212.410894][T13438] pcl728 [ 212.411854][T13438] acl6126 [ 212.412912][T13438] acl6128 [ 212.414283][T13438] comedi: valid board names for pcl724 driver are: [ 212.416419][T13438] pcl724 [ 212.417676][T13438] pcl722 [ 212.418732][T13438] pcl731 [ 212.419655][T13438] acl7122 [ 212.420698][T13438] acl7124 [ 212.422273][T13438] pet48dio [ 212.423668][T13438] pcmio48 [ 212.424710][T13438] onyx-mm-dio [ 212.425857][T13438] comedi: valid board names for pcl711 driver are: [ 212.428390][T13438] pcl711 [ 212.429452][T13438] pcl711b [ 212.430555][T13438] acl8112hg [ 212.431593][T13438] acl8112dg [ 212.432834][T13438] comedi: valid board names for amplc_pc263 driver are: [ 212.435005][T13438] pc263 [ 212.436504][T13438] comedi: valid board names for amplc_pc236 driver are: [ 212.438699][T13438] pc36at [ 212.439663][T13438] comedi: valid board names for amplc_dio200 driver are: [ 212.441877][T13438] pc212e [ 212.442936][T13438] pc214e [ 212.443903][T13438] pc215e [ 212.444892][T13438] pc218e [ 212.445963][T13438] pc272e [ 212.446943][T13438] comedi: valid board names for comedi_parport driver are: [ 212.449252][T13438] comedi_parport [ 212.450418][T13438] comedi: valid board names for comedi_test driver are: [ 212.452689][T13438] comedi_test [ 212.453804][T13438] comedi: valid board names for comedi_bond driver are: [ 212.456230][T13438] comedi_bond [ 212.640275][T13466] binder: 13465:13466 ioctl 541c 200000000100 returned -22 [ 212.717038][T13474] fuse: Unknown parameter 'user_i00000000000000000000' [ 212.737846][ T40] audit: type=1400 audit(1757312677.805:576): avc: denied { getopt } for pid=13477 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.833224][T13489] netlink: 'syz.5.2489': attribute type 7 has an invalid length. [ 212.839851][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 212.863138][T13496] fuse: Bad value for 'user_id' [ 212.864873][T13496] fuse: Bad value for 'user_id' [ 212.910348][T13501] erspan1: entered promiscuous mode [ 212.930760][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2495'. [ 212.934378][T13505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2495'. [ 212.958276][T13511] fuse: Unknown parameter 'user_i00000000000000000000' [ 212.978109][T13511] netfs: Couldn't get user pages (rc=-14) [ 212.982381][ T40] audit: type=1800 audit(1757312678.045:577): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2497" name="/" dev="9p" ino=589826 res=0 errno=0 [ 213.127534][T13522] fuse: Bad value for 'user_id' [ 213.129107][T13522] fuse: Bad value for 'user_id' [ 213.202421][T13533] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 213.231391][T13537] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2508'. [ 213.231406][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2508'. [ 213.276720][ T2112] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 213.420661][T13548] netlink: 'syz.5.2511': attribute type 9 has an invalid length. [ 213.423977][T13548] netlink: 'syz.5.2511': attribute type 9 has an invalid length. [ 213.435335][ T2112] usb 6-1: Using ep0 maxpacket: 16 [ 213.453972][T13551] fuse: Bad value for 'fd' [ 213.464661][T13515] 8021q: adding VLAN 0 to HW filter on device bond21 [ 213.519181][T13515] bond_slave_0: entered promiscuous mode [ 213.519962][T13515] bond_slave_1: entered promiscuous mode [ 213.520364][T13515] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 213.522054][T13515] bond21: (slave macvlan3): Enslaving as a backup interface with an up link [ 213.531923][ T2112] usb 6-1: unable to get BOS descriptor or descriptor too short [ 213.532798][ T2112] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 213.532817][ T2112] usb 6-1: can't read configurations, error -71 [ 214.127081][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2517'. [ 214.130672][T13566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2517'. [ 214.183365][T13575] netlink: 'syz.2.2521': attribute type 2 has an invalid length. [ 214.187044][T13575] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 214.190224][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 214.195093][T13577] fuse: Unknown parameter 'grou00000000000000000000' [ 214.279672][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2524'. [ 214.347711][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 214.347722][ T40] audit: type=1326 audit(1757312679.415:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.1.2527" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4961b8ebe9 code=0x0 [ 214.433782][T13596] fuse: Unknown parameter 'use00000000000000000000' [ 214.466438][ T6046] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 214.625829][ T6046] usb 7-1: Using ep0 maxpacket: 16 [ 214.667285][T13579] 8021q: adding VLAN 0 to HW filter on device bond19 [ 214.707478][ T6046] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.711543][ T6046] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 214.714880][ T6046] usb 7-1: can't read configurations, error -71 [ 214.832006][ T5328] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 214.861521][ T40] audit: type=1400 audit(1757312679.925:582): avc: denied { validate_trans } for pid=13619 comm="syz.5.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 215.260519][ T5328] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 215.301958][T13650] netlink: 'syz.5.2548': attribute type 9 has an invalid length. [ 215.304391][T13650] netlink: 'syz.5.2548': attribute type 9 has an invalid length. [ 215.398798][T13663] fuse: Unknown parameter 'grou00000000000000000000' [ 215.402023][ T40] audit: type=1326 audit(1757312680.465:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.2.2552" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df138ebe9 code=0x0 [ 215.514850][ T40] audit: type=1400 audit(1757312680.575:584): avc: denied { getopt } for pid=13666 comm="syz.6.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.608770][T13681] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 215.611920][T13681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.675787][ T40] audit: type=1400 audit(1757312680.735:585): avc: denied { setattr } for pid=13686 comm="syz.1.2562" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.695555][ T6037] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 215.855526][ T6037] usb 10-1: Using ep0 maxpacket: 16 [ 215.881041][T13669] 8021q: adding VLAN 0 to HW filter on device bond13 [ 215.887307][ T5328] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 215.917616][ T6037] usb 10-1: unable to get BOS descriptor or descriptor too short [ 215.920783][ T6037] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 215.923146][ T6037] usb 10-1: can't read configurations, error -71 [ 216.067536][T13714] random: crng reseeded on system resumption [ 216.074139][T13714] Unrecognized hibernate image header format! [ 216.076902][T13714] PM: hibernation: Image mismatch: architecture specific data [ 216.098943][T13714] VFS: Mount too revealing [ 216.101221][T13714] netlink: 'syz.1.2570': attribute type 9 has an invalid length. [ 216.105013][T13714] netlink: 'syz.1.2570': attribute type 9 has an invalid length. [ 216.337994][T13741] fuse: Unknown parameter 'group_i00000000000000000000' [ 216.342742][ T40] audit: type=1326 audit(1757312681.405:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13739 comm="syz.2.2582" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df138ebe9 code=0x0 [ 216.409596][ T40] audit: type=1400 audit(1757312681.475:587): avc: denied { append } for pid=13727 comm="syz.6.2576" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 216.458093][T13744] __nla_validate_parse: 11 callbacks suppressed [ 216.458105][T13744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2583'. [ 216.463051][T13744] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2583'. [ 216.499936][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2584'. [ 216.543500][T13750] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2586'. [ 216.614561][T13753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.763408][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 216.801787][T13760] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2590'. [ 216.925118][T13768] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 216.930775][ T40] audit: type=1400 audit(1757312682.005:588): avc: denied { getopt } for pid=13767 comm="syz.5.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 216.965841][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2593'. [ 216.969665][T13770] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2593'. [ 217.006098][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2594'. [ 217.085370][ T6056] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 217.201342][T13790] trusted_key: encrypted_key: master key parameter is missing [ 217.245335][ T6056] usb 6-1: Using ep0 maxpacket: 16 [ 217.254956][T13764] bond21: option mode: unable to set because the bond device has slaves [ 217.309878][ T6056] usb 6-1: unable to get BOS descriptor or descriptor too short [ 217.313387][ T6056] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 217.316367][ T6056] usb 6-1: can't read configurations, error -71 [ 217.381518][T13797] program syz.5.2601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.387309][ T40] audit: type=1400 audit(1757312682.455:589): avc: denied { bind } for pid=13796 comm="syz.5.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.433663][T13799] netlink: 'syz.5.2602': attribute type 1 has an invalid length. [ 217.437736][T13799] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2602'. [ 217.493211][T13807] fuse: Unknown parameter 'user_id00000000000000000000' [ 217.499377][T13809] fuse: Unknown parameter 'group_i00000000000000000000' [ 217.502864][ T40] audit: type=1326 audit(1757312682.565:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13808 comm="syz.6.2607" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a33d8ebe9 code=0x0 [ 217.786017][T13834] fuse: Unknown parameter 'user_id00000000000000000000' [ 217.871136][T13842] fuse: Unknown parameter '0x0000000000000006' [ 217.880673][T13842] netfs: Couldn't get user pages (rc=-14) [ 218.115352][ T2112] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 218.267294][ T2112] usb 7-1: Using ep0 maxpacket: 8 [ 218.270499][ T2112] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.273495][ T2112] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.277055][ T2112] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 218.280436][ T2112] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 218.283534][ T2112] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.288632][ T2112] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.291931][ T2112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.498185][ T2112] usb 7-1: GET_CAPABILITIES returned 0 [ 218.500016][ T2112] usbtmc 7-1:16.0: can't read capabilities [ 218.503745][T13869] fuse: Bad value for 'rootmode' [ 218.702284][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.705211][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.708094][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.710879][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.713726][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.716510][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.719321][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.722315][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.725150][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.730371][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.733917][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.737263][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.740669][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.744203][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.748593][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.751437][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.811934][T13886] bond21: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 218.847304][ T6056] usb 7-1: USB disconnect, device number 13 [ 218.851039][T13888] fuse: Unknown parameter '0x0000000000000006' [ 218.858716][T13888] netfs: Couldn't get user pages (rc=-14) [ 219.557701][T13929] fuse: Unknown parameter 'fd0x0000000000000006' [ 219.567801][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 219.567811][ T40] audit: type=1800 audit(1757312684.635:594): pid=13929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2652" name="/" dev="9p" ino=589826 res=0 errno=0 [ 219.568779][T13929] netfs: Couldn't get user pages (rc=-14) [ 219.862634][T13946] netlink: 'syz.2.2659': attribute type 1 has an invalid length. [ 219.955496][ T1462] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 219.961958][T13954] fuse: Unknown parameter '0x0000000000000006' [ 219.985474][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.105374][ T1462] usb 11-1: Using ep0 maxpacket: 16 [ 220.123703][T13935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.146040][T13958] tap0: tun_chr_ioctl cmd 1074025677 [ 220.148476][T13958] tap0: linktype set to 270 [ 220.187431][T13935] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 220.193702][T13935] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 220.204298][ T1462] usb 11-1: unable to get BOS descriptor or descriptor too short [ 220.209924][ T1462] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 220.212334][ T1462] usb 11-1: can't read configurations, error -71 [ 220.417724][T13978] usb usb4: usbfs: process 13978 (syz.2.2670) did not claim interface 0 before use [ 220.510738][T13983] fuse: Bad value for 'fd' [ 220.733786][ T40] audit: type=1400 audit(1757312685.795:595): avc: denied { read } for pid=13984 comm="iou-sqp-13985" path="socket:[109111]" dev="sockfs" ino=109111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.747599][ T40] audit: type=1400 audit(1757312685.815:596): avc: denied { setopt } for pid=13984 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.754868][ T40] audit: type=1400 audit(1757312685.815:597): avc: denied { read } for pid=13984 comm="syz.6.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.944652][ T5328] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 221.218229][T14007] overlay: ./file1 is not a directory [ 221.256101][T14011] fuse: Unknown parameter 'group_id00000000000000000000' [ 221.265400][ T40] audit: type=1326 audit(1757312686.325:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14010 comm="syz.2.2683" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df138ebe9 code=0x0 [ 221.520760][T14030] fuse: Unknown parameter 'user_i00000000000000000000' [ 221.581131][ T40] audit: type=1400 audit(1757312686.645:599): avc: denied { load_policy } for pid=14035 comm="syz.6.2692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 221.581393][T14036] SELinux: policydb string length 14080 does not match expected length 8 [ 221.591676][T14036] SELinux: failed to load policy [ 221.595020][T14036] netlink: 'syz.6.2692': attribute type 5 has an invalid length. [ 221.660470][ T40] audit: type=1326 audit(1757312686.725:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.5.2697" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a138ebe9 code=0x0 [ 221.736392][T14048] syz.5.2697 (14048): drop_caches: 2 [ 221.741467][T14048] syz.5.2697 (14048): drop_caches: 2 [ 221.747040][T14048] trusted_key: syz.5.2697 sent an empty control message without MSG_MORE. [ 221.830417][T14050] GUP no longer grows the stack in syz.6.2698 (14050): 200000007000-20000000a000 (200000004000) [ 221.834085][T14050] CPU: 1 UID: 0 PID: 14050 Comm: syz.6.2698 Not tainted syzkaller #0 PREEMPT(full) [ 221.834100][T14050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.834107][T14050] Call Trace: [ 221.834112][T14050] [ 221.834116][T14050] dump_stack_lvl+0x16c/0x1f0 [ 221.834150][T14050] gup_vma_lookup+0x1d2/0x220 [ 221.834169][T14050] __get_user_pages+0x243/0x34a0 [ 221.834187][T14050] ? xsk_setsockopt+0x6db/0x9a0 [ 221.834201][T14050] ? do_sock_setsockopt+0xf3/0x1d0 [ 221.834215][T14050] ? __sys_setsockopt+0x1a0/0x230 [ 221.834225][T14050] ? __x64_sys_setsockopt+0xbd/0x160 [ 221.834238][T14050] ? __pfx___get_user_pages+0x10/0x10 [ 221.834257][T14050] __gup_longterm_locked+0x2dd/0x17e0 [ 221.834272][T14050] ? __lock_acquire+0xb80/0x1ce0 [ 221.834292][T14050] ? __pfx___gup_longterm_locked+0x10/0x10 [ 221.834315][T14050] pin_user_pages+0x13c/0x160 [ 221.834329][T14050] ? __pfx_pin_user_pages+0x10/0x10 [ 221.834344][T14050] ? xdp_umem_create+0x652/0x1270 [ 221.834358][T14050] xdp_umem_create+0x73c/0x1270 [ 221.834373][T14050] xsk_setsockopt+0x6db/0x9a0 [ 221.834383][T14050] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.834393][T14050] ? find_held_lock+0x2b/0x80 [ 221.834407][T14050] ? selinux_socket_setsockopt+0x6a/0x80 [ 221.834421][T14050] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.834432][T14050] do_sock_setsockopt+0xf3/0x1d0 [ 221.834448][T14050] __sys_setsockopt+0x1a0/0x230 [ 221.834462][T14050] __x64_sys_setsockopt+0xbd/0x160 [ 221.834473][T14050] ? do_syscall_64+0x91/0x4c0 [ 221.834490][T14050] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.834502][T14050] do_syscall_64+0xcd/0x4c0 [ 221.834516][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.834526][T14050] RIP: 0033:0x7f5a33d8ebe9 [ 221.834535][T14050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.834546][T14050] RSP: 002b:00007f5a34c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.834556][T14050] RAX: ffffffffffffffda RBX: 00007f5a33fc5fa0 RCX: 00007f5a33d8ebe9 [ 221.834563][T14050] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 221.834569][T14050] RBP: 00007f5a33e11e19 R08: 0000000000000020 R09: 0000000000000000 [ 221.834575][T14050] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 221.834580][T14050] R13: 00007f5a33fc6038 R14: 00007f5a33fc5fa0 R15: 00007ffc92c41cb8 [ 221.834593][T14050] [ 221.910844][ C1] hpet: Lost 4 RTC interrupts [ 222.113912][T14075] fuse: Unknown parameter '0x0000000000000006' [ 222.342823][ T5328] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 222.344736][ T40] audit: type=1400 audit(1757312687.405:601): avc: denied { setopt } for pid=14084 comm="syz.1.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.561128][T14094] fuse: Unknown parameter 'group_id00000000000000000000' [ 222.566451][ T40] audit: type=1326 audit(1757312687.635:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.5.2715" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a138ebe9 code=0x0 [ 222.652911][T14097] fuse: Unknown parameter '0x0000000000000006' [ 222.728311][T14099] program syz.2.2718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.900449][T14110] FAULT_INJECTION: forcing a failure. [ 222.900449][T14110] name failslab, interval 1, probability 0, space 0, times 0 [ 222.904754][T14110] CPU: 0 UID: 0 PID: 14110 Comm: syz.1.2722 Not tainted syzkaller #0 PREEMPT(full) [ 222.904769][T14110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.904775][T14110] Call Trace: [ 222.904779][T14110] [ 222.904783][T14110] dump_stack_lvl+0x16c/0x1f0 [ 222.904801][T14110] should_fail_ex+0x512/0x640 [ 222.904814][T14110] ? __kmalloc_noprof+0xbf/0x510 [ 222.904826][T14110] ? lsm_blob_alloc+0x68/0x90 [ 222.904837][T14110] should_failslab+0xc2/0x120 [ 222.904849][T14110] __kmalloc_noprof+0xd2/0x510 [ 222.904859][T14110] ? __pfx_perf_event_init_task+0x10/0x10 [ 222.904874][T14110] ? audit_alloc+0xa2/0x7b0 [ 222.904889][T14110] lsm_blob_alloc+0x68/0x90 [ 222.905160][T14110] security_task_alloc+0x2d/0x260 [ 222.905175][T14110] copy_process+0x2205/0x7690 [ 222.905203][T14110] ? __pfx_copy_process+0x10/0x10 [ 222.905219][T14110] ? lockdep_init_map_type+0x5c/0x280 [ 222.905230][T14110] ? lockdep_init_map_type+0x5c/0x280 [ 222.905239][T14110] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 222.905275][T14110] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 222.905293][T14110] vhost_task_create+0x1d2/0x2e0 [ 222.905304][T14110] ? __pfx_vhost_task_create+0x10/0x10 [ 222.905319][T14110] ? __pfx_vhost_task_fn+0x10/0x10 [ 222.905335][T14110] kvm_mmu_post_init_vm+0x1b7/0x380 [ 222.905348][T14110] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 222.905363][T14110] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 222.905380][T14110] kvm_vcpu_ioctl+0x5eb/0x1690 [ 222.905395][T14110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 222.905408][T14110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.905421][T14110] ? do_vfs_ioctl+0x128/0x14f0 [ 222.905437][T14110] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.905453][T14110] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 222.905473][T14110] ? hook_file_ioctl_common+0x145/0x410 [ 222.905488][T14110] ? selinux_file_ioctl+0x180/0x270 [ 222.905502][T14110] ? selinux_file_ioctl+0xb4/0x270 [ 222.905518][T14110] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 222.905531][T14110] __x64_sys_ioctl+0x18b/0x210 [ 222.905548][T14110] do_syscall_64+0xcd/0x4c0 [ 222.905563][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.905574][T14110] RIP: 0033:0x7f4961b8ebe9 [ 222.905582][T14110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.905592][T14110] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.905602][T14110] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 222.905609][T14110] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 222.905615][T14110] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 222.905621][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.905626][T14110] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 222.905640][T14110] [ 223.185495][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.208662][T14129] __nla_validate_parse: 15 callbacks suppressed [ 223.208678][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 223.217457][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 223.407339][T14140] fuse: Unknown parameter '“ã0x0000000000000003' [ 223.409881][T14140] fuse: Bad value for 'fd' [ 223.773523][T14156] FAULT_INJECTION: forcing a failure. [ 223.773523][T14156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.778790][T14156] CPU: 0 UID: 0 PID: 14156 Comm: syz.1.2739 Not tainted syzkaller #0 PREEMPT(full) [ 223.778813][T14156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.778824][T14156] Call Trace: [ 223.778830][T14156] [ 223.778837][T14156] dump_stack_lvl+0x16c/0x1f0 [ 223.778883][T14156] should_fail_ex+0x512/0x640 [ 223.778915][T14156] _copy_from_iter+0x29f/0x1720 [ 223.778944][T14156] ? __alloc_skb+0x200/0x380 [ 223.778964][T14156] ? __pfx__copy_from_iter+0x10/0x10 [ 223.778990][T14156] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 223.779021][T14156] netlink_sendmsg+0x829/0xdd0 [ 223.779048][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.779081][T14156] ____sys_sendmsg+0xa98/0xc70 [ 223.779109][T14156] ? copy_msghdr_from_user+0x10a/0x160 [ 223.779129][T14156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.779166][T14156] ___sys_sendmsg+0x134/0x1d0 [ 223.779190][T14156] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.779252][T14156] __sys_sendmsg+0x16d/0x220 [ 223.779275][T14156] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.779313][T14156] do_syscall_64+0xcd/0x4c0 [ 223.779343][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.779361][T14156] RIP: 0033:0x7f4961b8ebe9 [ 223.779374][T14156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.779391][T14156] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.779407][T14156] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 223.779418][T14156] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 223.779429][T14156] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 223.779439][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.779449][T14156] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 223.779472][T14156] [ 224.110405][T14168] fuse: Unknown parameter 'fd0x0000000000000006' [ 224.200758][T14170] FAULT_INJECTION: forcing a failure. [ 224.200758][T14170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.206618][T14170] CPU: 1 UID: 0 PID: 14170 Comm: syz.2.2746 Not tainted syzkaller #0 PREEMPT(full) [ 224.206641][T14170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.206650][T14170] Call Trace: [ 224.206655][T14170] [ 224.206661][T14170] dump_stack_lvl+0x16c/0x1f0 [ 224.206687][T14170] should_fail_ex+0x512/0x640 [ 224.206712][T14170] _copy_to_user+0x32/0xd0 [ 224.206739][T14170] simple_read_from_buffer+0xcb/0x170 [ 224.206759][T14170] proc_fail_nth_read+0x197/0x240 [ 224.206784][T14170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.206810][T14170] ? rw_verify_area+0xcf/0x6c0 [ 224.206838][T14170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.206860][T14170] vfs_read+0x1e1/0xcf0 [ 224.206880][T14170] ? __pfx___mutex_lock+0x10/0x10 [ 224.206902][T14170] ? __pfx_vfs_read+0x10/0x10 [ 224.206926][T14170] ? __fget_files+0x20e/0x3c0 [ 224.206952][T14170] ksys_read+0x12a/0x250 [ 224.206969][T14170] ? __pfx_ksys_read+0x10/0x10 [ 224.206988][T14170] ? fput+0x9b/0xd0 [ 224.207015][T14170] do_syscall_64+0xcd/0x4c0 [ 224.207039][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.207058][T14170] RIP: 0033:0x7f0df138d5fc [ 224.207076][T14170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 224.207091][T14170] RSP: 002b:00007f0df2148030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.207116][T14170] RAX: ffffffffffffffda RBX: 00007f0df15c5fa0 RCX: 00007f0df138d5fc [ 224.207127][T14170] RDX: 000000000000000f RSI: 00007f0df21480a0 RDI: 0000000000000009 [ 224.207137][T14170] RBP: 00007f0df2148090 R08: 0000000000000000 R09: 0000000000000000 [ 224.207150][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.207159][T14170] R13: 00007f0df15c6038 R14: 00007f0df15c5fa0 R15: 00007ffef19a5308 [ 224.207195][T14170] [ 224.257816][ T6101] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 224.303293][T14172] binder: 14171:14172 ioctl 3ba0 200000000040 returned -22 [ 224.344218][T14174] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2748'. [ 224.426722][ T6101] usb 6-1: Using ep0 maxpacket: 8 [ 224.430539][ T6101] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.434804][ T6101] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.440725][T14183] fuse: Bad value for 'fd' [ 224.441256][ T6101] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 224.446642][ T6101] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 224.450470][ T6101] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.456028][ T6101] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.459681][ T6101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.671327][ T6101] usb 6-1: GET_CAPABILITIES returned 0 [ 224.673045][ T6101] usbtmc 6-1:16.0: can't read capabilities [ 224.874051][ T6101] usb 6-1: USB disconnect, device number 10 [ 225.306497][T14200] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2758'. [ 225.425348][T14209] fuse: Bad value for 'fd' [ 225.857110][T14229] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2769'. [ 226.235456][ T6037] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 226.299437][ T40] audit: type=1400 audit(1757312691.365:603): avc: denied { read } for pid=14237 comm="syz.6.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.401108][T14246] fuse: Unknown parameter '0x0000000000000004' [ 226.415456][ T6037] usb 10-1: Using ep0 maxpacket: 16 [ 226.422424][T14234] bond13: option mode: unable to set because the bond device is up [ 226.456172][T14234] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 226.460298][T14234] bond13: (slave macvlan3): Enslaving as a backup interface with a down link [ 226.472618][ T6037] usb 10-1: unable to get BOS descriptor or descriptor too short [ 226.476615][ T6037] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 226.479626][ T6037] usb 10-1: can't read configurations, error -71 [ 226.504193][T14254] fuse: Bad value for 'user_id' [ 226.505926][T14254] fuse: Bad value for 'user_id' [ 226.509243][ T40] audit: type=1326 audit(1757312691.575:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.1.2780" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4961b8ebe9 code=0x0 [ 226.633765][ T40] audit: type=1400 audit(1757312691.695:605): avc: denied { mounton } for pid=14260 comm="syz.6.2783" path="/337/bus" dev="9p" ino=35913901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.634036][T14261] overlayfs: workdir and upperdir must reside under the same mount [ 226.654090][ T40] audit: type=1400 audit(1757312691.715:606): avc: denied { create } for pid=14260 comm="syz.6.2783" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 226.668146][ T40] audit: type=1400 audit(1757312691.715:607): avc: denied { associate } for pid=14260 comm="syz.6.2783" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 227.272421][T14281] FAULT_INJECTION: forcing a failure. [ 227.272421][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 227.278457][T14281] CPU: 3 UID: 0 PID: 14281 Comm: syz.5.2791 Not tainted syzkaller #0 PREEMPT(full) [ 227.278479][T14281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.278486][T14281] Call Trace: [ 227.278491][T14281] [ 227.278495][T14281] dump_stack_lvl+0x16c/0x1f0 [ 227.278519][T14281] should_fail_ex+0x512/0x640 [ 227.278540][T14281] ? fs_reclaim_acquire+0xae/0x150 [ 227.278566][T14281] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 227.278589][T14281] should_failslab+0xc2/0x120 [ 227.278607][T14281] __kmalloc_noprof+0xd2/0x510 [ 227.278631][T14281] tomoyo_realpath_from_path+0xc2/0x6e0 [ 227.278659][T14281] ? tomoyo_profile+0x47/0x60 [ 227.278677][T14281] tomoyo_path_number_perm+0x245/0x580 [ 227.278697][T14281] ? tomoyo_path_number_perm+0x237/0x580 [ 227.278719][T14281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.278742][T14281] ? find_held_lock+0x2b/0x80 [ 227.278786][T14281] ? find_held_lock+0x2b/0x80 [ 227.278803][T14281] ? hook_file_ioctl_common+0x145/0x410 [ 227.278825][T14281] ? __fget_files+0x20e/0x3c0 [ 227.278846][T14281] security_file_ioctl+0x9b/0x240 [ 227.278870][T14281] __x64_sys_ioctl+0xb7/0x210 [ 227.278895][T14281] do_syscall_64+0xcd/0x4c0 [ 227.278915][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.278931][T14281] RIP: 0033:0x7fd7a138ebe9 [ 227.278944][T14281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.278959][T14281] RSP: 002b:00007fd79f5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.278975][T14281] RAX: ffffffffffffffda RBX: 00007fd7a15c5fa0 RCX: 00007fd7a138ebe9 [ 227.278985][T14281] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 227.278994][T14281] RBP: 00007fd79f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.279004][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.279013][T14281] R13: 00007fd7a15c6038 R14: 00007fd7a15c5fa0 R15: 00007fff13982b68 [ 227.279036][T14281] [ 227.279044][T14281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 227.408443][T14291] netlink: ct family unspecified [ 227.410311][T14291] openvswitch: netlink: Actions may not be safe on all matching packets [ 227.795462][ T6056] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 227.855370][ T6010] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 227.955376][ T6056] usb 11-1: Using ep0 maxpacket: 16 [ 227.963056][T14297] bond1: option mode: unable to set because the bond device has slaves [ 228.021644][T14297] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 228.025390][ T6010] usb 10-1: Using ep0 maxpacket: 16 [ 228.032067][T14301] bond13: option mode: unable to set because the bond device has slaves [ 228.062582][T14301] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 228.090512][ T6056] usb 11-1: unable to get BOS descriptor or descriptor too short [ 228.094826][ T6056] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 228.098334][ T6056] usb 11-1: can't read configurations, error -71 [ 228.140190][ T6010] usb 10-1: unable to get BOS descriptor or descriptor too short [ 228.144226][ T6010] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 228.147755][ T6010] usb 10-1: can't read configurations, error -71 [ 228.247545][T14324] trusted_key: encrypted_key: insufficient parameters specified [ 228.305384][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.775777][T14343] fuse: Unknown parameter '0x0000000000000004' [ 228.803271][T14335] batman_adv: batadv0: Adding interface: ipvlan2 [ 228.805825][T14335] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.817228][T14335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.820681][T14335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.824423][T14335] batman_adv: batadv0: Interface activated: ipvlan2 [ 229.501088][ T40] audit: type=1400 audit(1757312694.565:608): avc: denied { setopt } for pid=14359 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.554261][T14362] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2821'. [ 229.581639][T14364] fuse: Unknown parameter '0x0000000000000004' [ 229.598589][T14366] fuse: Bad value for 'user_id' [ 229.600518][T14366] fuse: Bad value for 'user_id' [ 229.603152][ T40] audit: type=1326 audit(1757312694.665:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.1.2823" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4961b8ebe9 code=0x0 [ 229.710207][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2824'. [ 229.714048][T14371] netlink: 'syz.5.2824': attribute type 21 has an invalid length. [ 229.724360][ T5328] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 229.736555][ T6101] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 229.887806][ T6101] usb 7-1: Using ep0 maxpacket: 16 [ 229.892736][T14358] bond19: option mode: unable to set because the bond device is up [ 229.922667][T14358] bond_slave_0: entered promiscuous mode [ 229.925450][T14358] bond_slave_1: entered promiscuous mode [ 229.928448][T14358] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 229.934045][T14358] bond19: (slave macvlan5): Enslaving as a backup interface with an up link [ 229.941348][ T6101] usb 7-1: unable to get BOS descriptor or descriptor too short [ 229.944745][ T6101] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 229.947561][ T6101] usb 7-1: can't read configurations, error -71 [ 230.530753][ T40] audit: type=1400 audit(1757312695.595:610): avc: denied { setattr } for pid=14373 comm="syz.1.2825" path="socket:[113519]" dev="sockfs" ino=113519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.207425][T14395] fuse: Unknown parameter '0x0000000000000004' [ 231.233788][T14397] fuse: Bad value for 'user_id' [ 231.238917][T14397] fuse: Bad value for 'user_id' [ 231.241867][ T40] audit: type=1326 audit(1757312696.305:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14396 comm="syz.5.2833" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a138ebe9 code=0x0 [ 231.492277][T14403] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2835'. [ 232.246609][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2844'. [ 232.277983][T14428] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2845'. [ 232.388552][T14436] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 232.393344][T14437] tmpfs: Unknown parameter 'nrcO—cks' [ 232.538240][T14446] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2852'. [ 232.545492][ T5328] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 232.545591][ T5985] Bluetooth: hci3: command 0x1003 tx timeout [ 232.594331][T14450] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2854'. [ 232.602364][T14452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2855'. [ 232.628739][T14454] FAULT_INJECTION: forcing a failure. [ 232.628739][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.633672][T14454] CPU: 0 UID: 0 PID: 14454 Comm: syz.1.2856 Not tainted syzkaller #0 PREEMPT(full) [ 232.633692][T14454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.633702][T14454] Call Trace: [ 232.633708][T14454] [ 232.633714][T14454] dump_stack_lvl+0x16c/0x1f0 [ 232.633739][T14454] should_fail_ex+0x512/0x640 [ 232.633759][T14454] _copy_from_user+0x2e/0xd0 [ 232.633782][T14454] copy_msghdr_from_user+0x98/0x160 [ 232.633817][T14454] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 232.633852][T14454] ___sys_sendmsg+0xfe/0x1d0 [ 232.633871][T14454] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.633913][T14454] __sys_sendmsg+0x16d/0x220 [ 232.633932][T14454] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.633963][T14454] do_syscall_64+0xcd/0x4c0 [ 232.633985][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.634000][T14454] RIP: 0033:0x7f4961b8ebe9 [ 232.634013][T14454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.634027][T14454] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.634042][T14454] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 232.634052][T14454] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 232.634061][T14454] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 232.634069][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.634078][T14454] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 232.634098][T14454] [ 232.695874][ T6101] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 232.780486][T14461] fuse: Unknown parameter 'fd0x0000000000000004' [ 232.827328][ T40] audit: type=1400 audit(1757312697.895:612): avc: denied { map } for pid=14466 comm="syz.1.2862" path="socket:[115766]" dev="sockfs" ino=115766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.835329][ T40] audit: type=1400 audit(1757312697.895:613): avc: denied { read accept } for pid=14466 comm="syz.1.2862" path="socket:[115766]" dev="sockfs" ino=115766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.865353][ T6101] usb 10-1: Using ep0 maxpacket: 16 [ 232.868947][T14469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=14469 comm=syz.1.2863 [ 232.870068][T14440] bond13: option mode: unable to set because the bond device has slaves [ 232.905053][T14440] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 232.909905][ T40] audit: type=1400 audit(1757312697.975:614): avc: denied { append } for pid=14471 comm="syz.1.2864" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 232.968507][ T6101] usb 10-1: unable to get BOS descriptor or descriptor too short [ 232.971445][ T6101] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 232.973790][ T6101] usb 10-1: can't read configurations, error -71 [ 232.999102][T14479] fuse: Bad value for 'fd' [ 233.061438][T14472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.063448][T14472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.065612][T14472] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.068200][T14472] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 233.070876][T14472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.073264][T14472] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.076938][T14472] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 233.104506][T14482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2867'. [ 233.110614][T14483] binder: 14481:14483 ioctl 4018620d 0 returned -22 [ 233.564566][T14505] binder: 14504:14505 ioctl 4018620d 0 returned -22 [ 233.608825][T14510] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2879'. [ 234.441649][T14539] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 235.105715][ T5328] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.105832][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.106060][ T5985] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.109938][T14575] __nla_validate_parse: 1 callbacks suppressed [ 235.109951][T14575] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2901'. [ 235.435461][ T1462] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 235.595713][ T1462] usb 11-1: Using ep0 maxpacket: 16 [ 235.603088][T14577] bond1: option mode: unable to set because the bond device has slaves [ 235.642426][T14577] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 235.719091][ T1462] usb 11-1: unable to get BOS descriptor or descriptor too short [ 235.722871][ T1462] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 235.728225][ T1462] usb 11-1: can't read configurations, error -71 [ 235.839571][T14594] FAULT_INJECTION: forcing a failure. [ 235.839571][T14594] name failslab, interval 1, probability 0, space 0, times 0 [ 235.844124][T14594] CPU: 2 UID: 0 PID: 14594 Comm: syz.2.2909 Not tainted syzkaller #0 PREEMPT(full) [ 235.844146][T14594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.844156][T14594] Call Trace: [ 235.844162][T14594] [ 235.844168][T14594] dump_stack_lvl+0x16c/0x1f0 [ 235.844193][T14594] should_fail_ex+0x512/0x640 [ 235.844212][T14594] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 235.844232][T14594] should_failslab+0xc2/0x120 [ 235.844251][T14594] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 235.844267][T14594] ? fpstate_reset+0x112/0x3b0 [ 235.844301][T14594] ? alloc_pid+0xc7/0xbc0 [ 235.844320][T14594] alloc_pid+0xc7/0xbc0 [ 235.844343][T14594] copy_process+0x466f/0x7690 [ 235.844399][T14594] ? __pfx_copy_process+0x10/0x10 [ 235.844427][T14594] ? lockdep_init_map_type+0x5c/0x280 [ 235.844444][T14594] ? lockdep_init_map_type+0x5c/0x280 [ 235.844460][T14594] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 235.844481][T14594] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 235.844505][T14594] vhost_task_create+0x1d2/0x2e0 [ 235.844522][T14594] ? __pfx_vhost_task_create+0x10/0x10 [ 235.844545][T14594] ? __pfx_vhost_task_fn+0x10/0x10 [ 235.844573][T14594] kvm_mmu_post_init_vm+0x1b7/0x380 [ 235.844592][T14594] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 235.844614][T14594] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 235.844639][T14594] kvm_vcpu_ioctl+0x5eb/0x1690 [ 235.844662][T14594] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.844683][T14594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.844703][T14594] ? do_vfs_ioctl+0x128/0x14f0 [ 235.844726][T14594] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.844750][T14594] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 235.844781][T14594] ? hook_file_ioctl_common+0x145/0x410 [ 235.844804][T14594] ? selinux_file_ioctl+0x180/0x270 [ 235.844824][T14594] ? selinux_file_ioctl+0xb4/0x270 [ 235.844846][T14594] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.844867][T14594] __x64_sys_ioctl+0x18b/0x210 [ 235.844892][T14594] do_syscall_64+0xcd/0x4c0 [ 235.844914][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.844932][T14594] RIP: 0033:0x7f0df138ebe9 [ 235.844947][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.844962][T14594] RSP: 002b:00007f0df2148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.844977][T14594] RAX: ffffffffffffffda RBX: 00007f0df15c5fa0 RCX: 00007f0df138ebe9 [ 235.844989][T14594] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 235.844998][T14594] RBP: 00007f0df2148090 R08: 0000000000000000 R09: 0000000000000000 [ 235.845007][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.845017][T14594] R13: 00007f0df15c6038 R14: 00007f0df15c5fa0 R15: 00007ffef19a5308 [ 235.845046][T14594] [ 236.154433][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 236.175219][ T40] audit: type=1400 audit(1757312701.235:615): avc: denied { nlmsg_read } for pid=14601 comm="syz.1.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.175357][T14602] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2912'. [ 236.655422][ T1462] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 236.779668][T14615] netlink: 'syz.5.2918': attribute type 2 has an invalid length. [ 236.805508][ T1462] usb 11-1: Using ep0 maxpacket: 16 [ 236.811763][T14608] bond1: option mode: unable to set because the bond device has slaves [ 236.847544][T14608] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 236.853978][T14620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.858886][T14620] block device autoloading is deprecated and will be removed. [ 236.889590][T14622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2921'. [ 236.911296][ T1462] usb 11-1: unable to get BOS descriptor or descriptor too short [ 236.915623][ T1462] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 236.918890][ T1462] usb 11-1: can't read configurations, error -71 [ 236.921923][ T1462] usb usb11-port1: attempt power cycle [ 236.922101][T14624] netlink: 'syz.5.2922': attribute type 1 has an invalid length. [ 236.926993][T14624] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2922'. [ 236.929742][T14624] FAULT_INJECTION: forcing a failure. [ 236.929742][T14624] name failslab, interval 1, probability 0, space 0, times 0 [ 236.933890][T14624] CPU: 3 UID: 0 PID: 14624 Comm: syz.5.2922 Not tainted syzkaller #0 PREEMPT(full) [ 236.933904][T14624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.933910][T14624] Call Trace: [ 236.933914][T14624] [ 236.933918][T14624] dump_stack_lvl+0x16c/0x1f0 [ 236.933936][T14624] should_fail_ex+0x512/0x640 [ 236.933952][T14624] should_failslab+0xc2/0x120 [ 236.933965][T14624] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 236.933976][T14624] ? __alloc_skb+0x2b2/0x380 [ 236.933988][T14624] ? __pfx___mutex_lock+0x10/0x10 [ 236.934003][T14624] __alloc_skb+0x2b2/0x380 [ 236.934015][T14624] ? __pfx___alloc_skb+0x10/0x10 [ 236.934028][T14624] ? __nla_parse+0x40/0x60 [ 236.934046][T14624] hwsim_get_radio_nl+0x17a/0x340 [ 236.934061][T14624] genl_family_rcv_msg_doit+0x206/0x2f0 [ 236.934078][T14624] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.934094][T14624] ? genl_get_cmd+0x194/0x580 [ 236.934112][T14624] ? netlink_alloc_large_skb+0x69/0x130 [ 236.934125][T14624] ? netlink_sendmsg+0x6a1/0xdd0 [ 236.934137][T14624] ? __radix_tree_lookup+0x21f/0x2c0 [ 236.934151][T14624] genl_rcv_msg+0x55c/0x800 [ 236.934168][T14624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.934183][T14624] ? __pfx_hwsim_get_radio_nl+0x10/0x10 [ 236.934200][T14624] ? __lock_acquire+0x62e/0x1ce0 [ 236.934219][T14624] netlink_rcv_skb+0x155/0x420 [ 236.934232][T14624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.934248][T14624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.934267][T14624] ? netlink_deliver_tap+0x1ae/0xd30 [ 236.934279][T14624] ? selinux_netlink_send+0x578/0x830 [ 236.934292][T14624] ? is_vmalloc_addr+0x86/0xa0 [ 236.934304][T14624] genl_rcv+0x28/0x40 [ 236.934317][T14624] netlink_unicast+0x5aa/0x870 [ 236.934332][T14624] ? __pfx_netlink_unicast+0x10/0x10 [ 236.934346][T14624] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 236.934363][T14624] netlink_sendmsg+0x8d1/0xdd0 [ 236.934379][T14624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.934398][T14624] ____sys_sendmsg+0xa98/0xc70 [ 236.934414][T14624] ? copy_msghdr_from_user+0x10a/0x160 [ 236.934427][T14624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.934449][T14624] ___sys_sendmsg+0x134/0x1d0 [ 236.934462][T14624] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.934491][T14624] __sys_sendmsg+0x16d/0x220 [ 236.934504][T14624] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.934526][T14624] do_syscall_64+0xcd/0x4c0 [ 236.934540][T14624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.934551][T14624] RIP: 0033:0x7fd7a138ebe9 [ 236.934560][T14624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.934570][T14624] RSP: 002b:00007fd79f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.934580][T14624] RAX: ffffffffffffffda RBX: 00007fd7a15c5fa0 RCX: 00007fd7a138ebe9 [ 236.934586][T14624] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 236.934592][T14624] RBP: 00007fd79f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.934598][T14624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.934604][T14624] R13: 00007fd7a15c6038 R14: 00007fd7a15c5fa0 R15: 00007fff13982b68 [ 236.934617][T14624] [ 237.185348][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.186460][ T1206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.187226][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 237.265484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.282300][ T1206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.396397][ T5328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.399384][ T5328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.402916][ T5328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.409216][ T5328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.418189][ T5328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.422286][ T1206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.503821][ T1206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.550983][ T40] audit: type=1400 audit(1757312702.615:616): avc: denied { write } for pid=14639 comm="syz.5.2930" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 237.598018][T14635] chnl_net:caif_netlink_parms(): no params data found [ 237.710110][ T1206] bond_slave_0: left promiscuous mode [ 237.712057][ T1206] bond_slave_1: left promiscuous mode [ 237.857224][ T1206] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 237.984387][ T1206] bond19 (unregistering): (slave macvlan5): Removing an active aggregator [ 237.988915][ T1206] bond19 (unregistering): (slave macvlan5): Releasing backup interface [ 237.998415][ T1206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.004234][ T1206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.009299][ T1206] bond0 (unregistering): Released all slaves [ 238.090944][ T1206] bond1 (unregistering): (slave bond2): Releasing backup interface [ 238.094815][ T1206] bond1 (unregistering): Released all slaves [ 238.178701][ T1206] bond2 (unregistering): Released all slaves [ 238.261260][ T1206] bond3 (unregistering): (slave bond4): Releasing backup interface [ 238.265001][ T1206] bond3 (unregistering): Released all slaves [ 238.346350][ T1206] bond4 (unregistering): Released all slaves [ 238.419797][ T1206] bond5 (unregistering): Released all slaves [ 238.495990][ T1206] bond6 (unregistering): (slave bond7): Releasing backup interface [ 238.499241][ T1206] bond6 (unregistering): Released all slaves [ 238.559880][T14658] fuse: Bad value for 'fd' [ 238.576515][ T1206] bond7 (unregistering): Released all slaves [ 238.649208][ T1206] bond8 (unregistering): (slave bond9): Releasing backup interface [ 238.652138][ T1206] bond8 (unregistering): Released all slaves [ 238.717089][ T1206] bond9 (unregistering): Released all slaves [ 238.782318][ T1206] bond10 (unregistering): (slave bond11): Releasing backup interface [ 238.785872][ T1206] bond10 (unregistering): Released all slaves [ 238.868116][ T1206] bond11 (unregistering): Released all slaves [ 238.875064][ T1206] bond12 (unregistering): (slave bond13): Releasing backup interface [ 238.878210][ T1206] bond12 (unregistering): Released all slaves [ 238.944084][ T1206] bond13 (unregistering): Released all slaves [ 238.950986][ T1206] bond14 (unregistering): (slave bond15): Releasing backup interface [ 238.953718][ T1206] bond14 (unregistering): Released all slaves [ 239.026587][ T1206] bond15 (unregistering): Released all slaves [ 239.033558][ T1206] bond16 (unregistering): (slave bond17): Releasing backup interface [ 239.036730][ T1206] bond16 (unregistering): Released all slaves [ 239.106959][ T1206] bond17 (unregistering): Released all slaves [ 239.114488][ T1206] bond18 (unregistering): Released all slaves [ 239.197744][ T1206] bond19 (unregistering): Released all slaves [ 239.265906][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.265937][ T5328] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.267685][T14635] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.267794][T14635] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.267900][T14635] bridge_slave_0: entered allmulticast mode [ 239.269465][T14635] bridge_slave_0: entered promiscuous mode [ 239.285753][T14635] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.288449][T14654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.293300][T14635] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.294139][T14654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.297356][T14635] bridge_slave_1: entered allmulticast mode [ 239.299862][T14654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.303347][T14635] bridge_slave_1: entered promiscuous mode [ 239.304549][T14654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.311914][T14654] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.333882][T14654] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.344001][ T1206] tipc: Left network mode [ 239.381882][T14635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.387247][T14661] libceph: resolve '40' (ret=-3): failed [ 239.390413][T14635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.449670][T14635] team0: Port device team_slave_0 added [ 239.454773][T14635] team0: Port device team_slave_1 added [ 239.520906][T14635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.523716][T14635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.533563][T14635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.547077][T14635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.549924][T14635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.560970][T14635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.567589][ T1206] macvlan0: left promiscuous mode [ 239.570531][ T1206] batadv_slave_1: left promiscuous mode [ 239.579808][ T1206] hsr_slave_0: left promiscuous mode [ 239.581832][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.584352][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.587702][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.589931][T14668] netlink: 'syz.6.2934': attribute type 1 has an invalid length. [ 239.590088][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.627077][ T1206] veth1_macvtap: left promiscuous mode [ 239.629146][ T1206] veth0_macvtap: left promiscuous mode [ 239.631242][ T1206] veth1_vlan: left promiscuous mode [ 239.633341][ T1206] veth0_vlan: left promiscuous mode [ 240.232588][ T1206] team0 (unregistering): Port device team_slave_1 removed [ 240.327573][ T1206] team0 (unregistering): Port device team_slave_0 removed [ 240.517600][ T6101] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 240.575507][ T2112] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 240.675623][ T6101] usb 10-1: Using ep0 maxpacket: 16 [ 240.735843][ T2112] usb 6-1: Using ep0 maxpacket: 16 [ 240.827430][T14673] bond13: option mode: unable to set because the bond device has slaves [ 240.830488][T14675] bond21: option mode: unable to set because the bond device has slaves [ 240.836888][T14676] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 240.847019][T14678] bond21: (slave macvlan5): Error -98 calling set_mac_address [ 240.903355][T14635] hsr_slave_0: entered promiscuous mode [ 240.905831][T14635] hsr_slave_1: entered promiscuous mode [ 240.919589][ T6101] usb 10-1: unable to get BOS descriptor or descriptor too short [ 240.927175][ T6101] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 240.929432][ T2112] usb 6-1: unable to get BOS descriptor or descriptor too short [ 240.929823][ T6101] usb 10-1: can't read configurations, error -71 [ 240.934319][ T2112] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 240.937510][ T2112] usb 6-1: can't read configurations, error -71 [ 241.047045][T14635] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.052714][T14635] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.057272][T14635] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.069292][T14635] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.127042][T14635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.148859][T14635] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.157037][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.159295][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.167149][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.169645][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.179150][ T1206] IPVS: stop unused estimator thread 0... [ 241.301332][T14635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.343168][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2942'. [ 241.359018][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.359084][ T5985] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.359144][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.361599][ T5328] Bluetooth: hci0: command 0x041b tx timeout [ 241.476280][T14635] veth0_vlan: entered promiscuous mode [ 241.483360][T14635] veth1_vlan: entered promiscuous mode [ 241.502210][T14635] veth0_macvtap: entered promiscuous mode [ 241.506203][T14635] veth1_macvtap: entered promiscuous mode [ 241.526775][T14635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.537207][T14635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.547968][ T1206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.551434][ T1206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.554317][ T1206] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.560377][ T1206] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.590963][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.593552][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.605160][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.607834][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.623023][ T40] audit: type=1400 audit(1757312706.685:617): avc: denied { mounton } for pid=14635 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 242.061165][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2950'. [ 242.560949][T14757] FAULT_INJECTION: forcing a failure. [ 242.560949][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 242.564921][T14757] CPU: 2 UID: 0 PID: 14757 Comm: syz.7.2958 Not tainted syzkaller #0 PREEMPT(full) [ 242.564935][T14757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.564942][T14757] Call Trace: [ 242.564946][T14757] [ 242.564950][T14757] dump_stack_lvl+0x16c/0x1f0 [ 242.564967][T14757] should_fail_ex+0x512/0x640 [ 242.564984][T14757] ? fs_reclaim_acquire+0xae/0x150 [ 242.564999][T14757] ? tomoyo_encode2+0x100/0x3e0 [ 242.565014][T14757] should_failslab+0xc2/0x120 [ 242.565026][T14757] __kmalloc_noprof+0xd2/0x510 [ 242.565040][T14757] tomoyo_encode2+0x100/0x3e0 [ 242.565057][T14757] tomoyo_encode+0x29/0x50 [ 242.565071][T14757] tomoyo_realpath_from_path+0x18f/0x6e0 [ 242.565088][T14757] ? tomoyo_profile+0x47/0x60 [ 242.565099][T14757] tomoyo_path_number_perm+0x245/0x580 [ 242.565112][T14757] ? tomoyo_path_number_perm+0x237/0x580 [ 242.565126][T14757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.565140][T14757] ? find_held_lock+0x2b/0x80 [ 242.565165][T14757] ? find_held_lock+0x2b/0x80 [ 242.565177][T14757] ? hook_file_ioctl_common+0x145/0x410 [ 242.565191][T14757] ? __fget_files+0x20e/0x3c0 [ 242.565205][T14757] security_file_ioctl+0x9b/0x240 [ 242.565221][T14757] __x64_sys_ioctl+0xb7/0x210 [ 242.565237][T14757] do_syscall_64+0xcd/0x4c0 [ 242.565264][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.565276][T14757] RIP: 0033:0x7fc75c98ebe9 [ 242.565284][T14757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.565294][T14757] RSP: 002b:00007fc75d756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.565305][T14757] RAX: ffffffffffffffda RBX: 00007fc75cbc5fa0 RCX: 00007fc75c98ebe9 [ 242.565311][T14757] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 242.565317][T14757] RBP: 00007fc75d756090 R08: 0000000000000000 R09: 0000000000000000 [ 242.565323][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.565328][T14757] R13: 00007fc75cbc6038 R14: 00007fc75cbc5fa0 R15: 00007ffdb027da18 [ 242.565342][T14757] [ 242.630896][ T2112] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 242.632674][T14757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.720601][ T40] audit: type=1800 audit(1757312707.785:618): pid=14761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2959" name="bus" dev="9p" ino=35913961 res=0 errno=0 [ 242.796440][ T2112] usb 10-1: Using ep0 maxpacket: 16 [ 242.802848][T14747] bond13: option mode: unable to set because the bond device has slaves [ 242.840155][T14747] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 242.904454][ T40] audit: type=1400 audit(1757312707.965:619): avc: denied { append } for pid=14769 comm="syz.7.2964" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 242.922132][ T2112] usb 10-1: unable to get BOS descriptor or descriptor too short [ 242.926097][ T2112] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 242.928510][ T2112] usb 10-1: can't read configurations, error -71 [ 243.097856][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2966'. [ 243.335015][T14785] FAULT_INJECTION: forcing a failure. [ 243.335015][T14785] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 243.341223][T14785] CPU: 2 UID: 0 PID: 14785 Comm: syz.7.2970 Not tainted syzkaller #0 PREEMPT(full) [ 243.341245][T14785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.341257][T14785] Call Trace: [ 243.341263][T14785] [ 243.341271][T14785] dump_stack_lvl+0x16c/0x1f0 [ 243.341298][T14785] should_fail_ex+0x512/0x640 [ 243.341323][T14785] should_fail_alloc_page+0xe7/0x130 [ 243.341345][T14785] prepare_alloc_pages+0x3c2/0x610 [ 243.341367][T14785] ? rcu_is_watching+0x12/0xc0 [ 243.341392][T14785] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 243.341417][T14785] ? rcu_is_watching+0x12/0xc0 [ 243.341437][T14785] ? trace_mm_page_alloc+0x11f/0x1a0 [ 243.341460][T14785] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 243.341479][T14785] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.341499][T14785] ? is_bpf_text_address+0x8a/0x1a0 [ 243.341516][T14785] ? bpf_ksym_find+0x127/0x1c0 [ 243.341538][T14785] ? is_bpf_text_address+0x94/0x1a0 [ 243.341556][T14785] ? __kernel_text_address+0xd/0x40 [ 243.341573][T14785] ? unwind_get_return_address+0x59/0xa0 [ 243.341601][T14785] alloc_pages_bulk_noprof+0x71c/0x1410 [ 243.341618][T14785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.341639][T14785] ? policy_nodemask+0xea/0x4e0 [ 243.341661][T14785] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 243.341679][T14785] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.341710][T14785] kasan_populate_vmalloc+0xf1/0x1f0 [ 243.341743][T14785] alloc_vmap_area+0x959/0x29c0 [ 243.341777][T14785] ? __pfx_alloc_vmap_area+0x10/0x10 [ 243.341806][T14785] __get_vm_area_node+0x1ca/0x330 [ 243.341834][T14785] __vmalloc_node_range_noprof+0x271/0x14b0 [ 243.341860][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.341876][T14785] ? local_lock_release+0x99/0x140 [ 243.341903][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.341919][T14785] ? rcu_read_unlock+0x17/0x60 [ 243.341943][T14785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.341982][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.341998][T14785] __vmalloc_node_noprof+0xad/0xf0 [ 243.342022][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.342041][T14785] copy_process+0x2c70/0x7690 [ 243.342077][T14785] ? __pfx_copy_process+0x10/0x10 [ 243.342104][T14785] ? lockdep_init_map_type+0x5c/0x280 [ 243.342122][T14785] ? lockdep_init_map_type+0x5c/0x280 [ 243.342139][T14785] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 243.342162][T14785] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 243.342187][T14785] vhost_task_create+0x1d2/0x2e0 [ 243.342202][T14785] ? __pfx_vhost_task_create+0x10/0x10 [ 243.342223][T14785] ? __pfx_vhost_task_fn+0x10/0x10 [ 243.342248][T14785] kvm_mmu_post_init_vm+0x1b7/0x380 [ 243.342267][T14785] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 243.342288][T14785] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 243.342314][T14785] kvm_vcpu_ioctl+0x5eb/0x1690 [ 243.342338][T14785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.342360][T14785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.342381][T14785] ? do_vfs_ioctl+0x128/0x14f0 [ 243.342408][T14785] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.342434][T14785] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 243.342468][T14785] ? hook_file_ioctl_common+0x145/0x410 [ 243.342494][T14785] ? selinux_file_ioctl+0x180/0x270 [ 243.342517][T14785] ? selinux_file_ioctl+0xb4/0x270 [ 243.342540][T14785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.342563][T14785] __x64_sys_ioctl+0x18b/0x210 [ 243.342588][T14785] do_syscall_64+0xcd/0x4c0 [ 243.342614][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.342629][T14785] RIP: 0033:0x7fc75c98ebe9 [ 243.342640][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.342655][T14785] RSP: 002b:00007fc75d756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.342673][T14785] RAX: ffffffffffffffda RBX: 00007fc75cbc5fa0 RCX: 00007fc75c98ebe9 [ 243.342682][T14785] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 243.342693][T14785] RBP: 00007fc75d756090 R08: 0000000000000000 R09: 0000000000000000 [ 243.342702][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.342711][T14785] R13: 00007fc75cbc6038 R14: 00007fc75cbc5fa0 R15: 00007ffdb027da18 [ 243.342734][T14785] [ 243.343173][T14785] syz.7.2970: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.502605][T14785] CPU: 2 UID: 0 PID: 14785 Comm: syz.7.2970 Not tainted syzkaller #0 PREEMPT(full) [ 243.502620][T14785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 243.502626][T14785] Call Trace: [ 243.502630][T14785] [ 243.502634][T14785] dump_stack_lvl+0x16c/0x1f0 [ 243.502652][T14785] warn_alloc+0x248/0x3a0 [ 243.502664][T14785] ? __pfx_warn_alloc+0x10/0x10 [ 243.502675][T14785] ? kfree+0x2b4/0x4d0 [ 243.502693][T14785] ? __get_vm_area_node+0x208/0x330 [ 243.502712][T14785] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 243.502727][T14785] ? local_lock_release+0x99/0x140 [ 243.502744][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.502757][T14785] ? rcu_read_unlock+0x17/0x60 [ 243.502771][T14785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.502791][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.502801][T14785] __vmalloc_node_noprof+0xad/0xf0 [ 243.502815][T14785] ? vhost_task_create+0x1d2/0x2e0 [ 243.502827][T14785] copy_process+0x2c70/0x7690 [ 243.502848][T14785] ? __pfx_copy_process+0x10/0x10 [ 243.502864][T14785] ? lockdep_init_map_type+0x5c/0x280 [ 243.502875][T14785] ? lockdep_init_map_type+0x5c/0x280 [ 243.502885][T14785] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 243.502899][T14785] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 243.502916][T14785] vhost_task_create+0x1d2/0x2e0 [ 243.502926][T14785] ? __pfx_vhost_task_create+0x10/0x10 [ 243.502940][T14785] ? __pfx_vhost_task_fn+0x10/0x10 [ 243.502961][T14785] kvm_mmu_post_init_vm+0x1b7/0x380 [ 243.502974][T14785] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 243.502990][T14785] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 243.503006][T14785] kvm_vcpu_ioctl+0x5eb/0x1690 [ 243.503021][T14785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.503035][T14785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.503048][T14785] ? do_vfs_ioctl+0x128/0x14f0 [ 243.503064][T14785] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.503080][T14785] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 243.503101][T14785] ? hook_file_ioctl_common+0x145/0x410 [ 243.503115][T14785] ? selinux_file_ioctl+0x180/0x270 [ 243.503130][T14785] ? selinux_file_ioctl+0xb4/0x270 [ 243.503145][T14785] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.503159][T14785] __x64_sys_ioctl+0x18b/0x210 [ 243.503175][T14785] do_syscall_64+0xcd/0x4c0 [ 243.503190][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.503201][T14785] RIP: 0033:0x7fc75c98ebe9 [ 243.503210][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.503220][T14785] RSP: 002b:00007fc75d756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.503230][T14785] RAX: ffffffffffffffda RBX: 00007fc75cbc5fa0 RCX: 00007fc75c98ebe9 [ 243.503237][T14785] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 243.503243][T14785] RBP: 00007fc75d756090 R08: 0000000000000000 R09: 0000000000000000 [ 243.503249][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.503254][T14785] R13: 00007fc75cbc6038 R14: 00007fc75cbc5fa0 R15: 00007ffdb027da18 [ 243.503267][T14785] [ 243.503271][T14785] Mem-Info: [ 243.628014][T14785] active_anon:27121 inactive_anon:0 isolated_anon:0 [ 243.628014][T14785] active_file:18213 inactive_file:40687 isolated_file:0 [ 243.628014][T14785] unevictable:1768 dirty:319 writeback:0 [ 243.628014][T14785] slab_reclaimable:8274 slab_unreclaimable:78733 [ 243.628014][T14785] mapped:27878 shmem:19486 pagetables:1180 [ 243.628014][T14785] sec_pagetables:315 bounce:0 [ 243.628014][T14785] kernel_misc_reclaimable:0 [ 243.628014][T14785] free:422602 free_pcp:15766 free_cma:0 [ 243.645965][T14785] Node 0 active_anon:110964kB inactive_anon:0kB active_file:72820kB inactive_file:162544kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111512kB dirty:1268kB writeback:0kB shmem:76268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14832kB pagetables:4544kB sec_pagetables:1260kB all_unreclaimable? yes Balloon:0kB [ 243.659447][T14785] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.673458][T14785] Node 0 DMA free:15000kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:44kB free_cma:0kB [ 243.685548][T14785] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 243.687771][T14785] Node 0 DMA32 free:74360kB boost:32768kB min:60284kB low:67160kB high:74036kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110820kB inactive_anon:0kB active_file:72820kB inactive_file:162544kB unevictable:3536kB writepending:1268kB present:2080628kB managed:1263448kB mlocked:0kB bounce:0kB free_pcp:37728kB local_pcp:12728kB free_cma:0kB [ 243.700579][T14785] lowmem_reserve[]: 0 0 0 0 0 [ 243.702488][T14785] Node 1 Normal free:1596360kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:26152kB local_pcp:2240kB free_cma:0kB [ 243.714679][T14785] lowmem_reserve[]: 0 0 0 0 0 [ 243.716727][T14785] Node 0 DMA: 20*4kB (UM) 17*8kB (UM) 9*16kB (UM) 10*32kB (UME) 8*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 3*2048kB (M) 0*4096kB = 15016kB [ 243.723364][T14785] Node 0 DMA32: 803*4kB (UME) 74*8kB (UME) 22*16kB (UME) 98*32kB (UE) 41*64kB (UME) 28*128kB (UE) 44*256kB (UME) 41*512kB (UME) 14*1024kB (UM) 3*2048kB (U) 2*4096kB (UM) = 74428kB [ 243.730777][T14785] Node 1 Normal: 37*4kB (UME) 31*8kB (UE) 34*16kB (UE) 13*32kB (UME) 12*64kB (UME) 13*128kB (UME) 7*256kB (UE) 5*512kB (U) 5*1024kB (UE) 3*2048kB (UM) 385*4096kB (M) = 1596364kB [ 243.738018][T14785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.741709][T14785] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 243.745803][T14785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.749416][T14785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 243.752505][T14785] 80429 total pagecache pages [ 243.754089][T14785] 0 pages in swap cache [ 243.755767][T14785] Free swap = 124996kB [ 243.757263][T14785] Total swap = 124996kB [ 243.758922][T14785] 1048443 pages RAM [ 243.760578][T14785] 0 pages HighMem/MovableOnly [ 243.762594][T14785] 283268 pages reserved [ 243.764370][T14785] 0 pages cma reserved [ 243.909636][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2973'. [ 243.922533][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2973'. [ 244.207654][T14806] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2978'. [ 244.245390][ T5328] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 244.315331][ T6101] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 244.335122][T14812] netlink: 'syz.5.2981': attribute type 9 has an invalid length. [ 244.340005][T14812] netlink: 'syz.5.2981': attribute type 9 has an invalid length. [ 244.461479][T14823] netlink: 'syz.6.2986': attribute type 28 has an invalid length. [ 244.464083][T14823] netlink: 'syz.6.2986': attribute type 3 has an invalid length. [ 244.466770][ T6101] usb 12-1: Using ep0 maxpacket: 16 [ 244.467597][T14823] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2986'. [ 244.489186][T14823] tls_set_device_offload: netdev not found [ 244.500137][T14801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.557996][T14801] bond_slave_0: entered promiscuous mode [ 244.560084][T14801] bond_slave_1: entered promiscuous mode [ 244.562246][T14801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.567354][T14801] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 244.585657][ T6101] usb 12-1: unable to get BOS descriptor or descriptor too short [ 244.590475][ T6101] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 244.593713][ T6101] usb 12-1: can't read configurations, error -71 [ 244.602851][T14829] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2987'. [ 244.641675][T14832] fuse: Invalid rootmode [ 244.645592][ T40] audit: type=1326 audit(1757312709.715:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14831 comm="syz.6.2988" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a33d8ebe9 code=0x0 [ 244.978278][T14837] Invalid logical block size (-5) [ 245.016913][ T40] audit: type=1800 audit(1757312710.085:621): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2991" name="/" dev="9p" ino=589826 res=0 errno=0 [ 245.328846][T14859] FAULT_INJECTION: forcing a failure. [ 245.328846][T14859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.333761][T14859] CPU: 0 UID: 0 PID: 14859 Comm: syz.1.2999 Not tainted syzkaller #0 PREEMPT(full) [ 245.333784][T14859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.333794][T14859] Call Trace: [ 245.333800][T14859] [ 245.333807][T14859] dump_stack_lvl+0x16c/0x1f0 [ 245.333832][T14859] should_fail_ex+0x512/0x640 [ 245.333857][T14859] _copy_from_user+0x2e/0xd0 [ 245.333883][T14859] copy_msghdr_from_user+0x98/0x160 [ 245.333906][T14859] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 245.333945][T14859] ___sys_sendmsg+0xfe/0x1d0 [ 245.333968][T14859] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.334020][T14859] __sys_sendmsg+0x16d/0x220 [ 245.334041][T14859] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.334079][T14859] do_syscall_64+0xcd/0x4c0 [ 245.334102][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.334119][T14859] RIP: 0033:0x7f4961b8ebe9 [ 245.334134][T14859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.334151][T14859] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.334167][T14859] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 245.334178][T14859] RDX: 0000000020040040 RSI: 0000200000000600 RDI: 0000000000000004 [ 245.334187][T14859] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 245.334196][T14859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.334205][T14859] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 245.334228][T14859] [ 245.500461][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3003'. [ 245.538050][T14869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3002'. [ 245.645455][T13562] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 245.703757][T14879] macvlan5: entered promiscuous mode [ 245.708240][T14879] macvlan5: entered allmulticast mode [ 245.711148][T14879] veth1_vlan: entered allmulticast mode [ 245.715761][T14879] bond0: (slave macvlan5): Enslaving as an active interface with an up link [ 245.795516][T13562] usb 10-1: Using ep0 maxpacket: 16 [ 245.799568][T14861] bond13: option mode: unable to set because the bond device has slaves [ 245.807066][T14861] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 245.871010][T13562] usb 10-1: unable to get BOS descriptor or descriptor too short [ 245.874270][T13562] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 245.877339][T13562] usb 10-1: can't read configurations, error -71 [ 245.991076][T14889] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.996699][T14889] netlink: 'syz.1.3010': attribute type 1 has an invalid length. [ 246.079773][ T40] audit: type=1400 audit(1757312711.145:622): avc: denied { watch } for pid=14898 comm="syz.7.3015" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.138833][ T1462] IPVS: starting estimator thread 0... [ 246.225513][T14908] IPVS: using max 30 ests per chain, 72000 per kthread [ 246.356783][ T40] audit: type=1400 audit(1757312711.425:623): avc: denied { getopt } for pid=14920 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 246.459073][T14933] __nla_validate_parse: 3 callbacks suppressed [ 246.459083][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3027'. [ 246.591988][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3029'. [ 246.733273][ T40] audit: type=1400 audit(1757312711.795:624): avc: denied { setopt } for pid=14947 comm="syz.5.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 246.733343][T14949] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 246.784507][T14952] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 246.797613][T14952] CIFS: Unable to determine destination address [ 246.858805][ T40] audit: type=1400 audit(1757312711.925:625): avc: denied { watch watch_reads } for pid=14953 comm="syz.7.3032" path="/19/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 247.177886][ T34] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 247.206643][T14982] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3043'. [ 247.335428][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 247.341011][T14961] bond13: option mode: unable to set because the bond device has slaves [ 247.348935][T14961] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 247.410816][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 247.417775][ T34] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 247.420931][ T34] usb 10-1: can't read configurations, error -71 [ 248.397159][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3056'. [ 248.625116][T15033] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 248.697596][T15036] FAULT_INJECTION: forcing a failure. [ 248.697596][T15036] name failslab, interval 1, probability 0, space 0, times 0 [ 248.701652][T15036] CPU: 0 UID: 0 PID: 15036 Comm: syz.1.3059 Not tainted syzkaller #0 PREEMPT(full) [ 248.701667][T15036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.701673][T15036] Call Trace: [ 248.701677][T15036] [ 248.701682][T15036] dump_stack_lvl+0x16c/0x1f0 [ 248.701699][T15036] should_fail_ex+0x512/0x640 [ 248.701713][T15036] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 248.701726][T15036] should_failslab+0xc2/0x120 [ 248.701738][T15036] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 248.701749][T15036] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 248.701765][T15036] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 248.701779][T15036] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 248.701797][T15036] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 248.701816][T15036] mmu_topup_memory_caches+0x25/0x170 [ 248.701828][T15036] kvm_mmu_load+0xd6/0x23c0 [ 248.701838][T15036] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 248.701849][T15036] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 248.701861][T15036] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 248.701875][T15036] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 248.701892][T15036] ? __pfx_kvm_mmu_load+0x10/0x10 [ 248.701902][T15036] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 248.701917][T15036] ? kvm_check_and_inject_events+0x71c/0x1310 [ 248.701934][T15036] vcpu_run+0x358c/0x5580 [ 248.701949][T15036] ? __lock_acquire+0xb97/0x1ce0 [ 248.701968][T15036] ? __pfx_vcpu_run+0x10/0x10 [ 248.701984][T15036] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 248.701998][T15036] ? __local_bh_enable_ip+0xa4/0x120 [ 248.702014][T15036] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 248.702028][T15036] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 248.702046][T15036] kvm_vcpu_ioctl+0x5eb/0x1690 [ 248.702061][T15036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.702075][T15036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.702088][T15036] ? do_vfs_ioctl+0x128/0x14f0 [ 248.702104][T15036] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 248.702120][T15036] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 248.702140][T15036] ? hook_file_ioctl_common+0x145/0x410 [ 248.702155][T15036] ? selinux_file_ioctl+0x180/0x270 [ 248.702169][T15036] ? selinux_file_ioctl+0xb4/0x270 [ 248.702184][T15036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.702198][T15036] __x64_sys_ioctl+0x18b/0x210 [ 248.702215][T15036] do_syscall_64+0xcd/0x4c0 [ 248.702230][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.702240][T15036] RIP: 0033:0x7f4961b8ebe9 [ 248.702249][T15036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.702259][T15036] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.702269][T15036] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 248.702276][T15036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 248.702281][T15036] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 248.702287][T15036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.702293][T15036] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 248.702306][T15036] [ 248.907155][ T40] audit: type=1400 audit(1757312713.975:626): avc: denied { ioctl } for pid=15048 comm="syz.7.3063" path="socket:[122983]" dev="sockfs" ino=122983 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.095335][ T34] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 249.147303][T15057] FAULT_INJECTION: forcing a failure. [ 249.147303][T15057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.152162][T15057] CPU: 0 UID: 0 PID: 15057 Comm: syz.5.3066 Not tainted syzkaller #0 PREEMPT(full) [ 249.152189][T15057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.152196][T15057] Call Trace: [ 249.152200][T15057] [ 249.152204][T15057] dump_stack_lvl+0x16c/0x1f0 [ 249.152223][T15057] should_fail_ex+0x512/0x640 [ 249.152239][T15057] _copy_from_iter+0x29f/0x1720 [ 249.152274][T15057] ? __alloc_skb+0x200/0x380 [ 249.152288][T15057] ? __pfx__copy_from_iter+0x10/0x10 [ 249.152304][T15057] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 249.152323][T15057] netlink_sendmsg+0x829/0xdd0 [ 249.152339][T15057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.152359][T15057] sock_write_iter+0x4fc/0x5b0 [ 249.152376][T15057] ? __pfx_sock_write_iter+0x10/0x10 [ 249.152398][T15057] ? __pfx_file_has_perm+0x10/0x10 [ 249.152413][T15057] do_iter_readv_writev+0x662/0x9e0 [ 249.152432][T15057] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 249.152449][T15057] ? selinux_file_permission+0x126/0x660 [ 249.152466][T15057] ? bpf_lsm_file_permission+0x9/0x10 [ 249.152480][T15057] ? security_file_permission+0x71/0x210 [ 249.152497][T15057] ? rw_verify_area+0xcf/0x6c0 [ 249.152514][T15057] vfs_writev+0x35f/0xde0 [ 249.152525][T15057] ? __lock_acquire+0x62e/0x1ce0 [ 249.152543][T15057] ? __pfx_vfs_writev+0x10/0x10 [ 249.152563][T15057] ? __fget_files+0x20e/0x3c0 [ 249.152573][T15057] ? __fget_files+0x140/0x3c0 [ 249.152588][T15057] ? do_writev+0x28c/0x340 [ 249.152596][T15057] do_writev+0x28c/0x340 [ 249.152606][T15057] ? __pfx_do_writev+0x10/0x10 [ 249.152620][T15057] do_syscall_64+0xcd/0x4c0 [ 249.152635][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.152646][T15057] RIP: 0033:0x7fd7a138ebe9 [ 249.152654][T15057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.152664][T15057] RSP: 002b:00007fd79f5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 249.152675][T15057] RAX: ffffffffffffffda RBX: 00007fd7a15c5fa0 RCX: 00007fd7a138ebe9 [ 249.152681][T15057] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 249.152687][T15057] RBP: 00007fd79f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.152693][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.152699][T15057] R13: 00007fd7a15c6038 R14: 00007fd7a15c5fa0 R15: 00007fff13982b68 [ 249.152712][T15057] [ 249.255616][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 249.275439][ T2112] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 249.291899][T15047] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 249.300813][T15065] fuse: Bad value for 'rootmode' [ 249.304077][ T40] audit: type=1326 audit(1757312714.365:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.5.3069" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a138ebe9 code=0x0 [ 249.361002][ T34] usb 11-1: unable to get BOS descriptor or descriptor too short [ 249.364402][ T34] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 249.367278][ T34] usb 11-1: can't read configurations, error -71 [ 249.435448][ T2112] usb 6-1: Using ep0 maxpacket: 16 [ 249.441999][T15052] bond21: option mode: unable to set because the bond device has slaves [ 249.471787][T15052] bond21: (slave macvlan6): Error -98 calling set_mac_address [ 249.534432][ T2112] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.540841][ T2112] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 249.544494][ T2112] usb 6-1: can't read configurations, error -71 [ 249.920908][ T40] audit: type=1800 audit(1757312714.985:628): pid=15082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3075" name="/" dev="9p" ino=589826 res=0 errno=0 [ 250.025049][T15084] : entered promiscuous mode [ 250.030096][T15084] : left promiscuous mode [ 250.081459][T15087] netlink: 'syz.6.3076': attribute type 9 has an invalid length. [ 250.084329][T15087] netlink: 'syz.6.3076': attribute type 9 has an invalid length. [ 250.210952][T15098] netlink: 'syz.6.3082': attribute type 15 has an invalid length. [ 250.213532][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3082'. [ 250.217277][T15098] netlink: 'syz.6.3082': attribute type 15 has an invalid length. [ 250.220148][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3082'. [ 250.416182][T15115] fuse: Unknown parameter 'use00000000000000000000' [ 250.420182][ T40] audit: type=1326 audit(1757312715.485:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3088" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a33d8ebe9 code=0x0 [ 250.732093][T15118] FAULT_INJECTION: forcing a failure. [ 250.732093][T15118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.736440][T15118] CPU: 0 UID: 0 PID: 15118 Comm: syz.7.3089 Not tainted syzkaller #0 PREEMPT(full) [ 250.736454][T15118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.736461][T15118] Call Trace: [ 250.736464][T15118] [ 250.736468][T15118] dump_stack_lvl+0x16c/0x1f0 [ 250.736485][T15118] should_fail_ex+0x512/0x640 [ 250.736502][T15118] should_fail_alloc_page+0xe7/0x130 [ 250.736516][T15118] prepare_alloc_pages+0x3c2/0x610 [ 250.736529][T15118] ? rcu_is_watching+0x12/0xc0 [ 250.736544][T15118] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 250.736557][T15118] ? rcu_is_watching+0x12/0xc0 [ 250.736569][T15118] ? trace_mm_page_alloc+0x11f/0x1a0 [ 250.736583][T15118] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 250.736596][T15118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 250.736608][T15118] ? is_bpf_text_address+0x8a/0x1a0 [ 250.736619][T15118] ? bpf_ksym_find+0x127/0x1c0 [ 250.736638][T15118] ? is_bpf_text_address+0x94/0x1a0 [ 250.736650][T15118] ? __kernel_text_address+0xd/0x40 [ 250.736663][T15118] ? unwind_get_return_address+0x59/0xa0 [ 250.736680][T15118] alloc_pages_bulk_noprof+0x71c/0x1410 [ 250.736690][T15118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.736704][T15118] ? policy_nodemask+0xea/0x4e0 [ 250.736717][T15118] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 250.736729][T15118] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 250.736747][T15118] kasan_populate_vmalloc+0xf1/0x1f0 [ 250.736766][T15118] alloc_vmap_area+0x959/0x29c0 [ 250.736785][T15118] ? __pfx_alloc_vmap_area+0x10/0x10 [ 250.736802][T15118] __get_vm_area_node+0x1ca/0x330 [ 250.736818][T15118] __vmalloc_node_range_noprof+0x271/0x14b0 [ 250.736834][T15118] ? vhost_task_create+0x1d2/0x2e0 [ 250.736844][T15118] ? local_lock_release+0x99/0x140 [ 250.736860][T15118] ? vhost_task_create+0x1d2/0x2e0 [ 250.736869][T15118] ? rcu_read_unlock+0x17/0x60 [ 250.736883][T15118] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.736904][T15118] ? vhost_task_create+0x1d2/0x2e0 [ 250.736913][T15118] __vmalloc_node_noprof+0xad/0xf0 [ 250.736928][T15118] ? vhost_task_create+0x1d2/0x2e0 [ 250.736939][T15118] copy_process+0x2c70/0x7690 [ 250.736959][T15118] ? __pfx_copy_process+0x10/0x10 [ 250.736975][T15118] ? lockdep_init_map_type+0x5c/0x280 [ 250.736987][T15118] ? lockdep_init_map_type+0x5c/0x280 [ 250.736996][T15118] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 250.737011][T15118] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 250.737028][T15118] vhost_task_create+0x1d2/0x2e0 [ 250.737038][T15118] ? __pfx_vhost_task_create+0x10/0x10 [ 250.737052][T15118] ? __pfx_vhost_task_fn+0x10/0x10 [ 250.737069][T15118] kvm_mmu_post_init_vm+0x1b7/0x380 [ 250.737081][T15118] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 250.737096][T15118] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 250.737112][T15118] kvm_vcpu_ioctl+0x5eb/0x1690 [ 250.737127][T15118] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.737141][T15118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.737153][T15118] ? do_vfs_ioctl+0x128/0x14f0 [ 250.737168][T15118] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.737184][T15118] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 250.737205][T15118] ? hook_file_ioctl_common+0x145/0x410 [ 250.737219][T15118] ? selinux_file_ioctl+0x180/0x270 [ 250.737234][T15118] ? selinux_file_ioctl+0xb4/0x270 [ 250.737249][T15118] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.737263][T15118] __x64_sys_ioctl+0x18b/0x210 [ 250.737279][T15118] do_syscall_64+0xcd/0x4c0 [ 250.737293][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.737304][T15118] RIP: 0033:0x7fc75c98ebe9 [ 250.737313][T15118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.737323][T15118] RSP: 002b:00007fc75d756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.737332][T15118] RAX: ffffffffffffffda RBX: 00007fc75cbc5fa0 RCX: 00007fc75c98ebe9 [ 250.737339][T15118] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 250.737345][T15118] RBP: 00007fc75d756090 R08: 0000000000000000 R09: 0000000000000000 [ 250.737351][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.737356][T15118] R13: 00007fc75cbc6038 R14: 00007fc75cbc5fa0 R15: 00007ffdb027da18 [ 250.737369][T15118] [ 251.080594][T15126] FAULT_INJECTION: forcing a failure. [ 251.080594][T15126] name failslab, interval 1, probability 0, space 0, times 0 [ 251.084648][T15126] CPU: 2 UID: 0 PID: 15126 Comm: syz.1.3092 Not tainted syzkaller #0 PREEMPT(full) [ 251.084662][T15126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.084668][T15126] Call Trace: [ 251.084672][T15126] [ 251.084677][T15126] dump_stack_lvl+0x16c/0x1f0 [ 251.084693][T15126] should_fail_ex+0x512/0x640 [ 251.084710][T15126] ? fs_reclaim_acquire+0xae/0x150 [ 251.084725][T15126] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 251.084741][T15126] should_failslab+0xc2/0x120 [ 251.084753][T15126] __kmalloc_noprof+0xd2/0x510 [ 251.084766][T15126] tomoyo_realpath_from_path+0xc2/0x6e0 [ 251.084783][T15126] ? tomoyo_profile+0x47/0x60 [ 251.084795][T15126] tomoyo_path_number_perm+0x245/0x580 [ 251.084808][T15126] ? tomoyo_path_number_perm+0x237/0x580 [ 251.084822][T15126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.084836][T15126] ? find_held_lock+0x2b/0x80 [ 251.084861][T15126] ? find_held_lock+0x2b/0x80 [ 251.084873][T15126] ? hook_file_ioctl_common+0x145/0x410 [ 251.084887][T15126] ? __fget_files+0x20e/0x3c0 [ 251.084901][T15126] security_file_ioctl+0x9b/0x240 [ 251.084917][T15126] __x64_sys_ioctl+0xb7/0x210 [ 251.084934][T15126] do_syscall_64+0xcd/0x4c0 [ 251.084948][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.084959][T15126] RIP: 0033:0x7f4961b8ebe9 [ 251.084967][T15126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.084977][T15126] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.084987][T15126] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 251.084993][T15126] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 251.084999][T15126] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 251.085005][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.085011][T15126] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 251.085023][T15126] [ 251.085027][T15126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.179780][ T40] audit: type=1400 audit(1757312716.245:630): avc: denied { shutdown } for pid=15129 comm="syz.5.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.245753][ T40] audit: type=1400 audit(1757312716.295:631): avc: denied { mount } for pid=15129 comm="syz.5.3093" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 251.256309][ T40] audit: type=1400 audit(1757312716.315:632): avc: denied { unmount } for pid=15129 comm="syz.5.3093" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 251.398561][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3098'. [ 251.402136][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3098'. [ 251.439948][T15147] netlink: 'syz.7.3099': attribute type 1 has an invalid length. [ 251.442633][T15147] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3099'. [ 251.482564][T15150] netlink: 'syz.7.3100': attribute type 1 has an invalid length. [ 251.485130][T15150] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3100'. [ 251.775426][ T34] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 251.935481][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 251.962786][T15152] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 252.040737][ T34] usb 12-1: unable to get BOS descriptor or descriptor too short [ 252.044377][ T34] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 252.046968][ T34] usb 12-1: can't read configurations, error -71 [ 252.139155][T15157] netlink: 'syz.5.3103': attribute type 1 has an invalid length. [ 252.142093][T15157] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3103'. [ 252.175767][T15159] fuse: Unknown parameter 'use00000000000000000000' [ 252.178970][ T40] audit: type=1326 audit(1757312717.245:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15158 comm="syz.5.3104" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a138ebe9 code=0x0 [ 252.192169][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3105'. [ 252.549161][T15183] bond21: option mode: unable to set because the bond device has slaves [ 253.046341][T15196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=15196 comm=syz.5.3118 [ 253.057233][T15198] fuse: Unknown parameter 'user_id00000000000000000000' [ 253.062058][ T40] audit: type=1326 audit(1757312718.135:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.6.3119" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a33d8ebe9 code=0x0 [ 253.136773][ T40] audit: type=1400 audit(1757312718.205:635): avc: denied { create } for pid=15199 comm="syz.1.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 253.516359][T15220] fuse: Unknown parameter 'use00000000000000000000' [ 253.520460][ T40] audit: type=1326 audit(1757312718.585:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.7.3126" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75c98ebe9 code=0x0 [ 253.911674][T15225] FAULT_INJECTION: forcing a failure. [ 253.911674][T15225] name failslab, interval 1, probability 0, space 0, times 0 [ 253.916856][T15225] CPU: 3 UID: 0 PID: 15225 Comm: syz.6.3128 Not tainted syzkaller #0 PREEMPT(full) [ 253.916871][T15225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.916877][T15225] Call Trace: [ 253.916881][T15225] [ 253.916886][T15225] dump_stack_lvl+0x16c/0x1f0 [ 253.916908][T15225] should_fail_ex+0x512/0x640 [ 253.916921][T15225] ? fs_reclaim_acquire+0xae/0x150 [ 253.916936][T15225] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 253.916952][T15225] should_failslab+0xc2/0x120 [ 253.916964][T15225] __kmalloc_noprof+0xd2/0x510 [ 253.916978][T15225] tomoyo_realpath_from_path+0xc2/0x6e0 [ 253.916997][T15225] tomoyo_check_open_permission+0x2ab/0x3c0 [ 253.917011][T15225] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 253.917038][T15225] ? find_held_lock+0x2b/0x80 [ 253.917055][T15225] tomoyo_file_open+0x6b/0x90 [ 253.917066][T15225] security_file_open+0x84/0x1e0 [ 253.917083][T15225] do_dentry_open+0x596/0x1530 [ 253.917098][T15225] vfs_open+0x82/0x3f0 [ 253.917114][T15225] path_openat+0x1de4/0x2cb0 [ 253.917130][T15225] ? __pfx_path_openat+0x10/0x10 [ 253.917145][T15225] do_filp_open+0x20b/0x470 [ 253.917156][T15225] ? __pfx_do_filp_open+0x10/0x10 [ 253.917177][T15225] ? alloc_fd+0x471/0x7d0 [ 253.917193][T15225] do_sys_openat2+0x11b/0x1d0 [ 253.917207][T15225] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.917222][T15225] ? __fget_files+0x20e/0x3c0 [ 253.917236][T15225] __x64_sys_openat+0x174/0x210 [ 253.917250][T15225] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.917264][T15225] ? ksys_write+0x1ac/0x250 [ 253.917279][T15225] do_syscall_64+0xcd/0x4c0 [ 253.917294][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.917306][T15225] RIP: 0033:0x7f5a33d8ebe9 [ 253.917314][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.917325][T15225] RSP: 002b:00007f5a34c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.917335][T15225] RAX: ffffffffffffffda RBX: 00007f5a33fc5fa0 RCX: 00007f5a33d8ebe9 [ 253.917342][T15225] RDX: 0000000000020842 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 253.917348][T15225] RBP: 00007f5a34c03090 R08: 0000000000000000 R09: 0000000000000000 [ 253.917353][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.917359][T15225] R13: 00007f5a33fc6038 R14: 00007f5a33fc5fa0 R15: 00007ffc92c41cb8 [ 253.917372][T15225] [ 253.917377][T15225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.954135][T15226] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.009966][T15226] block device autoloading is deprecated and will be removed. [ 254.158744][ T40] audit: type=1400 audit(1757312719.225:637): avc: denied { append } for pid=15235 comm="syz.1.3133" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.167219][T15236] bond22: entered allmulticast mode [ 254.177602][T15237] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 254.199564][T15237] tipc: Started in network mode [ 254.201248][T15237] tipc: Node identity 3afd566ee6ce, cluster identity 4711 [ 254.203597][T15237] tipc: Enabled bearer , priority 0 [ 254.230797][T15237] tipc: Resetting bearer [ 254.234265][ T40] audit: type=1400 audit(1757312719.295:638): avc: denied { bind } for pid=15233 comm="syz.6.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 254.845128][T15233] tipc: Disabling bearer [ 255.072114][T15309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3144'. [ 255.108984][T15313] fuse: Unknown parameter 'user_i00000000000000000000' [ 255.113523][ T40] audit: type=1326 audit(1757312720.175:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15312 comm="syz.5.3145" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a138ebe9 code=0x0 [ 255.302107][T15327] FAULT_INJECTION: forcing a failure. [ 255.302107][T15327] name failslab, interval 1, probability 0, space 0, times 0 [ 255.304694][T15330] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 255.309051][T15327] CPU: 1 UID: 0 PID: 15327 Comm: syz.6.3150 Not tainted syzkaller #0 PREEMPT(full) [ 255.309073][T15327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.309083][T15327] Call Trace: [ 255.309089][T15327] [ 255.309096][T15327] dump_stack_lvl+0x16c/0x1f0 [ 255.309139][T15327] should_fail_ex+0x512/0x640 [ 255.309165][T15327] ? __kmalloc_noprof+0xbf/0x510 [ 255.309186][T15327] ? lsm_blob_alloc+0x68/0x90 [ 255.309203][T15327] should_failslab+0xc2/0x120 [ 255.309223][T15327] __kmalloc_noprof+0xd2/0x510 [ 255.309240][T15327] ? __pfx_perf_event_init_task+0x10/0x10 [ 255.309263][T15327] ? audit_alloc+0xa2/0x7b0 [ 255.309289][T15327] lsm_blob_alloc+0x68/0x90 [ 255.309308][T15327] security_task_alloc+0x2d/0x260 [ 255.309326][T15327] copy_process+0x2205/0x7690 [ 255.309359][T15327] ? __pfx_copy_process+0x10/0x10 [ 255.309387][T15327] ? lockdep_init_map_type+0x5c/0x280 [ 255.309407][T15327] ? lockdep_init_map_type+0x5c/0x280 [ 255.309424][T15327] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 255.309448][T15327] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 255.309476][T15327] vhost_task_create+0x1d2/0x2e0 [ 255.309493][T15327] ? __pfx_vhost_task_create+0x10/0x10 [ 255.309518][T15327] ? __pfx_vhost_task_fn+0x10/0x10 [ 255.309548][T15327] kvm_mmu_post_init_vm+0x1b7/0x380 [ 255.309570][T15327] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 255.309593][T15327] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 255.309622][T15327] kvm_vcpu_ioctl+0x5eb/0x1690 [ 255.309646][T15327] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 255.309666][T15327] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.309694][T15327] ? do_vfs_ioctl+0x128/0x14f0 [ 255.309720][T15327] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 255.309744][T15327] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 255.309778][T15327] ? hook_file_ioctl_common+0x145/0x410 [ 255.309803][T15327] ? selinux_file_ioctl+0x180/0x270 [ 255.309826][T15327] ? selinux_file_ioctl+0xb4/0x270 [ 255.309851][T15327] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 255.309873][T15327] __x64_sys_ioctl+0x18b/0x210 [ 255.309900][T15327] do_syscall_64+0xcd/0x4c0 [ 255.309930][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.309948][T15327] RIP: 0033:0x7f5a33d8ebe9 [ 255.309963][T15327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.309979][T15327] RSP: 002b:00007f5a34c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.309996][T15327] RAX: ffffffffffffffda RBX: 00007f5a33fc5fa0 RCX: 00007f5a33d8ebe9 [ 255.310006][T15327] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 255.310017][T15327] RBP: 00007f5a34c03090 R08: 0000000000000000 R09: 0000000000000000 [ 255.310026][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.310035][T15327] R13: 00007f5a33fc6038 R14: 00007f5a33fc5fa0 R15: 00007ffc92c41cb8 [ 255.310059][T15327] [ 255.355828][T15331] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.415397][ T2112] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.567506][ T2112] usb 6-1: Using ep0 maxpacket: 16 [ 255.595807][T15320] 8021q: adding VLAN 0 to HW filter on device bond23 [ 255.637167][T15320] bond21: (slave macvlan6): Error -98 calling set_mac_address [ 255.689753][ T2112] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.692910][ T2112] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 255.695442][ T2112] usb 6-1: can't read configurations, error -71 [ 255.828086][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.830829][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.960351][T15348] FAULT_INJECTION: forcing a failure. [ 255.960351][T15348] name failslab, interval 1, probability 0, space 0, times 0 [ 255.964765][T15348] CPU: 1 UID: 0 PID: 15348 Comm: syz.6.3155 Not tainted syzkaller #0 PREEMPT(full) [ 255.964786][T15348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.964801][T15348] Call Trace: [ 255.964807][T15348] [ 255.964814][T15348] dump_stack_lvl+0x16c/0x1f0 [ 255.964843][T15348] should_fail_ex+0x512/0x640 [ 255.964869][T15348] should_failslab+0xc2/0x120 [ 255.964889][T15348] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 255.964907][T15348] ? skb_clone+0x190/0x3f0 [ 255.964940][T15348] skb_clone+0x190/0x3f0 [ 255.964962][T15348] netlink_deliver_tap+0xabd/0xd30 [ 255.964990][T15348] netlink_unicast+0x64c/0x870 [ 255.965017][T15348] ? __pfx_netlink_unicast+0x10/0x10 [ 255.965039][T15348] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 255.965068][T15348] netlink_sendmsg+0x8d1/0xdd0 [ 255.965095][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.965127][T15348] sock_write_iter+0x4fc/0x5b0 [ 255.965154][T15348] ? __pfx_sock_write_iter+0x10/0x10 [ 255.965190][T15348] ? __pfx_file_has_perm+0x10/0x10 [ 255.965213][T15348] do_iter_readv_writev+0x662/0x9e0 [ 255.965243][T15348] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 255.965287][T15348] ? selinux_file_permission+0x126/0x660 [ 255.965315][T15348] ? bpf_lsm_file_permission+0x9/0x10 [ 255.965336][T15348] ? security_file_permission+0x71/0x210 [ 255.965363][T15348] ? rw_verify_area+0xcf/0x6c0 [ 255.965391][T15348] vfs_writev+0x35f/0xde0 [ 255.965410][T15348] ? __lock_acquire+0x62e/0x1ce0 [ 255.965438][T15348] ? __pfx_vfs_writev+0x10/0x10 [ 255.965473][T15348] ? __fget_files+0x20e/0x3c0 [ 255.965490][T15348] ? __fget_files+0x140/0x3c0 [ 255.965514][T15348] ? do_writev+0x28c/0x340 [ 255.965528][T15348] do_writev+0x28c/0x340 [ 255.965543][T15348] ? __pfx_do_writev+0x10/0x10 [ 255.965567][T15348] do_syscall_64+0xcd/0x4c0 [ 255.965591][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.965608][T15348] RIP: 0033:0x7f5a33d8ebe9 [ 255.965622][T15348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.965638][T15348] RSP: 002b:00007f5a34c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 255.965654][T15348] RAX: ffffffffffffffda RBX: 00007f5a33fc5fa0 RCX: 00007f5a33d8ebe9 [ 255.965665][T15348] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 255.965674][T15348] RBP: 00007f5a34c03090 R08: 0000000000000000 R09: 0000000000000000 [ 255.965684][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.965693][T15348] R13: 00007f5a33fc6038 R14: 00007f5a33fc5fa0 R15: 00007ffc92c41cb8 [ 255.965718][T15348] [ 256.068962][ C1] hpet: Lost 5 RTC interrupts [ 256.217562][ T6046] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 256.365403][ T6046] usb 10-1: Using ep0 maxpacket: 16 [ 256.380014][T15347] bond13: option mode: unable to set because the bond device has slaves [ 256.408585][T15347] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 256.473631][ T6046] usb 10-1: unable to get BOS descriptor or descriptor too short [ 256.477137][ T6046] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 256.479590][ T6046] usb 10-1: can't read configurations, error -71 [ 256.492046][T15370] fuse: Unknown parameter 'user_i00000000000000000000' [ 256.498632][ T40] audit: type=1326 audit(1757312721.565:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15369 comm="syz.6.3162" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a33d8ebe9 code=0x0 [ 257.030885][T15378] binder: 15377:15378 ioctl c0306201 200000000080 returned -14 [ 257.075154][T15378] syz.5.3164 (15378): drop_caches: 2 [ 257.080996][T15378] binder: 15377:15378 ioctl c0306201 200000000180 returned -14 [ 257.084139][T15378] tls_set_device_offload_rx: netdev not found [ 257.635627][T15397] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3170'. [ 257.665994][T15399] netlink: 'syz.5.3171': attribute type 1 has an invalid length. [ 257.669264][T15399] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3171'. [ 257.672150][T15399] FAULT_INJECTION: forcing a failure. [ 257.672150][T15399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.676641][T15399] CPU: 3 UID: 0 PID: 15399 Comm: syz.5.3171 Not tainted syzkaller #0 PREEMPT(full) [ 257.676654][T15399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 257.676661][T15399] Call Trace: [ 257.676664][T15399] [ 257.676668][T15399] dump_stack_lvl+0x16c/0x1f0 [ 257.676686][T15399] should_fail_ex+0x512/0x640 [ 257.676702][T15399] _copy_to_user+0x32/0xd0 [ 257.676719][T15399] simple_read_from_buffer+0xcb/0x170 [ 257.676732][T15399] proc_fail_nth_read+0x197/0x240 [ 257.676744][T15399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.676757][T15399] ? rw_verify_area+0xcf/0x6c0 [ 257.676773][T15399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.676784][T15399] vfs_read+0x1e1/0xcf0 [ 257.676796][T15399] ? __pfx___mutex_lock+0x10/0x10 [ 257.676816][T15399] ? __pfx_vfs_read+0x10/0x10 [ 257.676830][T15399] ? __fget_files+0x20e/0x3c0 [ 257.676845][T15399] ksys_read+0x12a/0x250 [ 257.676855][T15399] ? __pfx_ksys_read+0x10/0x10 [ 257.676869][T15399] do_syscall_64+0xcd/0x4c0 [ 257.676884][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.676894][T15399] RIP: 0033:0x7fd7a138d5fc [ 257.676903][T15399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.676913][T15399] RSP: 002b:00007fd79f5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.676923][T15399] RAX: ffffffffffffffda RBX: 00007fd7a15c5fa0 RCX: 00007fd7a138d5fc [ 257.676929][T15399] RDX: 000000000000000f RSI: 00007fd79f5f60a0 RDI: 0000000000000003 [ 257.676935][T15399] RBP: 00007fd79f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.676940][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.676946][T15399] R13: 00007fd7a15c6038 R14: 00007fd7a15c5fa0 R15: 00007fff13982b68 [ 257.676959][T15399] [ 257.745101][T15403] netlink: 'syz.5.3173': attribute type 1 has an invalid length. [ 257.749098][T15403] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3173'. [ 257.780665][T15405] netlink: 'syz.5.3174': attribute type 9 has an invalid length. [ 257.783332][T15405] netlink: 'syz.5.3174': attribute type 9 has an invalid length. [ 257.795475][ T6046] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 257.811474][T15408] netlink: 'syz.1.3175': attribute type 28 has an invalid length. [ 257.814022][T15408] netlink: 'syz.1.3175': attribute type 3 has an invalid length. [ 257.817675][T15408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3175'. [ 257.945393][ T6046] usb 11-1: Using ep0 maxpacket: 16 [ 257.963884][T15392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.000787][T15392] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 258.059723][ T6046] usb 11-1: unable to get BOS descriptor or descriptor too short [ 258.063461][ T6046] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 258.066094][ T6046] usb 11-1: can't read configurations, error -71 [ 258.688977][ T40] audit: type=1400 audit(1757312723.755:641): avc: denied { ioctl } for pid=15429 comm="syz.6.3182" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 258.720289][ T40] audit: type=1400 audit(1757312723.785:642): avc: denied { remount } for pid=15434 comm="syz.7.3184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 258.722329][T15437] FAULT_INJECTION: forcing a failure. [ 258.722329][T15437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.722348][T15437] CPU: 3 UID: 0 PID: 15437 Comm: syz.1.3185 Not tainted syzkaller #0 PREEMPT(full) [ 258.722360][T15437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.722366][T15437] Call Trace: [ 258.722370][T15437] [ 258.722373][T15437] dump_stack_lvl+0x16c/0x1f0 [ 258.722390][T15437] should_fail_ex+0x512/0x640 [ 258.722405][T15437] strncpy_from_user+0x3b/0x2e0 [ 258.722419][T15437] getname_flags.part.0+0x8f/0x550 [ 258.722437][T15437] getname_flags+0x93/0xf0 [ 258.722448][T15437] do_sys_openat2+0xb8/0x1d0 [ 258.722462][T15437] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.722478][T15437] ? __fget_files+0x20e/0x3c0 [ 258.722492][T15437] __x64_sys_openat+0x174/0x210 [ 258.722507][T15437] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.722520][T15437] ? ksys_write+0x1ac/0x250 [ 258.722538][T15437] do_syscall_64+0xcd/0x4c0 [ 258.722553][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.722565][T15437] RIP: 0033:0x7f4961b8ebe9 [ 258.722573][T15437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.722583][T15437] RSP: 002b:00007f495fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.722593][T15437] RAX: ffffffffffffffda RBX: 00007f4961dc5fa0 RCX: 00007f4961b8ebe9 [ 258.722600][T15437] RDX: 0000000000047e00 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 258.722606][T15437] RBP: 00007f495fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 258.722612][T15437] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 258.722617][T15437] R13: 00007f4961dc6038 R14: 00007f4961dc5fa0 R15: 00007ffcfde4f4f8 [ 258.722630][T15437] [ 258.736751][T15430] ================================================================== [ 258.736761][T15430] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 258.736783][T15430] Write of size 8 at addr ffffc90005269000 by task syz.6.3182/15430 [ 258.736792][T15430] [ 258.736797][T15430] CPU: 0 UID: 0 PID: 15430 Comm: syz.6.3182 Not tainted syzkaller #0 PREEMPT(full) [ 258.736809][T15430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.736816][T15430] Call Trace: [ 258.736819][T15430] [ 258.736823][T15430] dump_stack_lvl+0x116/0x1f0 [ 258.736837][T15430] print_report+0xcd/0x630 [ 258.736850][T15430] ? __virt_addr_valid+0x81/0x610 [ 258.736865][T15430] ? sys_imageblit+0x1a6f/0x1e60 [ 258.736879][T15430] kasan_report+0xe0/0x110 [ 258.736891][T15430] ? sys_imageblit+0x1a6f/0x1e60 [ 258.736907][T15430] sys_imageblit+0x1a6f/0x1e60 [ 258.736923][T15430] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 258.736939][T15430] ? __pfx_sys_imageblit+0x10/0x10 [ 258.736954][T15430] ? find_held_lock+0x2b/0x80 [ 258.736967][T15430] ? __queue_work+0x431/0x1160 [ 258.736978][T15430] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 258.736994][T15430] ? queue_work_on+0x12a/0x1f0 [ 258.737005][T15430] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 258.737018][T15430] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 258.737032][T15430] bit_putcs+0x90f/0xde0 [ 258.737047][T15430] ? __pfx_bit_putcs+0x10/0x10 [ 258.737059][T15430] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 258.737074][T15430] ? fb_get_color_depth+0x120/0x250 [ 258.737085][T15430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.737099][T15430] ? __pfx_bit_putcs+0x10/0x10 [ 258.737110][T15430] fbcon_putcs+0x384/0x4a0 [ 258.737122][T15430] do_update_region+0x2e6/0x3f0 [ 258.737138][T15430] invert_screen+0x1e4/0x590 [ 258.737149][T15430] ? __pfx_invert_screen+0x10/0x10 [ 258.737161][T15430] ? __pfx_complement_pos+0x10/0x10 [ 258.737172][T15430] ? vc_do_resize+0x24d/0x10e0 [ 258.737182][T15430] ? __vmalloc_node_noprof+0xad/0xf0 [ 258.737198][T15430] clear_selection+0x59/0x70 [ 258.737208][T15430] vc_do_resize+0xd9b/0x10e0 [ 258.737222][T15430] ? __pfx_vc_do_resize+0x10/0x10 [ 258.737235][T15430] fbcon_set_disp+0x7ad/0xe50 [ 258.737246][T15430] set_con2fb_map+0x703/0x1080 [ 258.737259][T15430] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 258.737271][T15430] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 258.737285][T15430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.737297][T15430] do_fb_ioctl+0x328/0x7e0 [ 258.737310][T15430] ? __pfx_do_fb_ioctl+0x10/0x10 [ 258.737327][T15430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.737355][T15430] ? selinux_file_ioctl+0x180/0x270 [ 258.737373][T15430] fb_ioctl+0xe5/0x150 [ 258.737385][T15430] ? __pfx_fb_ioctl+0x10/0x10 [ 258.737399][T15430] __x64_sys_ioctl+0x18b/0x210 [ 258.737415][T15430] do_syscall_64+0xcd/0x4c0 [ 258.737429][T15430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.737439][T15430] RIP: 0033:0x7f5a33d8ebe9 [ 258.737448][T15430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.737458][T15430] RSP: 002b:00007f5a34c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.737468][T15430] RAX: ffffffffffffffda RBX: 00007f5a33fc5fa0 RCX: 00007f5a33d8ebe9 [ 258.737474][T15430] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000007 [ 258.737481][T15430] RBP: 00007f5a33e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 258.737486][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.737493][T15430] R13: 00007f5a33fc6038 R14: 00007f5a33fc5fa0 R15: 00007ffc92c41cb8 [ 258.737502][T15430] [ 258.737505][T15430] [ 258.737508][T15430] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004f69000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 258.737528][T15430] Memory state around the buggy address: [ 258.737534][T15430] ffffc90005268f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 258.737541][T15430] ffffc90005268f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 258.737547][T15430] >ffffc90005269000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 258.737552][T15430] ^ [ 258.737557][T15430] ffffc90005269080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 258.737564][T15430] ffffc90005269100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 258.737569][T15430] ================================================================== [ 258.737630][T15430] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.737642][T15430] CPU: 0 UID: 0 PID: 15430 Comm: syz.6.3182 Not tainted syzkaller #0 PREEMPT(full) [ 258.737654][T15430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.737660][T15430] Call Trace: [ 258.737663][T15430] [ 258.737667][T15430] dump_stack_lvl+0x3d/0x1f0 [ 258.737680][T15430] vpanic+0x6e8/0x7a0 [ 258.737696][T15430] ? __pfx_vpanic+0x10/0x10 [ 258.737712][T15430] ? sys_imageblit+0x1a6f/0x1e60 [ 258.737727][T15430] panic+0xca/0xd0 [ 258.737742][T15430] ? __pfx_panic+0x10/0x10 [ 258.737757][T15430] ? sys_imageblit+0x1a6f/0x1e60 [ 258.737772][T15430] ? preempt_schedule_common+0x44/0xc0 [ 258.737785][T15430] ? preempt_schedule_thunk+0x16/0x30 [ 258.737800][T15430] check_panic_on_warn+0xab/0xb0 [ 258.737810][T15430] end_report+0x107/0x170 [ 258.737820][T15430] kasan_report+0xee/0x110 [ 258.737832][T15430] ? sys_imageblit+0x1a6f/0x1e60 [ 258.737848][T15430] sys_imageblit+0x1a6f/0x1e60 [ 258.737864][T15430] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 258.737880][T15430] ? __pfx_sys_imageblit+0x10/0x10 [ 258.737894][T15430] ? find_held_lock+0x2b/0x80 [ 258.737907][T15430] ? __queue_work+0x431/0x1160 [ 258.737918][T15430] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 258.737934][T15430] ? queue_work_on+0x12a/0x1f0 [ 258.737945][T15430] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 258.737958][T15430] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 258.737970][T15430] bit_putcs+0x90f/0xde0 [ 258.737985][T15430] ? __pfx_bit_putcs+0x10/0x10 [ 258.737997][T15430] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 258.738012][T15430] ? fb_get_color_depth+0x120/0x250 [ 258.738023][T15430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.738036][T15430] ? __pfx_bit_putcs+0x10/0x10 [ 258.738047][T15430] fbcon_putcs+0x384/0x4a0 [ 258.738059][T15430] do_update_region+0x2e6/0x3f0 [ 258.738075][T15430] invert_screen+0x1e4/0x590 [ 258.738087][T15430] ? __pfx_invert_screen+0x10/0x10 [ 258.738098][T15430] ? __pfx_complement_pos+0x10/0x10 [ 258.738110][T15430] ? vc_do_resize+0x24d/0x10e0 [ 258.738120][T15430] ? __vmalloc_node_noprof+0xad/0xf0 [ 258.738135][T15430] clear_selection+0x59/0x70 [ 258.738144][T15430] vc_do_resize+0xd9b/0x10e0 [ 258.738158][T15430] ? __pfx_vc_do_resize+0x10/0x10 [ 258.738171][T15430] fbcon_set_disp+0x7ad/0xe50 [ 258.738182][T15430] set_con2fb_map+0x703/0x1080 [ 258.738195][T15430] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 258.738208][T15430] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 258.738221][T15430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.738233][T15430] do_fb_ioctl+0x328/0x7e0 [ 258.738247][T15430] ? __pfx_do_fb_ioctl+0x10/0x10 [ 258.738263][T15430] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.738280][T15430] ? selinux_file_ioctl+0x180/0x270 [ 258.738296][T15430] fb_ioctl+0xe5/0x150 [ 258.738309][T15430] ? __pfx_fb_ioctl+0x10/0x10 [ 258.738323][T15430] __x64_sys_ioctl+0x18b/0x210 [ 258.738338][T15430] do_syscall_64+0xcd/0x4c0 [ 258.738352][T15430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.738361][T15430] RIP: 0033:0x7f5a33d8ebe9 [ 258.738369][T15430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.738379][T15430] RSP: 002b:00007f5a34c03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.738388][T15430] RAX: ffffffffffffffda RBX: 00007f5a33fc5fa0 RCX: 00007f5a33d8ebe9 [ 258.738394][T15430] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000007 [ 258.738400][T15430] RBP: 00007f5a33e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 258.738407][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.738413][T15430] R13: 00007f5a33fc6038 R14: 00007f5a33fc5fa0 R15: 00007ffc92c41cb8 [ 258.738422][T15430] [ 258.739067][T15430] Kernel Offset: disabled VM DIAGNOSIS: 06:25:24 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646a35 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90003436f30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=000000000000007a R14=ffffffff9b115060 R15=ffffffff856469d0 RIP=ffffffff85646a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5a34c036c0 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5a34c02f98 CR3=000000003363e000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000005 DR2=8000000000000000 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13983076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13983076 00007fff1398307c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a15974a8 00007fd7a15974a0 00007fd7a1597498 00007fd7a1597470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a20fd100 00007fd7a1597460 00007fd7a1590004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a15974b8 00007fd7a15974b0 00007fd7a15974a8 00007fd7a15974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88802a3ec880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555585bb8500 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc75d6f56c0 CR3=0000000044572000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb027dda0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb027df26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb027df26 00007ffdb027df2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc75ca12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc75ca12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc75ca12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc75ca12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc75ca12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc75ca12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888025fe8000 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f19e8e47880 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4961dc7dac CR3=00000000248af000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000000080040 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88703d38 00007ffe88703d38 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88703f10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b3717fe2b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e87f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e87f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326c0020c6483 737326c5591fff59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c13423b7d2af777 737373762844648f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 377570632f302f71 6d2f37706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003775 70632f302f716d2f 37706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6764687c0055506a 3f223b3f3d63002f 46484017324e687a 3d7445174c22292e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 37323d4d554e5145 53003078303d4e4f 534145525f4b434f 4c425f57485f4c4c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 37564f2c3661352b 266f435730556023 3a35307d3b2e312e 243170343a2c6362 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f777f7f7f7f7f7f 3f7f7f7f7d7f777f 7f7f7f7f3f7e7f7f 7f7f7d777e7f7f7e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d45464100313d44 0000373133380000 35313338323d0039 373d4545004b5349 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332313600313d44 0000303100300000 3531303832330030 3039360000343835 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88802910c880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555572644500 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f49628f56c0 CR3=000000004fc0b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020000000 Opmask02=00000000fef80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13982ef0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13983076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff13983076 00007fff1398307c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd7a1412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000