last executing test programs: 12.362283441s ago: executing program 2 (id=716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00066070f01d9ba210066ed36650fc775cb670faea200700000baf80c66b88ceef38f66efbafc0c66edfe0d3e0fecb74e7b66b9410a00000f320f01f9", 0x3d}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 14) 12.092426453s ago: executing program 2 (id=725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440100001a0001000000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000006c000000ffffffff0000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 12.092243417s ago: executing program 2 (id=726): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffde2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="02"], 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)="bbde6363500318750da57d9b764f73ff03fc8abc3616902b6b920b7f2a6d79a19458b5522f9c00303f0f0d75660f2d3790d33afbdcadcf7aa2ade08ddbf2ad97eb4902138980518c2f3c71427c72344764fc32362583df352ac55a9717e6d82c4a564bc38fbc6fe78d1ef29584adf7b19955f2cb343e82d99b41064b278dcaa5ee6708aa87f948ce50c45e83f834618ca8351a8f417da51c8ec6cbe45d0451132aa822d335975433307933541922724e42c6c867784dec221e8698d22a68477de94ab6e4dcaa07901a46e654ba4181cbe74b90f377cc5a68084d7e37e26fef98da82db576596ae19e20f5028b2bae508be4c534ff9191a", 0xf7}, {&(0x7f00000006c0)="06f76f66dd4d83a2d70a95f02359071e2e43713feb4c8531f1dc7ee186035c1682d472783268fd9e4af281a52edf4003a787b06cc7e23e75d3fe4d42fe17f8d27a239df87490b4e6edb52e5c9ce4a961d948328740de8e239c9bc2b4dbead28cbfbb0a2bfeb1457c292186384ab1e67e8cd00d4b66b0d26b160b681e984427bea88daec78929a26c30b0f9ef685aec1868edeb6ea522f2b7dbba5bb8ea97f8dd5ff0ca4e6a311f00552bc6fb6087ec567748cccfa7b1b3eec6edd164a27040383f02a3ffb4910cf105734bdaeb51426b", 0xd0}, {&(0x7f0000000180)="1c78f2d52f12cda76b375f29c27e86cbe796f71609e00b5ada50caa9dbf04674690b023a1430c2a628426c5de2fad652f99a2254525f42ef06e6c5833ac0571e78a86a82e7cc149c97957933203ad2266747c05087b6981b8b31ef89e22beb89f4c334305bb3ba7b16d6d23d120ce1ca255bf22f7fa15821458f3c883e", 0x7d}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000000200)="1fb922bce86e5ada908d5e", 0xb}, {&(0x7f00000007c0)="0cb735a4c608ad388c93ff07d0b27c06a780e01d716a463d53b6f77ca16ecf5d822ed4bb0ceae1ee91bb92efeeb96f8e7dedcbd86d992222cfbabcb37fda8686815858a543452a33986fcb1fb6cc48d2c038be7a346175d99eda2bed43f3f1af", 0x60}], 0x7, &(0x7f00000008c0)="9a59f0072923954af8f7984d8e34dae449cfe80a7b050c849ab35dfd154720fcea2506e7dde7def5abe00a04", 0x2c, 0x20000001}, 0x4) 11.96274025s ago: executing program 2 (id=728): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09d000560333"], 0x398}}, 0x884) 11.712765336s ago: executing program 2 (id=731): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000001340)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a157f}) 10.249109679s ago: executing program 1 (id=739): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00', 0x0}) r2 = socket(0x27, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)={0x3c, 0x26, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0xf, 0x4, [0xfffffffffffffff7, 0x1, 0x1ff, 0x2, 0x8, 0x7fff, 0x9]}}, @pad1, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0xfff8}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @ra, @generic={0x10, 0xc5, "060e818da36fea3e5e24cf11c688225f60226139741070584086fd6472febb9b5c1fae5b0a4b571f5afb8d9a9d2629d177488d3e8c6822852865c20605a98cd1549d4ce669d9567a9612d63ef4c2b3235528dc8d9e0089947a789f430428c45b85558f84d70e82d9af9a72abdcb4921a7f96d50aae3f0d7ed044cbb362a7d421821115f87f4cf5fd1f2cf5f7706e1c212c5ab59996b85684ef9fffc57f4905ff1d2210cbc365c23758a2fbd04f8942ecb300f0d4218fdf729f3e7000423672411bcf2a1a2e"}]}, 0x138) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000004480)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}}, 0x0) 10.172612778s ago: executing program 1 (id=740): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fe01020400000a001200020028fffe0019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 9.302634222s ago: executing program 1 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}, 0x1, 0xfffffffffffffff5}, 0x0) 9.302354879s ago: executing program 1 (id=742): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000140), &(0x7f0000000080)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100010, r0, 0x8f751000) r4 = io_uring_setup(0x63d6, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000000d80)=[{0x4, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x84, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xedd}]}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b1a, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9.082326225s ago: executing program 1 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x22, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 8.722272185s ago: executing program 1 (id=746): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2, 0x11}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') getdents64(r2, &(0x7f00000000c0)=""/172, 0xac) getdents(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff8}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x1}}}}]}]}, 0x50}}, 0x0) 8.707280578s ago: executing program 32 (id=746): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2, 0x11}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') getdents64(r2, &(0x7f00000000c0)=""/172, 0xac) getdents(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff8}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x1}}}}]}]}, 0x50}}, 0x0) 6.561522216s ago: executing program 2 (id=731): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0x7f, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000001340)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a157f}) 2.122889418s ago: executing program 4 (id=826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="2665f3440f09652e0f019a000000000f20c035040000000fbc82c044240082000000c744240208000000ff1c24b8010000000fd9c10f00d06467440fc7be01000000c401925ec5f20f1b3166baf80cb8a0c3c182ef66bafc0c0f019cb30f900000c7442400e2000000c74424020c000000c7442406000000000f011424", 0xffffffffffffff34}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.119369341s ago: executing program 0 (id=834): r0 = socket(0x15, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40850) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}]}, 0x28}}, 0x4020) sendfile(r7, r6, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt(r0, 0x200000000114, 0x9, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) 1.872505696s ago: executing program 4 (id=831): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x17}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x6c, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000040) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x20, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902620002010000000904000001020d00000b24060001a970c7ec83a405240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302000000000010b615d03913412491a0826bf6e4145f9e66306461632675c6ff972ae7f9e9e340689a14e68416be450b392ff5d064a5b325a12d9a16703e53ec6ff54b66f8f669e4da0b76c96e2146263fb8d80a5c6571d037b127ba2ac597feb582c95e658a9063abf1d52fb4de088d0b225826662b5ff5400c8ae4c492e41cbd62b7fb3fb03c5e82ca"], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f0000000500)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000003800)={@multicast1, @loopback}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001c00010000000000000000000a000000", @ANYRES32=r8, @ANYBLOB="02005e0014000100fc02000000000000000000000000000005000c"], 0x5c}}, 0x0) 1.761501205s ago: executing program 3 (id=833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) capget(0x0, &(0x7f0000000180)={0x10000, 0xfffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)="ee", 0x3b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r6}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={'sm3\x00'}}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d0fff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0xf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00066070f01d9ba210066ed36650fc775cb670faea200700000baf80c66b88ceef38f66efbafc0c66edfe0d3e0fecb74e7b66b9410a00000f320f01f9", 0x3d}], 0x1, 0x4, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x8, 0x8000) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r8, 0x80184151, &(0x7f0000000240)={0x0, &(0x7f0000000180)="5300d9bd7befdaf6300be84243a54797c3b56d0a10c32ba2eb50290c0c6bc07fdc5815c3484f5d108facb12175d5a2da9f6c9fa859c1cbad2f84e408732b691a502fc33ffaccdc7026744ce6edfafc386c26a9359fc62cdf541ae0ea9c2c74a6f3c3731f53fbd5f5eab35b0932909f4a1846618a61643d102a0c605e6fca45820c603089949a24c8f88d20adde4314", 0x8f}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800010002000000fddbdf25020000000000000006000700040000000c000880080058d4a377000008000600f200000008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000480)={{0x2, 0x0, 0x80, {0x4000, 0x0, 0x3}}, "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", "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"}) 856.763029ms ago: executing program 0 (id=835): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0xffff000000000000}, 0x884) 853.957753ms ago: executing program 3 (id=836): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782dbffff00001d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x60044080) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/52, 0x34}], 0x1, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/73, 0x49}], 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r0, 0x12) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000100003969b0000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d00008e770002006e657464657673696d300000"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20048000) set_mempolicy(0x6005, 0x0, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40020) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_crypto(r7, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r7, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) r8 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$kcm(0x2, 0x0, 0x73) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 354.858ms ago: executing program 4 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv4=@tipc={{0x6, 0x4, 0x1, 0x3d, 0x48, 0x68, 0x0, 0x81, 0x6, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x3, 0xbc}]}}, @payload_named={{{{{0x30, 0x0, 0x1, 0x1, 0x0, 0xa, 0x1, 0x2, 0x2, 0x0, 0x0, 0xb, 0x1, 0x2, 0x15c, 0x9, 0x1, 0x4e20, 0x4e20}, 0x0, 0x2}, 0x0, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x5a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 354.649971ms ago: executing program 3 (id=838): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x40140921, 0x20000001) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffd) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x7ff, 0x34, 0x81, 0x9}]}) 353.569481ms ago: executing program 0 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x22, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (fail_nth: 2) 223.683069ms ago: executing program 0 (id=839): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8001, &(0x7f0000000040)=0x36a, 0xa8f20000000, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000e50002000000000000000100000400000000000000000271e02031946685e58f00000000000000000000000000000903000000000000000000000d000000000000aad4684a55c1e0a7df7acad3e7cf089dcd8a548c1ac5d87e18d9e8502621be51dc8340021c85612c696e10a5ce16449c242ab7e4c5db71f984570c93f611b80c617bbed4aa18411b4a193cb8097de5111db17da84d5c06bb5264443c18f74048e7d2a42063880e7bae7375cdceb7bcbe0747b2a15b16742bfcac6ceb36061c9bb1f0f6fb076eda66a19ab2499a19e44ae975fc32d929e5b10765f9d6efdf2a6fdcb5267e4d15b4c2c94d436605087c559baf9fc24a409e38b8d9224bc3cdffd573f105fed61d7e44f4189e11fae154c32ab9e4b89dc6c21e40545be90661c725613dade1f0a4bdf80f91afe4fecadedeb7"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) 223.457126ms ago: executing program 3 (id=840): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r3}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000cf, 0x4) (async) shutdown(r0, 0x0) 223.152416ms ago: executing program 3 (id=841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @multicast2}}) sendto$inet6(r4, &(0x7f0000000000)="e9", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x103000, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80, 0x101800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x44, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x4040000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000180)={r9, 0x3}, &(0x7f0000000200)=0x8) fstat(r5, &(0x7f0000000080)) r10 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 202.787027ms ago: executing program 0 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) 201.379392ms ago: executing program 4 (id=843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0x6, 0x101}, {0x8000, 0x6}], 0xee01}, 0x18, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r4 = dup(r3) r5 = socket$inet(0x2, 0x1, 0x100) bind$inet(r5, 0x0, 0x0) listen(r5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58604"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x75b, 0x9, 0x11000, 0x1, 0x9, '\x00', 0x0, r4, 0x1, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x400, r6}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000580)=""/233, &(0x7f0000000180), &(0x7f0000000700), 0x5, r6}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r4], 0xc4}}, 0x20000080) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 52.125972ms ago: executing program 3 (id=844): r0 = socket(0x15, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40850) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}]}, 0x28}}, 0x4020) sendfile(r7, r6, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt(r0, 0x200000000114, 0x9, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) 43.637197ms ago: executing program 0 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001f40)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xf878, 0x0, 0x1}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff84}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_INIT(r7, &(0x7f0000000440)={0xffffffffffffff45, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x2}}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3900000082951c0797f61e124a2a1e0f0bb77d878ce6350913ed808d01369a102469059e3ad6f1073e789209bdfa3bd637d53896d46fe0ded840b04f25db64058cfc32401a635020c1abd2679746c7fd56", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000000000000008009f00070000000800260025170000"], 0x40}}, 0x4000800) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000160000000000000000f100"/28], 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYRES16=r11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000e000900000008000000000000f74a80651b32370a4f713495221046c20000000000000000000000d541a75f72bb82dc5a736af157e7945c3f6a58d333023bcfff98d1d1ecc0ee734f33beca59d9dd862453f754a4f7e5b8df933c178ddc9a1612153161820f5132777b2e9e22eabbc86c95221881216df85f1bc9c1c7ece93cfd59c953097c83cf62f777447429a9a5390e4a7ca6972409082b0d3f80dcf071eb25d1003ef4e5e4f7422d62ec6bb4b9737fbd151f865ef229a8483af17f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r12}, &(0x7f0000000700), &(0x7f0000000740)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000140)={0xb9, 0x8000, @name="12e739b6f4e15c29c1dd07422162f4f998496a5e8b13816993a961bcc1e006c6"}) 42.479658ms ago: executing program 4 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x22, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 0s ago: executing program 4 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x40000000000006, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x4, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x0, 0x4, 0xfffffffffffffffd, 0x1, 0x0, 0x4, 0x7610, 0x10000, 0x2, 0x8000000000000001, 0x9, 0x7, 0x7, 0x10000, 0xa87], 0x0, 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=850): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x4000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000009000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000040008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): ut6 [ 52.161468][ T6739] FAULT_INJECTION: forcing a failure. [ 52.161468][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 52.165926][ T6739] CPU: 2 UID: 0 PID: 6739 Comm: syz.3.271 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 52.169779][ T6739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.173603][ T6739] Call Trace: [ 52.174744][ T6739] [ 52.175753][ T6739] dump_stack_lvl+0x16c/0x1f0 [ 52.177400][ T6739] should_fail_ex+0x497/0x5b0 [ 52.178968][ T6739] should_failslab+0xc2/0x120 [ 52.180885][ T6739] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 52.183038][ T6739] ? skb_clone+0x190/0x3f0 [ 52.184796][ T6739] skb_clone+0x190/0x3f0 [ 52.186456][ T6739] netlink_deliver_tap+0xabd/0xd30 [ 52.188648][ T6739] netlink_unicast+0x5e1/0x7f0 [ 52.190316][ T6739] ? __pfx_netlink_unicast+0x10/0x10 [ 52.192130][ T6739] netlink_sendmsg+0x8b8/0xd70 [ 52.193797][ T6739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.195240][ T6739] ____sys_sendmsg+0xaaf/0xc90 [ 52.196507][ T6739] ? copy_msghdr_from_user+0x10b/0x160 [ 52.197966][ T6739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.199367][ T6739] ___sys_sendmsg+0x135/0x1e0 [ 52.200623][ T6739] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.202001][ T6739] ? __pfx_lock_release+0x10/0x10 [ 52.203323][ T6739] ? trace_lock_acquire+0x146/0x1e0 [ 52.204684][ T6739] ? __fget_files+0x206/0x3a0 [ 52.205955][ T6739] __sys_sendmsg+0x16e/0x220 [ 52.207225][ T6739] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.208586][ T6739] do_syscall_64+0xcd/0x250 [ 52.209879][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.211494][ T6739] RIP: 0033:0x7febee17e819 [ 52.212721][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.217871][ T6739] RSP: 002b:00007febeeea1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.220066][ T6739] RAX: ffffffffffffffda RBX: 00007febee335fa0 RCX: 00007febee17e819 [ 52.222149][ T6739] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 52.224283][ T6739] RBP: 00007febeeea1090 R08: 0000000000000000 R09: 0000000000000000 [ 52.226413][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.228490][ T6739] R13: 0000000000000000 R14: 00007febee335fa0 R15: 00007ffce25f5778 [ 52.230611][ T6739] [ 52.232512][ T828] usb 5-1: USB disconnect, device number 5 [ 52.306622][ T6747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6747 comm=syz.3.273 [ 52.386294][ T39] kauditd_printk_skb: 67 callbacks suppressed [ 52.386305][ T39] audit: type=1400 audit(1732429254.308:333): avc: denied { write } for pid=6752 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.429371][ T6758] netlink: 'syz.2.278': attribute type 87 has an invalid length. [ 52.547400][ T39] audit: type=1400 audit(1732429254.468:334): avc: denied { getopt } for pid=6769 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.601812][ T39] audit: type=1400 audit(1732429254.528:335): avc: denied { setopt } for pid=6771 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.706734][ T39] audit: type=1400 audit(1732429254.628:336): avc: denied { getopt } for pid=6771 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.781427][ T6784] overlay: ./file1 is not a directory [ 52.867104][ T39] audit: type=1400 audit(1732429254.788:337): avc: denied { setattr } for pid=6777 comm="syz.2.286" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 52.913434][ T6806] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 52.917306][ T39] audit: type=1326 audit(1732429254.838:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.2.286" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6fb37e819 code=0x0 [ 52.944072][ T6808] capability: warning: `syz.1.297' uses 32-bit capabilities (legacy support in use) [ 52.968330][ T6791] xt_hashlimit: size too large, truncated to 1048576 [ 53.043595][ T39] audit: type=1400 audit(1732429254.968:339): avc: denied { set_context_mgr } for pid=6814 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.049321][ T39] audit: type=1400 audit(1732429254.968:340): avc: denied { write } for pid=6814 comm="syz.1.299" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.097790][ T5954] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 53.233774][ T6835] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 53.272060][ T5954] usb 5-1: config 1 interface 0 altsetting 183 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.275891][ T5954] usb 5-1: config 1 interface 0 has no altsetting 0 [ 53.282019][ T5954] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 53.284368][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.286688][ T5954] usb 5-1: Product: Ц [ 53.288149][ T5954] usb 5-1: Manufacturer: à Œ [ 53.289377][ T5954] usb 5-1: SerialNumber: ãµ’è‡ä¹œí–±é¸·æ¨¸èŸ¯ê¥³ì²§â´Œå­‚䯤硩î•ç—¿à´žê²‘î•›î‰ç¢²ì’Ÿç‘’產ç¤â’Žá´Šê¦„ꨩ讘䙳້仙컽â…í¸ë”£æ‡å¯â¶ì·®á¼‘î‚™ï¸ã£§áš¯á¨“슬㺻룩ᣄ뢊蔗ብ䞭땅喆缺ã¢ãªŸà¦«î”žåꆚᮄꬶ∌봻ﶯﲃ䅥ìºä‚‰Ø–ï´¦r넢⺔韚鄩⒨憌ႅ圌㹤æƒì¢‡ç´ë²ˆæ¶¥à·²ïŽ”啨냟렾틱躛㔄ⴳ뽺Љçµç‘ [ 53.532833][ T5954] usbhid 5-1:1.0: can't add hid device: -71 [ 53.534524][ T5954] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 53.539517][ T5954] usb 5-1: USB disconnect, device number 6 [ 53.681845][ T6859] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 53.783106][ T6864] pim6reg1: entered promiscuous mode [ 53.784589][ T6864] pim6reg1: entered allmulticast mode [ 53.936217][ T6875] syz.3.322[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.936272][ T6875] syz.3.322[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.940148][ T6875] syz.3.322[6875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.948635][ T6875] pim6reg1: entered promiscuous mode [ 53.952908][ T6875] pim6reg1: entered allmulticast mode [ 55.094818][ T6898] pim6reg1: entered promiscuous mode [ 55.097334][ T6898] pim6reg1: entered allmulticast mode [ 55.145125][ T39] audit: type=1400 audit(1732429257.068:341): avc: denied { read write } for pid=6904 comm="syz.3.335" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.152526][ T39] audit: type=1400 audit(1732429257.068:342): avc: denied { open } for pid=6904 comm="syz.3.335" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.156212][ T6905] pim6reg1: entered promiscuous mode [ 55.161495][ T6905] pim6reg1: entered allmulticast mode [ 55.247766][ T6912] pim6reg1: entered promiscuous mode [ 55.249669][ T6912] pim6reg1: entered allmulticast mode [ 55.415883][ T6929] pim6reg1: entered promiscuous mode [ 55.417478][ T6929] pim6reg1: entered allmulticast mode [ 55.742707][ T6948] pim6reg1: entered promiscuous mode [ 55.744737][ T6948] pim6reg1: entered allmulticast mode [ 56.175276][ T6965] syz.3.363[6965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.175360][ T6965] syz.3.363[6965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.179955][ T6965] syz.3.363[6965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.465606][ T6990] sit0: entered allmulticast mode [ 56.477368][ T6990] sit0: entered promiscuous mode [ 56.809524][ T7029] syz.1.393[7029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.809585][ T7029] syz.1.393[7029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.812799][ T7029] syz.1.393[7029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.820422][ T7029] pim6reg1: entered promiscuous mode [ 56.825229][ T7029] pim6reg1: entered allmulticast mode [ 58.146460][ T7057] sit0: entered promiscuous mode [ 58.150687][ T7057] sit0: entered allmulticast mode [ 58.224908][ T7069] pim6reg1: entered promiscuous mode [ 58.226709][ T7069] pim6reg1: entered allmulticast mode [ 59.339891][ T7099] pim6reg1: entered promiscuous mode [ 59.341816][ T7099] pim6reg1: entered allmulticast mode [ 59.488233][ T7107] syzkaller0: entered promiscuous mode [ 59.490280][ T7107] syzkaller0: entered allmulticast mode [ 60.715949][ T7138] pim6reg1: entered promiscuous mode [ 60.717772][ T7138] pim6reg1: entered allmulticast mode [ 61.006958][ T7170] pim6reg1: entered promiscuous mode [ 61.008539][ T7170] pim6reg1: entered allmulticast mode [ 61.055363][ T7174] pim6reg1: entered promiscuous mode [ 61.056759][ T7174] pim6reg1: entered allmulticast mode [ 61.185617][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 61.185628][ T39] audit: type=1400 audit(1732429263.108:348): avc: denied { ioctl } for pid=7181 comm="syz.3.459" path="socket:[13985]" dev="sockfs" ino=13985 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.677283][ T5954] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.716046][ T7258] __nla_validate_parse: 7 callbacks suppressed [ 62.716056][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 62.743386][ T7260] futex_wake_op: syz.2.491 tries to shift op by -1; fix this program [ 62.782400][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7262 comm=syz.2.492 [ 62.837317][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 62.841929][ T5954] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 62.844053][ T5954] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.846469][ T5954] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.849134][ T5954] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.851624][ T5954] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.855019][ T5954] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.857606][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.934582][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 62.975480][ T39] audit: type=1400 audit(1732429264.898:349): avc: denied { ioctl } for pid=7272 comm="syz.3.496" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.976489][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7273 comm=syz.3.496 [ 63.063897][ T5954] usb 6-1: usb_control_msg returned -32 [ 63.065379][ T5954] usbtmc 6-1:16.0: can't read capabilities [ 63.161793][ T7279] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 63.164143][ T7279] netlink: 15382 bytes leftover after parsing attributes in process `syz.2.498'. [ 63.328968][ T7288] kvm: emulating exchange as write [ 63.403444][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 63.406901][ T39] audit: type=1400 audit(1732429265.328:350): avc: denied { getopt } for pid=7300 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.409286][ T7301] netlink: 52 bytes leftover after parsing attributes in process `syz.0.507'. [ 63.512164][ T7306] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 63.514214][ T7306] netlink: 15382 bytes leftover after parsing attributes in process `syz.3.509'. [ 63.652689][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 63.731843][ T7322] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 63.733894][ T7322] netlink: 15382 bytes leftover after parsing attributes in process `syz.0.520'. [ 63.772267][ T7326] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 63.804775][ T39] audit: type=1400 audit(1732429265.728:351): avc: denied { create } for pid=7327 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.810003][ T39] audit: type=1400 audit(1732429265.728:352): avc: denied { bind } for pid=7327 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.876756][ T39] audit: type=1400 audit(1732429265.798:353): avc: denied { read } for pid=7327 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.972737][ T5989] usb 6-1: USB disconnect, device number 5 [ 64.191465][ T7338] FAULT_INJECTION: forcing a failure. [ 64.191465][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 64.194745][ T7338] CPU: 3 UID: 0 PID: 7338 Comm: syz.2.519 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 64.197434][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.200234][ T7338] Call Trace: [ 64.201126][ T7338] [ 64.201930][ T7338] dump_stack_lvl+0x16c/0x1f0 [ 64.203184][ T7338] should_fail_ex+0x497/0x5b0 [ 64.204524][ T7338] should_failslab+0xc2/0x120 [ 64.205771][ T7338] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 64.207161][ T7338] ? skb_clone+0x190/0x3f0 [ 64.208330][ T7338] skb_clone+0x190/0x3f0 [ 64.209462][ T7338] netlink_deliver_tap+0xabd/0xd30 [ 64.210880][ T7338] netlink_unicast+0x6b4/0x7f0 [ 64.212295][ T7338] ? __pfx_netlink_unicast+0x10/0x10 [ 64.213862][ T7338] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 64.215388][ T7338] netlink_ack+0x6a8/0xb90 [ 64.216739][ T7338] netlink_rcv_skb+0x348/0x440 [ 64.218064][ T7338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.219503][ T7338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.220890][ T7338] ? netlink_deliver_tap+0x1ae/0xd30 [ 64.222297][ T7338] netlink_unicast+0x53c/0x7f0 [ 64.223559][ T7338] ? __pfx_netlink_unicast+0x10/0x10 [ 64.224955][ T7338] netlink_sendmsg+0x8b8/0xd70 [ 64.226235][ T7338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.227612][ T7338] ____sys_sendmsg+0xaaf/0xc90 [ 64.228883][ T7338] ? copy_msghdr_from_user+0x10b/0x160 [ 64.230334][ T7338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.231737][ T7338] ___sys_sendmsg+0x135/0x1e0 [ 64.232985][ T7338] ? __pfx____sys_sendmsg+0x10/0x10 [ 64.234353][ T7338] ? __pfx_lock_release+0x10/0x10 [ 64.235675][ T7338] ? trace_lock_acquire+0x146/0x1e0 [ 64.237084][ T7338] ? __fget_files+0x206/0x3a0 [ 64.238367][ T7338] __sys_sendmsg+0x16e/0x220 [ 64.239651][ T7338] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.241075][ T7338] do_syscall_64+0xcd/0x250 [ 64.242312][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.243883][ T7338] RIP: 0033:0x7fa6fb37e819 [ 64.245063][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.250203][ T7338] RSP: 002b:00007fa6fc1f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.252386][ T7338] RAX: ffffffffffffffda RBX: 00007fa6fb535fa0 RCX: 00007fa6fb37e819 [ 64.254447][ T7338] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 64.256516][ T7338] RBP: 00007fa6fc1f1090 R08: 0000000000000000 R09: 0000000000000000 [ 64.258646][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.260779][ T7338] R13: 0000000000000000 R14: 00007fa6fb535fa0 R15: 00007ffe7d88ecf8 [ 64.262939][ T7338] [ 64.453011][ T39] audit: type=1400 audit(1732429266.378:354): avc: denied { read } for pid=7353 comm="syz.2.528" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 64.460780][ T39] audit: type=1400 audit(1732429266.378:355): avc: denied { open } for pid=7353 comm="syz.2.528" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 64.515192][ T7357] FAULT_INJECTION: forcing a failure. [ 64.515192][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.519278][ T7357] CPU: 3 UID: 0 PID: 7357 Comm: syz.1.529 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 64.521953][ T7357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.524956][ T7357] Call Trace: [ 64.525834][ T7357] [ 64.526626][ T7357] dump_stack_lvl+0x16c/0x1f0 [ 64.527862][ T7357] should_fail_ex+0x497/0x5b0 [ 64.529152][ T7357] _copy_to_user+0x32/0xd0 [ 64.530347][ T7357] simple_read_from_buffer+0xd0/0x160 [ 64.531876][ T7357] proc_fail_nth_read+0x198/0x270 [ 64.533371][ T7357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.534812][ T7357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.536242][ T7357] vfs_read+0x1df/0xbe0 [ 64.537402][ T7357] ? __fget_files+0x1fc/0x3a0 [ 64.538639][ T7357] ? __pfx___mutex_lock+0x10/0x10 [ 64.539978][ T7357] ? __pfx_vfs_read+0x10/0x10 [ 64.541244][ T7357] ? __fget_files+0x206/0x3a0 [ 64.542481][ T7357] ksys_read+0x12b/0x250 [ 64.543762][ T7357] ? __pfx_ksys_read+0x10/0x10 [ 64.545158][ T7357] do_syscall_64+0xcd/0x250 [ 64.546430][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.547970][ T7357] RIP: 0033:0x7f3f4f57d25c [ 64.549142][ T7357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 64.554152][ T7357] RSP: 002b:00007f3f4d3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.556303][ T7357] RAX: ffffffffffffffda RBX: 00007f3f4f735fa0 RCX: 00007f3f4f57d25c [ 64.558473][ T7357] RDX: 000000000000000f RSI: 00007f3f4d3f60a0 RDI: 0000000000000004 [ 64.560522][ T7357] RBP: 00007f3f4d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.562584][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.564773][ T7357] R13: 0000000000000000 R14: 00007f3f4f735fa0 R15: 00007ffcfad242e8 [ 64.566831][ T7357] [ 64.667791][ T39] audit: type=1400 audit(1732429266.598:356): avc: denied { getopt } for pid=7362 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.727905][ T39] audit: type=1400 audit(1732429266.658:357): avc: denied { name_connect } for pid=7375 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 64.747795][ T6316] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.816857][ T7387] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 64.819987][ T7387] netlink: 'syz.1.540': attribute type 4 has an invalid length. [ 64.822038][ T7387] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.540'. [ 64.844804][ T7389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65048 sclass=netlink_route_socket pid=7389 comm=syz.1.541 [ 64.897303][ T6316] usb 7-1: Using ep0 maxpacket: 16 [ 64.899163][ T6316] usb 7-1: no configurations [ 64.900450][ T6316] usb 7-1: can't read configurations, error -22 [ 64.925349][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'. [ 64.929920][ T7395] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 64.997455][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 65.027322][ T6316] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 65.157306][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 65.160620][ T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 65.162897][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.165413][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.168143][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.170733][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.174081][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.176385][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.187301][ T6316] usb 7-1: Using ep0 maxpacket: 16 [ 65.189298][ T6316] usb 7-1: no configurations [ 65.190880][ T6316] usb 7-1: can't read configurations, error -22 [ 65.192720][ T6316] usb usb7-port1: attempt power cycle [ 65.382370][ T35] usb 5-1: usb_control_msg returned -32 [ 65.383902][ T35] usbtmc 5-1:16.0: can't read capabilities [ 65.547294][ T6316] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 65.567965][ T6316] usb 7-1: Using ep0 maxpacket: 16 [ 65.570153][ T6316] usb 7-1: no configurations [ 65.571431][ T6316] usb 7-1: can't read configurations, error -22 [ 65.697308][ T6316] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 65.718445][ T6316] usb 7-1: Using ep0 maxpacket: 16 [ 65.720271][ T6316] usb 7-1: no configurations [ 65.721985][ T6316] usb 7-1: can't read configurations, error -22 [ 65.724166][ T6316] usb usb7-port1: unable to enumerate USB device [ 66.062874][ T7422] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 66.065756][ T7422] netlink: 'syz.3.550': attribute type 4 has an invalid length. [ 66.089962][ T7423] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 66.252595][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 66.252605][ T39] audit: type=1400 audit(1732429268.178:363): avc: denied { accept } for pid=7430 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 66.291150][ T5954] usb 5-1: USB disconnect, device number 7 [ 66.335715][ T7433] FAULT_INJECTION: forcing a failure. [ 66.335715][ T7433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.340540][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.3.554 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 66.343486][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.346274][ T7433] Call Trace: [ 66.347145][ T7433] [ 66.348430][ T7433] dump_stack_lvl+0x16c/0x1f0 [ 66.349755][ T7433] should_fail_ex+0x497/0x5b0 [ 66.351116][ T7433] __kvm_read_guest_page+0x16b/0x210 [ 66.352545][ T7433] kvm_fetch_guest_virt+0x128/0x1a0 [ 66.353955][ T7433] __do_insn_fetch_bytes+0x420/0x6d0 [ 66.355391][ T7433] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 66.356966][ T7433] ? find_held_lock+0x2d/0x110 [ 66.358255][ T7433] ? kvm_tdp_page_fault+0x295/0x3d0 [ 66.359672][ T7433] x86_decode_insn+0xb91/0x5530 [ 66.361295][ T7433] ? vmx_segment_cache_test_set+0x14b/0x400 [ 66.363106][ T7433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.364952][ T7433] ? __pfx_x86_decode_insn+0x10/0x10 [ 66.366589][ T7433] ? vmx_cache_reg+0x333/0x5e0 [ 66.368043][ T7433] ? kvm_register_read_raw+0xe9/0x240 [ 66.369599][ T7433] ? init_decode_cache+0xd/0x210 [ 66.371031][ T7433] ? init_emulate_ctxt+0x338/0x510 [ 66.372516][ T7433] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 66.374093][ T7433] ? mark_lock+0xb5/0xc60 [ 66.375390][ T7433] x86_emulate_instruction+0x975/0x1a50 [ 66.375773][ T7436] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 66.377035][ T7433] handle_ud+0x104/0x280 [ 66.379998][ T7433] ? __pfx_handle_ud+0x10/0x10 [ 66.381006][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.381402][ T7433] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 66.382415][ T7436] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 66.384469][ T7436] cgroup: subsys name conflicts with all [ 66.384612][ T7433] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 66.384629][ T7433] handle_exception_nmi+0x83e/0x1410 [ 66.390429][ T7436] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 66.391723][ T7433] ? __pfx_handle_exception_nmi+0x10/0x10 [ 66.391739][ T7433] vmx_handle_exit+0x733/0x1f70 [ 66.391753][ T7433] vcpu_run+0x3047/0x4f50 [ 66.397983][ T7433] ? __pfx___mutex_trylock_common+0x10/0x10 [ 66.399951][ T7433] ? __pfx_vcpu_run+0x10/0x10 [ 66.401346][ T7433] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 66.402966][ T7433] ? rcu_is_watching+0x12/0xc0 [ 66.404361][ T7433] ? trace_lock_acquire+0x146/0x1e0 [ 66.405886][ T7433] ? __local_bh_enable_ip+0xa4/0x120 [ 66.407411][ T7433] ? lockdep_hardirqs_on+0x7c/0x110 [ 66.408923][ T7433] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 66.411017][ T7433] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 66.412687][ T7433] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 66.414350][ T7433] kvm_vcpu_ioctl+0x6c7/0x1520 [ 66.415753][ T7433] ? do_vfs_ioctl+0x513/0x1990 [ 66.417174][ T7433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.418699][ T7433] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 66.420597][ T7433] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.422755][ T7433] ? __pfx_lock_release+0x10/0x10 [ 66.424300][ T7433] ? selinux_file_ioctl+0x180/0x270 [ 66.425868][ T7433] ? selinux_file_ioctl+0xb4/0x270 [ 66.427315][ T7433] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 66.428822][ T7433] __x64_sys_ioctl+0x190/0x200 [ 66.430227][ T7433] do_syscall_64+0xcd/0x250 [ 66.431574][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.433318][ T7433] RIP: 0033:0x7febee17e819 [ 66.434669][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.440490][ T7433] RSP: 002b:00007febeeea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.443299][ T7433] RAX: ffffffffffffffda RBX: 00007febee335fa0 RCX: 00007febee17e819 [ 66.445760][ T7433] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 66.448069][ T7433] RBP: 00007febeeea1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.450362][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.452650][ T7433] R13: 0000000000000000 R14: 00007febee335fa0 R15: 00007ffce25f5778 [ 66.454952][ T7433] [ 66.455915][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.629211][ T39] audit: type=1400 audit(1732429268.558:364): avc: denied { create } for pid=7437 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 66.661999][ T7439] netlink: 'syz.3.556': attribute type 39 has an invalid length. [ 66.862087][ T39] audit: type=1400 audit(1732429268.788:365): avc: denied { mount } for pid=7450 comm="syz.0.559" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.868748][ T39] audit: type=1400 audit(1732429268.788:366): avc: denied { mounton } for pid=7450 comm="syz.0.559" path="/139/file0/bus" dev="bpf" ino=14264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 66.869792][ T7451] overlayfs: upper fs does not support tmpfile. [ 66.889337][ T39] audit: type=1400 audit(1732429268.818:367): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.909557][ T7455] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 66.911656][ T7455] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 66.945016][ T39] audit: type=1400 audit(1732429268.868:368): avc: denied { write } for pid=7458 comm="syz.0.562" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.948574][ T7459] input: syz1 as /devices/virtual/input/input7 [ 66.997278][ T39] audit: type=1400 audit(1732429268.918:369): avc: denied { bind } for pid=7463 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.002406][ T39] audit: type=1400 audit(1732429268.928:370): avc: denied { setopt } for pid=7463 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.010338][ T7464] program syz.3.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.055639][ T39] audit: type=1400 audit(1732429268.978:371): avc: denied { read append } for pid=7468 comm="syz.3.566" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.067267][ T39] audit: type=1400 audit(1732429268.978:372): avc: denied { open } for pid=7468 comm="syz.3.566" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.294692][ T7489] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 67.653411][ T7519] FAULT_INJECTION: forcing a failure. [ 67.653411][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.657286][ T7519] CPU: 2 UID: 0 PID: 7519 Comm: syz.0.585 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 67.660248][ T7519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.663403][ T7519] Call Trace: [ 67.664403][ T7519] [ 67.665302][ T7519] dump_stack_lvl+0x16c/0x1f0 [ 67.666747][ T7519] should_fail_ex+0x497/0x5b0 [ 67.668393][ T7519] __kvm_read_guest_page+0x16b/0x210 [ 67.670422][ T7519] kvm_fetch_guest_virt+0x128/0x1a0 [ 67.672397][ T7519] __do_insn_fetch_bytes+0x420/0x6d0 [ 67.674001][ T7519] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 67.675694][ T7519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.677441][ T7519] ? vmx_check_intercept+0x1b8/0xaf0 [ 67.678997][ T7519] x86_decode_insn+0xb91/0x5530 [ 67.680501][ T7519] ? vmx_segment_cache_test_set+0x14b/0x400 [ 67.682305][ T7519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.684053][ T7519] ? __pfx_x86_decode_insn+0x10/0x10 [ 67.685610][ T7519] ? vmx_cache_reg+0x333/0x5e0 [ 67.687278][ T7519] ? kvm_register_read_raw+0xe9/0x240 [ 67.688834][ T7519] ? init_decode_cache+0xd/0x210 [ 67.690192][ T7519] ? init_emulate_ctxt+0x338/0x510 [ 67.691654][ T7519] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 67.693234][ T7519] ? kvm_multiple_exception+0x44a/0xb40 [ 67.695147][ T7519] ? mark_lock+0xb5/0xc60 [ 67.696440][ T7519] x86_emulate_instruction+0x975/0x1a50 [ 67.698074][ T7519] handle_ud+0x104/0x280 [ 67.699332][ T7519] ? __pfx_handle_ud+0x10/0x10 [ 67.700745][ T7519] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 67.702503][ T7519] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 67.704435][ T7519] handle_exception_nmi+0x83e/0x1410 [ 67.706326][ T7519] ? __pfx_handle_exception_nmi+0x10/0x10 [ 67.708508][ T7519] vmx_handle_exit+0x733/0x1f70 [ 67.709898][ T7519] vcpu_run+0x3047/0x4f50 [ 67.711254][ T7519] ? __pfx___mutex_trylock_common+0x10/0x10 [ 67.713452][ T7519] ? __pfx_vcpu_run+0x10/0x10 [ 67.715059][ T7519] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.716711][ T7519] ? rcu_is_watching+0x12/0xc0 [ 67.718306][ T7519] ? trace_lock_acquire+0x146/0x1e0 [ 67.719840][ T7519] ? __local_bh_enable_ip+0xa4/0x120 [ 67.721400][ T7519] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.722923][ T7519] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 67.724624][ T7519] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 67.726653][ T7519] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 67.728624][ T7519] kvm_vcpu_ioctl+0x6c7/0x1520 [ 67.730546][ T7519] ? do_vfs_ioctl+0x513/0x1990 [ 67.732326][ T7519] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.734319][ T7519] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 67.736507][ T7519] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.738539][ T7519] ? __pfx_lock_release+0x10/0x10 [ 67.740512][ T7519] ? selinux_file_ioctl+0x180/0x270 [ 67.742492][ T7519] ? selinux_file_ioctl+0xb4/0x270 [ 67.744352][ T7519] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.746210][ T7519] __x64_sys_ioctl+0x190/0x200 [ 67.747679][ T7519] do_syscall_64+0xcd/0x250 [ 67.749117][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.750921][ T7519] RIP: 0033:0x7fb8ec57e819 [ 67.752257][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.757822][ T7519] RSP: 002b:00007fb8ed3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.760268][ T7519] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57e819 [ 67.762682][ T7519] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.765057][ T7519] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 67.767370][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.769705][ T7519] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 67.772118][ T7519] [ 67.923694][ T7535] __nla_validate_parse: 7 callbacks suppressed [ 67.923708][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 68.014154][ T7545] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.594'. [ 68.206772][ T7559] netlink: 57 bytes leftover after parsing attributes in process `syz.0.601'. [ 68.210692][ T7561] validate_nla: 6 callbacks suppressed [ 68.210707][ T7561] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 68.227448][ T7561] bond0: (slave netdevsim0): no link monitoring support [ 68.229858][ T7561] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 68.236904][ T7561] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 68.409139][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 68.411866][ T5309] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.534941][ T7587] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.585642][ T7588] ALSA: mixer_oss: invalid OSS volume '' [ 68.660907][ T7595] autofs: Bad value for 'fd' [ 69.005166][ T7620] autofs: Unknown parameter '€' [ 69.047938][ T7623] [U] [ 69.048921][ T7623] [U] [ 69.049734][ T7623] [U] [ 69.050543][ T7623] [U] [ 69.052092][ T7623] [U] [ 69.052870][ T7623] [U] [ 69.053590][ T7623] [U] [ 69.054355][ T7623] [U] [ 69.055141][ T7623] [U] [ 69.055865][ T7623] [U] [ 69.056583][ T7623] [U] [ 69.057339][ T7623] [U] [ 69.058893][ T7623] [U] [ 69.059673][ T7623] [U] [ 69.060389][ T7623] [U] [ 69.061137][ T7623] [U] [ 69.064157][ T7623] [U] [ 69.064930][ T7623] [U] [ 69.065655][ T7623] [U] [ 69.066360][ T7623] [U] [ 69.067147][ T7623] [U] [ 69.067874][ T7623] [U] [ 69.068789][ T7623] [U] [ 69.069755][ T7623] [U] [ 69.071855][ T7623] [U] [ 69.072620][ T7623] [U] [ 69.073332][ T7623] [U] [ 69.074044][ T7623] [U] [ 69.074834][ T7623] [U] [ 69.075558][ T7623] [U] [ 69.076261][ T7623] [U] [ 69.076986][ T7623] [U] [ 69.078003][ T7623] [U] [ 69.078735][ T7623] [U] [ 69.079467][ T7623] [U] [ 69.080180][ T7623] [U] [ 69.081172][ T7623] [U] [ 69.081894][ T7623] [U] [ 69.082864][ T7623] [U] [ 69.083600][ T7623] [U] [ 69.084934][ T7623] [U] [ 69.085728][ T7623] [U] [ 69.086480][ T7623] [U] [ 69.087242][ T7623] [U] [ 69.090733][ T7623] [U] [ 69.091487][ T7623] [U] [ 69.092214][ T7623] [U] [ 69.092933][ T7623] [U] [ 69.097385][ T7623] [U] [ 69.098161][ T7623] [U] [ 69.098903][ T7623] [U] [ 69.099655][ T7623] [U] [ 69.107355][ T7623] [U] [ 69.108095][ T7623] [U] [ 69.108814][ T7623] [U] [ 69.109531][ T7623] [U] [ 69.110316][ T7623] [U] [ 69.111030][ T7623] [U] [ 69.111738][ T7623] [U] [ 69.112445][ T7623] [U] [ 69.113214][ T7623] [U] [ 69.113947][ T7623] [U] [ 69.114651][ T7623] [U] [ 69.115364][ T7623] [U] [ 69.116121][ T7623] [U] [ 69.116841][ T7623] [U] [ 69.117626][ T7623] [U] [ 69.118370][ T7623] [U] [ 69.121684][ T7625] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 69.122407][ T7623] [U] [ 69.124678][ T7623] [U] [ 69.125425][ T7623] [U] [ 69.126191][ T7623] [U] [ 69.128442][ T7623] [U] [ 69.129230][ T7623] [U] [ 69.129970][ T7623] [U] [ 69.130567][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.130695][ T7623] [U] [ 69.133927][ T7623] [U] [ 69.134948][ T7623] [U] [ 69.135699][ T7623] [U] [ 69.136429][ T7623] [U] [ 69.137440][ T7623] [U] [ 69.138188][ T7623] [U] [ 69.138932][ T7623] [U] [ 69.139680][ T7623] [U] [ 69.140612][ T7623] [U] [ 69.141408][ T7623] [U] [ 69.142158][ T7623] [U] [ 69.142900][ T7623] [U] [ 69.143773][ T7623] [U] [ 69.144515][ T7623] [U] [ 69.145270][ T7623] [U] [ 69.146014][ T7623] [U] [ 69.146872][ T7623] [U] [ 69.147631][ T7623] [U] [ 69.148362][ T7623] [U] [ 69.149106][ T7623] [U] [ 69.150077][ T7623] [U] [ 69.150842][ T7623] [U] [ 69.151577][ T7623] [U] [ 69.152311][ T7623] [U] [ 69.154391][ T7623] [U] [ 69.155161][ T7623] [U] [ 69.155906][ T7623] [U] [ 69.156637][ T7623] [U] [ 69.157547][ T7623] [U] [ 69.158283][ T7623] [U] [ 69.159022][ T7623] [U] [ 69.159908][ T7623] [U] [ 69.160782][ T7623] [U] [ 69.161524][ T7623] [U] [ 69.162240][ T7623] [U] [ 69.162937][ T7623] [U] [ 69.164056][ T7623] [U] [ 69.164803][ T7623] [U] [ 69.165544][ T7623] [U] [ 69.166272][ T7623] [U] [ 69.167899][ T7623] [U] [ 69.168666][ T7623] [U] [ 69.169405][ T7623] [U] [ 69.170136][ T7623] [U] [ 69.171428][ T7623] [U] [ 69.172272][ T7623] [U] [ 69.173042][ T7623] [U] [ 69.173798][ T7623] [U] [ 69.174627][ T7623] [U] [ 69.175373][ T7623] [U] [ 69.176114][ T7623] [U] [ 69.338848][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 69.356840][ T7670] bond1: entered promiscuous mode [ 69.371325][ T7670] gretap1: entered promiscuous mode [ 69.373707][ T7670] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 69.378599][ T7673] team0: entered promiscuous mode [ 69.379973][ T7673] team_slave_0: entered promiscuous mode [ 69.381673][ T7673] team_slave_1: entered promiscuous mode [ 69.385289][ T7673] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.387965][ T7673] team0: Device macvlan2 is already an upper device of the team interface [ 69.391197][ T7673] team0: left promiscuous mode [ 69.392469][ T7673] team_slave_0: left promiscuous mode [ 69.394041][ T7673] team_slave_1: left promiscuous mode [ 69.406384][ T7670] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 69.410146][ T7670] gretap1: left promiscuous mode [ 69.412891][ T7670] bond1 (unregistering): Released all slaves [ 69.511479][ T7688] netlink: 108 bytes leftover after parsing attributes in process `syz.3.643'. [ 69.666775][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 69.696470][ T7709] veth1_to_bond: default FDB implementation only supports local addresses [ 69.727646][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 69.801146][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 69.809113][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 69.821854][ T7617] [U] [ 69.843647][ T7727] tmpfs: Unknown parameter 'mpml' [ 69.878939][ T5990] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 69.965577][ T7741] overlayfs: failed to resolve './file0': -2 [ 69.973997][ T7741] @: renamed from vlan0 (while UP) [ 69.985366][ T7738] FAULT_INJECTION: forcing a failure. [ 69.985366][ T7738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.989506][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.0.663 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 69.992281][ T7738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.995143][ T7738] Call Trace: [ 69.996094][ T7738] [ 69.996958][ T7738] dump_stack_lvl+0x16c/0x1f0 [ 69.998279][ T7738] should_fail_ex+0x497/0x5b0 [ 69.999705][ T7738] __kvm_read_guest_page+0x16b/0x210 [ 70.001239][ T7738] kvm_fetch_guest_virt+0x128/0x1a0 [ 70.002619][ T7738] __do_insn_fetch_bytes+0x420/0x6d0 [ 70.004087][ T7738] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 70.005695][ T7738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.007259][ T7738] ? vmx_check_intercept+0x1b8/0xaf0 [ 70.008665][ T7738] x86_decode_insn+0xb91/0x5530 [ 70.009976][ T7738] ? vmx_segment_cache_test_set+0x14b/0x400 [ 70.011484][ T7738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.013085][ T7738] ? __pfx_x86_decode_insn+0x10/0x10 [ 70.014558][ T7738] ? vmx_cache_reg+0x333/0x5e0 [ 70.015847][ T7738] ? kvm_register_read_raw+0xe9/0x240 [ 70.017346][ T7738] ? init_decode_cache+0xd/0x210 [ 70.018789][ T7738] ? init_emulate_ctxt+0x338/0x510 [ 70.020273][ T7738] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 70.021836][ T7738] ? kvm_multiple_exception+0x44a/0xb40 [ 70.023329][ T7738] ? mark_lock+0xb5/0xc60 [ 70.024512][ T7738] x86_emulate_instruction+0x975/0x1a50 [ 70.026015][ T7738] handle_ud+0x104/0x280 [ 70.027181][ T7738] ? __pfx_handle_ud+0x10/0x10 [ 70.028632][ T7738] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 70.030408][ T7738] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 70.032227][ T7738] handle_exception_nmi+0x83e/0x1410 [ 70.033798][ T7738] ? __pfx_handle_exception_nmi+0x10/0x10 [ 70.035550][ T7738] vmx_handle_exit+0x733/0x1f70 [ 70.036959][ T7738] vcpu_run+0x3047/0x4f50 [ 70.038127][ T7738] ? __pfx___mutex_trylock_common+0x10/0x10 [ 70.039740][ T7738] ? __pfx_vcpu_run+0x10/0x10 [ 70.041015][ T7738] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.042536][ T7738] ? rcu_is_watching+0x12/0xc0 [ 70.043848][ T7738] ? trace_lock_acquire+0x146/0x1e0 [ 70.045459][ T7738] ? __local_bh_enable_ip+0xa4/0x120 [ 70.046868][ T7738] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.048299][ T7738] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 70.049968][ T7738] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 70.051881][ T7738] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 70.053575][ T7738] kvm_vcpu_ioctl+0x6c7/0x1520 [ 70.055010][ T7738] ? do_vfs_ioctl+0x513/0x1990 [ 70.056372][ T7738] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.057841][ T7738] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 70.059817][ T7738] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.061769][ T7738] ? __pfx_lock_release+0x10/0x10 [ 70.063164][ T7738] ? selinux_file_ioctl+0x180/0x270 [ 70.064511][ T7738] ? selinux_file_ioctl+0xb4/0x270 [ 70.065950][ T7738] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.067387][ T7738] __x64_sys_ioctl+0x190/0x200 [ 70.068785][ T7738] do_syscall_64+0xcd/0x250 [ 70.070207][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.071869][ T7738] RIP: 0033:0x7fb8ec57e819 [ 70.073264][ T7738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.078409][ T7738] RSP: 002b:00007fb8ed3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.080623][ T7738] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57e819 [ 70.082723][ T7738] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 70.085037][ T7738] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 70.087466][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.089965][ T7738] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 70.092215][ T7738] [ 70.093186][ C0] vkms_vblank_simulate: vblank timer overrun [ 70.107267][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 70.110380][ T5990] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 70.112811][ T5990] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.115545][ T5990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.118356][ T5990] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.120976][ T5990] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.124578][ T5990] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.127763][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.138362][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 70.337460][ T5990] usb 6-1: usb_control_msg returned -32 [ 70.339166][ T5990] usbtmc 6-1:16.0: can't read capabilities [ 70.362098][ T7767] tipc: Enabling of bearer rejected, failed to enable media [ 70.660608][ T7809] netlink: 'syz.2.689': attribute type 38 has an invalid length. [ 70.722085][ T7817] fuse: Unknown parameter '' [ 70.737337][ T5990] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 70.738298][ T7820] syz.2.694 (7820): attempted to duplicate a private mapping with mremap. This is not supported. [ 70.772615][ T7825] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 70.833640][ T7827] FAULT_INJECTION: forcing a failure. [ 70.833640][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.837739][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.0.697 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 70.840934][ T7827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.844176][ T7827] Call Trace: [ 70.845195][ T7827] [ 70.846074][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 70.847468][ T7827] should_fail_ex+0x497/0x5b0 [ 70.848940][ T7827] __kvm_read_guest_page+0x16b/0x210 [ 70.850575][ T7827] kvm_fetch_guest_virt+0x128/0x1a0 [ 70.852169][ T7827] __do_insn_fetch_bytes+0x420/0x6d0 [ 70.853774][ T7827] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 70.855448][ T7827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.857157][ T7827] ? vmx_check_intercept+0x1b8/0xaf0 [ 70.858683][ T7827] x86_decode_insn+0xb91/0x5530 [ 70.860113][ T7827] ? vmx_segment_cache_test_set+0x14b/0x400 [ 70.861872][ T7827] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.863642][ T7827] ? __pfx_x86_decode_insn+0x10/0x10 [ 70.865242][ T7827] ? vmx_cache_reg+0x333/0x5e0 [ 70.866644][ T7827] ? kvm_register_read_raw+0xe9/0x240 [ 70.868218][ T7827] ? init_decode_cache+0xd/0x210 [ 70.869696][ T7827] ? init_emulate_ctxt+0x338/0x510 [ 70.871212][ T7827] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 70.872770][ T7827] ? kvm_multiple_exception+0x44a/0xb40 [ 70.874382][ T7827] ? mark_lock+0xb5/0xc60 [ 70.875646][ T7827] x86_emulate_instruction+0x975/0x1a50 [ 70.877264][ T7827] handle_ud+0x104/0x280 [ 70.878520][ T7827] ? __pfx_handle_ud+0x10/0x10 [ 70.879987][ T7827] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 70.881777][ T7827] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 70.883675][ T7827] handle_exception_nmi+0x83e/0x1410 [ 70.885263][ T7827] ? __pfx_handle_exception_nmi+0x10/0x10 [ 70.886905][ T7827] vmx_handle_exit+0x733/0x1f70 [ 70.888319][ T7827] vcpu_run+0x3047/0x4f50 [ 70.889578][ T7827] ? __pfx___mutex_trylock_common+0x10/0x10 [ 70.891288][ T7827] ? __pfx_vcpu_run+0x10/0x10 [ 70.892654][ T7827] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 70.894278][ T7827] ? rcu_is_watching+0x12/0xc0 [ 70.895675][ T7827] ? trace_lock_acquire+0x146/0x1e0 [ 70.897202][ T7827] ? __local_bh_enable_ip+0xa4/0x120 [ 70.898756][ T7827] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.900334][ T7827] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 70.902024][ T7827] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 70.903687][ T7827] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 70.905300][ T7827] kvm_vcpu_ioctl+0x6c7/0x1520 [ 70.906837][ T7827] ? do_vfs_ioctl+0x513/0x1990 [ 70.908273][ T7827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.909910][ T7827] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 70.911806][ T7827] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.913801][ T7827] ? __pfx_lock_release+0x10/0x10 [ 70.915289][ T7827] ? selinux_file_ioctl+0x180/0x270 [ 70.916846][ T7827] ? selinux_file_ioctl+0xb4/0x270 [ 70.918401][ T7827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.920003][ T7827] __x64_sys_ioctl+0x190/0x200 [ 70.921466][ T7827] do_syscall_64+0xcd/0x250 [ 70.922722][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.924398][ T7827] RIP: 0033:0x7fb8ec57e819 [ 70.925705][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.931574][ T7827] RSP: 002b:00007fb8ed3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.934144][ T7827] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57e819 [ 70.936437][ T7827] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 70.938817][ T7827] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 70.941008][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.943378][ T7827] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 70.945646][ T7827] [ 70.962250][ T5990] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.965454][ T5990] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 70.968423][ T5990] usb 8-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 70.970801][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.974754][ T5990] usb 8-1: config 0 descriptor?? [ 70.976785][ T7788] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 71.042471][ T7834] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 71.050641][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.052543][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.121146][ T7840] macvtap0: Device is already in use. [ 71.183565][ T5990] usbhid 8-1:0.0: can't add hid device: -71 [ 71.185321][ T5990] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 71.190138][ T5990] usb 8-1: USB disconnect, device number 4 [ 71.243837][ T6316] usb 6-1: USB disconnect, device number 6 [ 71.796923][ T39] kauditd_printk_skb: 39 callbacks suppressed [ 71.796942][ T39] audit: type=1400 audit(1732429273.718:412): avc: denied { ioctl } for pid=7861 comm="syz.3.711" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 71.832238][ T7866] Cannot find add_set index 0 as target [ 71.861106][ T39] audit: type=1400 audit(1732429273.788:413): avc: denied { watch watch_reads } for pid=7873 comm="syz.1.715" path="/138/file0" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.927839][ T7876] FAULT_INJECTION: forcing a failure. [ 71.927839][ T7876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.931649][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.2.716 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 71.934559][ T7876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.937692][ T7876] Call Trace: [ 71.938718][ T7876] [ 71.939578][ T7876] dump_stack_lvl+0x16c/0x1f0 [ 71.940922][ T7876] should_fail_ex+0x497/0x5b0 [ 71.942231][ T7876] __kvm_read_guest_page+0x16b/0x210 [ 71.943688][ T7876] kvm_fetch_guest_virt+0x128/0x1a0 [ 71.945113][ T7876] __do_insn_fetch_bytes+0x420/0x6d0 [ 71.946573][ T7876] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 71.948162][ T7876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.949734][ T7876] ? vmx_check_intercept+0x1b8/0xaf0 [ 71.951165][ T7876] x86_decode_insn+0xb91/0x5530 [ 71.952526][ T7876] ? vmx_segment_cache_test_set+0x14b/0x400 [ 71.954104][ T7876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.955706][ T7876] ? __pfx_x86_decode_insn+0x10/0x10 [ 71.957189][ T7876] ? vmx_cache_reg+0x333/0x5e0 [ 71.958584][ T7876] ? kvm_register_read_raw+0xe9/0x240 [ 71.960108][ T7876] ? init_decode_cache+0xd/0x210 [ 71.961549][ T7876] ? init_emulate_ctxt+0x338/0x510 [ 71.962959][ T7876] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 71.964448][ T7876] ? kvm_multiple_exception+0x44a/0xb40 [ 71.965964][ T7876] ? mark_lock+0xb5/0xc60 [ 71.967153][ T7876] x86_emulate_instruction+0x975/0x1a50 [ 71.968639][ T7876] handle_ud+0x104/0x280 [ 71.969816][ T7876] ? __pfx_handle_ud+0x10/0x10 [ 71.971243][ T7876] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 71.972960][ T7876] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 71.974692][ T7876] handle_exception_nmi+0x83e/0x1410 [ 71.976185][ T7876] ? __pfx_handle_exception_nmi+0x10/0x10 [ 71.977714][ T7876] vmx_handle_exit+0x733/0x1f70 [ 71.979308][ T7876] vcpu_run+0x3047/0x4f50 [ 71.980542][ T7876] ? __pfx___mutex_trylock_common+0x10/0x10 [ 71.982152][ T7876] ? __pfx_vcpu_run+0x10/0x10 [ 71.983478][ T7876] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 71.985050][ T7876] ? rcu_is_watching+0x12/0xc0 [ 71.986402][ T7876] ? trace_lock_acquire+0x146/0x1e0 [ 71.988072][ T7876] ? __local_bh_enable_ip+0xa4/0x120 [ 71.989560][ T7876] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.990987][ T7876] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 71.992541][ T7876] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 71.994104][ T7876] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 71.995591][ T7876] kvm_vcpu_ioctl+0x6c7/0x1520 [ 71.996910][ T7876] ? do_vfs_ioctl+0x513/0x1990 [ 71.998243][ T7876] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 71.999661][ T7876] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 72.001413][ T7876] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.003233][ T7876] ? __pfx_lock_release+0x10/0x10 [ 72.004659][ T7876] ? selinux_file_ioctl+0x180/0x270 [ 72.006236][ T7876] ? selinux_file_ioctl+0xb4/0x270 [ 72.007924][ T7876] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 72.009632][ T7876] __x64_sys_ioctl+0x190/0x200 [ 72.011153][ T7876] do_syscall_64+0xcd/0x250 [ 72.012493][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.014144][ T7876] RIP: 0033:0x7fa6fb37e819 [ 72.015361][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.020419][ T7876] RSP: 002b:00007fa6fc1f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.022634][ T7876] RAX: ffffffffffffffda RBX: 00007fa6fb535fa0 RCX: 00007fa6fb37e819 [ 72.024721][ T7876] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 72.026857][ T7876] RBP: 00007fa6fc1f1090 R08: 0000000000000000 R09: 0000000000000000 [ 72.028941][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.031005][ T7876] R13: 0000000000000000 R14: 00007fa6fb535fa0 R15: 00007ffe7d88ecf8 [ 72.033110][ T7876] [ 72.034011][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.147494][ T6316] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.175253][ T7901] vivid-000: disconnect [ 72.178374][ T7901] vivid-000: reconnect [ 72.212381][ T39] audit: type=1400 audit(1732429274.138:414): avc: denied { read } for pid=7902 comm="syz.0.727" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.218317][ T39] audit: type=1400 audit(1732429274.148:415): avc: denied { connect } for pid=7893 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.223392][ T39] audit: type=1400 audit(1732429274.148:416): avc: denied { open } for pid=7902 comm="syz.0.727" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.270028][ T39] audit: type=1400 audit(1732429274.198:417): avc: denied { write } for pid=7893 comm="syz.3.724" path="socket:[20055]" dev="sockfs" ino=20055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.270092][ T39] audit: type=1400 audit(1732429274.198:418): avc: denied { getopt } for pid=7893 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.299702][ T6316] usb 6-1: Using ep0 maxpacket: 8 [ 72.319160][ T6316] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 72.319221][ T6316] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.319235][ T6316] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.319247][ T6316] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.319258][ T6316] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.319276][ T6316] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.319287][ T6316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.428969][ T39] audit: type=1400 audit(1732429274.358:419): avc: denied { bind } for pid=7909 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.530779][ T6316] usb 6-1: usb_control_msg returned -32 [ 72.532309][ T6316] usbtmc 6-1:16.0: can't read capabilities [ 72.568510][ T39] audit: type=1400 audit(1732429274.498:420): avc: denied { execute } for pid=7916 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.576923][ T39] audit: type=1400 audit(1732429274.498:421): avc: denied { execute_no_trans } for pid=7916 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.606145][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.668073][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.671669][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.674739][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.678620][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.681449][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.683654][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.707724][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.778573][ T7917] chnl_net:caif_netlink_parms(): no params data found [ 72.821082][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.854765][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.856722][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.860356][ T7917] bridge_slave_0: entered allmulticast mode [ 72.862468][ T7917] bridge_slave_0: entered promiscuous mode [ 72.865048][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.867410][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.869380][ T7917] bridge_slave_1: entered allmulticast mode [ 72.871432][ T7917] bridge_slave_1: entered promiscuous mode [ 72.894772][ T7930] FAULT_INJECTION: forcing a failure. [ 72.894772][ T7930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.899373][ T7930] CPU: 0 UID: 0 PID: 7930 Comm: syz.3.734 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 72.902324][ T7930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.905289][ T7930] Call Trace: [ 72.906217][ T7930] [ 72.907059][ T7930] dump_stack_lvl+0x16c/0x1f0 [ 72.908376][ T7930] should_fail_ex+0x497/0x5b0 [ 72.909659][ T7930] __kvm_read_guest_page+0x16b/0x210 [ 72.911115][ T7930] kvm_fetch_guest_virt+0x128/0x1a0 [ 72.912532][ T7930] __do_insn_fetch_bytes+0x420/0x6d0 [ 72.913993][ T7930] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 72.915693][ T7930] x86_decode_insn+0xb91/0x5530 [ 72.917031][ T7930] ? vmx_segment_cache_test_set+0x14b/0x400 [ 72.918650][ T7930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.920249][ T7930] ? __pfx_x86_decode_insn+0x10/0x10 [ 72.921694][ T7930] ? vmx_cache_reg+0x333/0x5e0 [ 72.922976][ T7930] ? kvm_register_read_raw+0xe9/0x240 [ 72.924381][ T7930] ? init_decode_cache+0xd/0x210 [ 72.925731][ T7930] ? init_emulate_ctxt+0x338/0x510 [ 72.927191][ T7930] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 72.928767][ T7930] ? mark_held_locks+0x9f/0xe0 [ 72.930166][ T7930] x86_emulate_instruction+0x975/0x1a50 [ 72.931766][ T7930] handle_ud+0x104/0x280 [ 72.933006][ T7930] ? __pfx_handle_ud+0x10/0x10 [ 72.934401][ T7930] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 72.936111][ T7930] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 72.937904][ T7930] handle_exception_nmi+0x83e/0x1410 [ 72.939439][ T7930] ? __pfx_handle_exception_nmi+0x10/0x10 [ 72.941082][ T7930] vmx_handle_exit+0x733/0x1f70 [ 72.942502][ T7930] vcpu_run+0x3047/0x4f50 [ 72.943764][ T7930] ? __pfx___mutex_trylock_common+0x10/0x10 [ 72.945483][ T7930] ? __pfx_vcpu_run+0x10/0x10 [ 72.946854][ T7930] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 72.948481][ T7930] ? rcu_is_watching+0x12/0xc0 [ 72.949889][ T7930] ? trace_lock_acquire+0x146/0x1e0 [ 72.951402][ T7930] ? __local_bh_enable_ip+0xa4/0x120 [ 72.952933][ T7930] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.954448][ T7930] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 72.956104][ T7930] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 72.957791][ T7930] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 72.959454][ T7930] kvm_vcpu_ioctl+0x6c7/0x1520 [ 72.960980][ T7930] ? do_vfs_ioctl+0x513/0x1990 [ 72.962378][ T7930] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 72.963881][ T7930] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 72.965754][ T7930] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.967725][ T7930] ? __pfx_lock_release+0x10/0x10 [ 72.969116][ T7930] ? selinux_file_ioctl+0x180/0x270 [ 72.970533][ T7930] ? selinux_file_ioctl+0xb4/0x270 [ 72.971966][ T7930] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 72.973339][ T7930] __x64_sys_ioctl+0x190/0x200 [ 72.974617][ T7930] do_syscall_64+0xcd/0x250 [ 72.975863][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.977582][ T7930] RIP: 0033:0x7febee17e819 [ 72.978888][ T7930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.984448][ T7930] RSP: 002b:00007febeeea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.986859][ T7930] RAX: ffffffffffffffda RBX: 00007febee335fa0 RCX: 00007febee17e819 [ 72.989141][ T7930] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 72.991426][ T7930] RBP: 00007febeeea1090 R08: 0000000000000000 R09: 0000000000000000 [ 72.993639][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.995724][ T7930] R13: 0000000000000000 R14: 00007febee335fa0 R15: 00007ffce25f5778 [ 72.997980][ T7930] [ 72.999041][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.003324][ T68] bond0: (slave netdevsim0): Releasing backup interface [ 73.006857][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.014077][ T7917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.017833][ T7917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.039714][ T7917] team0: Port device team_slave_0 added [ 73.042309][ T7917] team0: Port device team_slave_1 added [ 73.060007][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.061874][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.068805][ T7917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.073236][ T7917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.075079][ T7917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.081871][ T7917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.109354][ T7917] hsr_slave_0: entered promiscuous mode [ 73.111289][ T7917] hsr_slave_1: entered promiscuous mode [ 73.113082][ T7917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.115064][ T7917] Cannot create hsr debugfs directory [ 73.164917][ T68] bridge_slave_1: left allmulticast mode [ 73.167080][ T68] bridge_slave_1: left promiscuous mode [ 73.169470][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.174791][ T68] bridge_slave_0: left allmulticast mode [ 73.176273][ T68] bridge_slave_0: left promiscuous mode [ 73.178981][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.236137][ T7939] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 73.433929][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.439092][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.439550][ T6316] usb 6-1: USB disconnect, device number 7 [ 73.449907][ T68] bond0 (unregistering): Released all slaves [ 73.587382][ T72] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 73.735799][ T68] hsr_slave_0: left promiscuous mode [ 73.739776][ T68] hsr_slave_1: left promiscuous mode [ 73.741844][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.743918][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.746703][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.747312][ T72] usb 8-1: Invalid ep0 maxpacket: 64 [ 73.748682][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.768562][ T68] veth1_macvtap: left promiscuous mode [ 73.770239][ T68] veth0_macvtap: left promiscuous mode [ 73.771687][ T68] veth1_vlan: left promiscuous mode [ 73.773142][ T68] veth0_vlan: left promiscuous mode [ 73.887315][ T72] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 74.037931][ T72] usb 8-1: Invalid ep0 maxpacket: 64 [ 74.040041][ T72] usb usb8-port1: attempt power cycle [ 74.356409][ T68] team0 (unregistering): Port device team_slave_1 removed [ 74.387902][ T72] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 74.407834][ T72] usb 8-1: Invalid ep0 maxpacket: 64 [ 74.423863][ T68] team0 (unregistering): Port device team_slave_0 removed [ 74.557416][ T72] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 74.577880][ T72] usb 8-1: Invalid ep0 maxpacket: 64 [ 74.579882][ T72] usb usb8-port1: unable to enumerate USB device [ 74.739736][ T5957] Bluetooth: hci3: command tx timeout [ 74.994801][ T7917] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.000989][ T7917] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.004336][ T7917] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.009525][ T7917] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.057895][ T7917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.064551][ T7917] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.069170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.071091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.074804][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.076698][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.084014][ T7970] warning: `syz.1.742' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.096678][ T7970] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 75.181255][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.227255][ T7917] veth0_vlan: entered promiscuous mode [ 75.234287][ T7917] veth1_vlan: entered promiscuous mode [ 75.247499][ T7917] veth0_macvtap: entered promiscuous mode [ 75.250932][ T7917] veth1_macvtap: entered promiscuous mode [ 75.256774][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.259779][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.262470][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.265259][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.268940][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.272105][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275467][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.283620][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.288760][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291394][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.294815][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.297623][ T7917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.301266][ T7917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.305634][ T7917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.309988][ T7917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.310643][ T7988] FAULT_INJECTION: forcing a failure. [ 75.310643][ T7988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.313231][ T7917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.317038][ T7988] CPU: 1 UID: 0 PID: 7988 Comm: syz.0.745 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 75.320705][ T7917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.323276][ T7988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.323288][ T7988] Call Trace: [ 75.326435][ T7917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.329522][ T7988] [ 75.329530][ T7988] dump_stack_lvl+0x16c/0x1f0 [ 75.329550][ T7988] should_fail_ex+0x497/0x5b0 [ 75.329564][ T7988] __kvm_read_guest_page+0x16b/0x210 [ 75.329581][ T7988] kvm_fetch_guest_virt+0x128/0x1a0 [ 75.329595][ T7988] __do_insn_fetch_bytes+0x420/0x6d0 [ 75.329609][ T7988] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 75.329620][ T7988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.329634][ T7988] ? vmx_check_intercept+0x1b8/0xaf0 [ 75.346414][ T7988] x86_decode_insn+0xb91/0x5530 [ 75.347738][ T7988] ? vmx_segment_cache_test_set+0x14b/0x400 [ 75.349331][ T7988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.351154][ T7988] ? __pfx_x86_decode_insn+0x10/0x10 [ 75.352680][ T7988] ? vmx_cache_reg+0x333/0x5e0 [ 75.354096][ T7988] ? kvm_register_read_raw+0xe9/0x240 [ 75.355600][ T7988] ? init_decode_cache+0xd/0x210 [ 75.357202][ T7988] ? init_emulate_ctxt+0x338/0x510 [ 75.358829][ T7988] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 75.360479][ T7988] ? kvm_multiple_exception+0x44a/0xb40 [ 75.362258][ T7988] ? mark_lock+0xb5/0xc60 [ 75.363525][ T7988] x86_emulate_instruction+0x975/0x1a50 [ 75.365151][ T7988] handle_ud+0x104/0x280 [ 75.366496][ T7988] ? __pfx_handle_ud+0x10/0x10 [ 75.367982][ T7988] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 75.369774][ T7988] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 75.371616][ T7988] handle_exception_nmi+0x83e/0x1410 [ 75.373155][ T7988] ? __pfx_handle_exception_nmi+0x10/0x10 [ 75.374817][ T7988] vmx_handle_exit+0x733/0x1f70 [ 75.376298][ T7988] vcpu_run+0x3047/0x4f50 [ 75.377640][ T7988] ? __pfx___mutex_trylock_common+0x10/0x10 [ 75.379434][ T7988] ? __pfx_vcpu_run+0x10/0x10 [ 75.380718][ T7988] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 75.382400][ T7988] ? rcu_is_watching+0x12/0xc0 [ 75.383789][ T7988] ? trace_lock_acquire+0x146/0x1e0 [ 75.385408][ T7988] ? __local_bh_enable_ip+0xa4/0x120 [ 75.387028][ T7988] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.388637][ T7988] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 75.390422][ T7988] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 75.392162][ T7988] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 75.393860][ T7988] kvm_vcpu_ioctl+0x6c7/0x1520 [ 75.395136][ T7988] ? do_vfs_ioctl+0x513/0x1990 [ 75.396761][ T7988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.398305][ T7988] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 75.400265][ T7988] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.402476][ T7988] ? __pfx_lock_release+0x10/0x10 [ 75.404050][ T7988] ? selinux_file_ioctl+0x180/0x270 [ 75.405970][ T7988] ? selinux_file_ioctl+0xb4/0x270 [ 75.407607][ T7988] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.409315][ T7988] __x64_sys_ioctl+0x190/0x200 [ 75.410972][ T7988] do_syscall_64+0xcd/0x250 [ 75.412392][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.414346][ T7988] RIP: 0033:0x7fb8ec57e819 [ 75.415942][ T7988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.422001][ T7988] RSP: 002b:00007fb8ed3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.424633][ T7988] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57e819 [ 75.427050][ T7988] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.429511][ T7988] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 75.431901][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.434254][ T7988] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 75.436491][ T7988] [ 75.458679][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.460840][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.475224][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.477400][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.583070][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.583981][ T7992] __nla_validate_parse: 4 callbacks suppressed [ 75.583990][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 75.651076][ T5309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.653680][ T5309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.657084][ T5309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.659468][ T5309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.661966][ T5309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.663925][ T5309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.681779][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.765673][ T7995] chnl_net:caif_netlink_parms(): no params data found [ 75.820687][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.837931][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.840224][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.842710][ T7995] bridge_slave_0: entered allmulticast mode [ 75.844905][ T7995] bridge_slave_0: entered promiscuous mode [ 75.849970][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.851917][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.853849][ T7995] bridge_slave_1: entered allmulticast mode [ 75.855828][ T7995] bridge_slave_1: entered promiscuous mode [ 75.875365][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.879713][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.918162][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.937775][ T7995] team0: Port device team_slave_0 added [ 75.941825][ T7995] team0: Port device team_slave_1 added [ 75.964836][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.966697][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.973363][ T7995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.979560][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.979830][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 75.981361][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.991437][ T7995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.061241][ T8020] hsr_slave_1 (unregistering): left promiscuous mode [ 76.097644][ T7995] hsr_slave_0: entered promiscuous mode [ 76.100470][ T7995] hsr_slave_1: entered promiscuous mode [ 76.102950][ T7995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.105083][ T7995] Cannot create hsr debugfs directory [ 76.160329][ T12] bridge_slave_1: left allmulticast mode [ 76.162237][ T12] bridge_slave_1: left promiscuous mode [ 76.164012][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.174456][ T12] bridge_slave_0: left allmulticast mode [ 76.176026][ T12] bridge_slave_0: left promiscuous mode [ 76.180476][ T1014] cfg80211: failed to load regulatory.db [ 76.180537][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.375681][ T5989] IPVS: starting estimator thread 0... [ 76.447361][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.451683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.455358][ T12] bond0 (unregistering): Released all slaves [ 76.467703][ T8030] IPVS: using max 41 ests per chain, 98400 per kthread [ 76.562035][ T7995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.571703][ T7995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.574935][ T7995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.583787][ T7995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.692439][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.700686][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.705110][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.707258][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.713344][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.715412][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.743233][ T8061] netlink: 172 bytes leftover after parsing attributes in process `syz.3.768'. [ 76.771431][ T12] hsr_slave_0: left promiscuous mode [ 76.773584][ T12] hsr_slave_1: left promiscuous mode [ 76.775814][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.778428][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.780866][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.783127][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.787854][ T1014] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 76.805330][ T12] veth1_macvtap: left promiscuous mode [ 76.806842][ T12] veth0_macvtap: left promiscuous mode [ 76.808851][ T12] veth1_vlan: left promiscuous mode [ 76.810260][ T12] veth0_vlan: left promiscuous mode [ 76.859149][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 76.859178][ T39] audit: type=1400 audit(1732429278.788:453): avc: denied { watch } for pid=8072 comm="syz.3.769" path="/217/file1" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 76.948486][ T1014] usb 5-1: Using ep0 maxpacket: 32 [ 76.951887][ T1014] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.954417][ T1014] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.957107][ T1014] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 76.962237][ T1014] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.964594][ T1014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.966752][ T1014] usb 5-1: Product: syz [ 76.970915][ T1014] usb 5-1: Manufacturer: syz [ 76.972349][ T1014] usb 5-1: SerialNumber: syz [ 77.195015][ T1014] cdc_ncm 5-1:1.0: bind() failure [ 77.198075][ T1014] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 77.199699][ T1014] cdc_ncm 5-1:1.1: bind() failure [ 77.210515][ T1014] usb 5-1: USB disconnect, device number 8 [ 77.395124][ T12] team0 (unregistering): Port device team_slave_1 removed [ 77.476276][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.627306][ T5995] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.687465][ T5957] Bluetooth: hci0: command tx timeout [ 77.787314][ T5995] usb 5-1: Using ep0 maxpacket: 32 [ 77.790222][ T5995] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.792968][ T5995] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.795566][ T5995] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 77.800292][ T5995] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.802553][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.804539][ T5995] usb 5-1: Product: 㽡ᦘᢈ [ 77.805889][ T5995] usb 5-1: Manufacturer: à ‡ [ 77.893281][ T5309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.900619][ T5309] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.905884][ T5309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.917373][ T5309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.926536][ T5309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.930628][ T5309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.017872][ T5995] cdc_ncm 5-1:1.0: bind() failure [ 78.023779][ T5995] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 78.025548][ T5995] cdc_ncm 5-1:1.1: bind() failure [ 78.036719][ T5995] usb 5-1: USB disconnect, device number 9 [ 78.074856][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.088184][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 78.135304][ T39] audit: type=1400 audit(1732429280.058:454): avc: denied { ioctl } for pid=8095 comm="syz.3.772" path="socket:[23625]" dev="sockfs" ino=23625 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.165370][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.167315][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.168441][ T8096] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 78.169838][ T8078] bridge_slave_0: entered allmulticast mode [ 78.173083][ T8078] bridge_slave_0: entered promiscuous mode [ 78.194375][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.199408][ T8096] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.201655][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.205113][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.206876][ T8078] bridge_slave_1: entered allmulticast mode [ 78.210662][ T8078] bridge_slave_1: entered promiscuous mode [ 78.246777][ T7995] veth0_vlan: entered promiscuous mode [ 78.252582][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.261039][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.264819][ T7995] veth1_vlan: entered promiscuous mode [ 78.290319][ T8078] team0: Port device team_slave_0 added [ 78.293143][ T8078] team0: Port device team_slave_1 added [ 78.316789][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.319259][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.327442][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.332379][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.334633][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.343483][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.399186][ T7995] veth0_macvtap: entered promiscuous mode [ 78.422520][ T8078] hsr_slave_0: entered promiscuous mode [ 78.424325][ T8078] hsr_slave_1: entered promiscuous mode [ 78.428232][ T7995] veth1_macvtap: entered promiscuous mode [ 78.493404][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.496138][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.499013][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.501786][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.504613][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.508058][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.511324][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.524430][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.528240][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.530865][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.537654][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.541019][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.544347][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.548753][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.575390][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 78.592982][ T8078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.602103][ T7995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.604344][ T7995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.607132][ T7995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.609955][ T7995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.668272][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.671102][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.683892][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.686199][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.686676][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 78.902759][ T8149] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 78.905478][ T8149] netlink: 'syz.0.781': attribute type 4 has an invalid length. [ 78.909784][ T8149] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.781'. [ 78.952707][ T8154] 9pnet_fd: p9_fd_create_tcp (8154): problem connecting socket to 127.0.0.1 [ 78.995392][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 78.997321][ T39] audit: type=1400 audit(1732429280.918:455): avc: denied { read write } for pid=8162 comm="syz.3.785" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.012725][ T39] audit: type=1400 audit(1732429280.918:456): avc: denied { open } for pid=8162 comm="syz.3.785" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.021323][ T39] audit: type=1400 audit(1732429280.928:457): avc: denied { map } for pid=8162 comm="syz.3.785" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.082761][ T8173] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 79.084984][ T8173] netlink: 'syz.0.788': attribute type 4 has an invalid length. [ 79.087923][ T8173] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.788'. [ 79.090490][ T8173] FAULT_INJECTION: forcing a failure. [ 79.090490][ T8173] name failslab, interval 1, probability 0, space 0, times 0 [ 79.094551][ T8173] CPU: 2 UID: 0 PID: 8173 Comm: syz.0.788 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 79.098670][ T8173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.098716][ T39] audit: type=1400 audit(1732429281.028:458): avc: denied { read write } for pid=8162 comm="syz.3.785" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.101739][ T8173] Call Trace: [ 79.101747][ T8173] [ 79.104826][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104857][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104869][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104881][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104892][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104903][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104914][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104925][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104937][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104948][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104959][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104970][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104981][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.104992][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105003][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105015][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105026][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105037][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105048][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105059][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105070][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105081][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105092][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105103][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105114][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105126][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105137][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105148][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105159][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105170][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105181][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.105192][ T72] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 79.110663][ T39] audit: type=1400 audit(1732429281.028:459): avc: denied { open } for pid=8162 comm="syz.3.785" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.110803][ T8173] dump_stack_lvl+0x16c/0x1f0 [ 79.119091][ T72] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 79.120779][ T8173] should_fail_ex+0x497/0x5b0 [ 79.120805][ T8173] should_failslab+0xc2/0x120 [ 79.120819][ T8173] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 79.186501][ T8173] ? skb_clone+0x190/0x3f0 [ 79.187678][ T8173] skb_clone+0x190/0x3f0 [ 79.188800][ T8173] netlink_deliver_tap+0xabd/0xd30 [ 79.190141][ T8173] netlink_unicast+0x6b4/0x7f0 [ 79.191402][ T8173] ? __pfx_netlink_unicast+0x10/0x10 [ 79.192773][ T8173] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 79.194123][ T8173] netlink_ack+0x6a8/0xb90 [ 79.195295][ T8173] netlink_rcv_skb+0x348/0x440 [ 79.196545][ T8173] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.197968][ T8173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.199376][ T8173] ? netlink_deliver_tap+0x1ae/0xd30 [ 79.200853][ T8173] netlink_unicast+0x53c/0x7f0 [ 79.202117][ T8173] ? __pfx_netlink_unicast+0x10/0x10 [ 79.203508][ T8173] ? const_folio_flags.constprop.0+0x56/0x150 [ 79.205128][ T8173] netlink_sendmsg+0x8b8/0xd70 [ 79.206398][ T8173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.207830][ T8173] sock_write_iter+0x4fe/0x5b0 [ 79.209173][ T8173] ? __pfx_sock_write_iter+0x10/0x10 [ 79.210583][ T8173] ? bpf_lsm_file_permission+0x9/0x10 [ 79.212070][ T8173] ? security_file_permission+0x71/0x210 [ 79.213604][ T8173] vfs_write+0x5ae/0x1150 [ 79.214795][ T8173] ? __pfx_sock_write_iter+0x10/0x10 [ 79.216231][ T8173] ? __pfx_vfs_write+0x10/0x10 [ 79.217508][ T8173] ? __fget_files+0x40/0x3a0 [ 79.218728][ T8173] ksys_write+0x207/0x250 [ 79.219879][ T8173] ? __pfx_ksys_write+0x10/0x10 [ 79.221167][ T8173] do_syscall_64+0xcd/0x250 [ 79.222339][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.223865][ T8173] RIP: 0033:0x7fb8ec57e819 [ 79.224993][ T8173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.229888][ T8173] RSP: 002b:00007fb8ed3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.232046][ T8173] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57e819 [ 79.234096][ T8173] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 79.236196][ T8173] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 79.238384][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.240522][ T8173] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 79.242587][ T8173] [ 79.414507][ T39] audit: type=1400 audit(1732429281.338:460): avc: denied { sys_chroot } for pid=8195 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 79.423869][ T39] audit: type=1400 audit(1732429281.338:461): avc: denied { setgid } for pid=8195 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 79.432587][ T39] audit: type=1400 audit(1732429281.338:462): avc: denied { setrlimit } for pid=8195 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 79.528579][ T8205] netlink: 80 bytes leftover after parsing attributes in process `syz.0.794'. [ 79.606402][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.796'. [ 79.705937][ T8216] FAULT_INJECTION: forcing a failure. [ 79.705937][ T8216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.710805][ T8216] CPU: 2 UID: 0 PID: 8216 Comm: syz.3.798 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 79.713775][ T8216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.716880][ T8216] Call Trace: [ 79.717872][ T8216] [ 79.718747][ T8216] dump_stack_lvl+0x16c/0x1f0 [ 79.720147][ T8216] should_fail_ex+0x497/0x5b0 [ 79.721545][ T8216] __kvm_read_guest_page+0x16b/0x210 [ 79.723107][ T8216] kvm_fetch_guest_virt+0x128/0x1a0 [ 79.724625][ T8216] __do_insn_fetch_bytes+0x420/0x6d0 [ 79.726177][ T8216] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 79.727876][ T8216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.729631][ T8216] ? vmx_check_intercept+0x1b8/0xaf0 [ 79.731181][ T8216] x86_decode_insn+0xb91/0x5530 [ 79.732619][ T8216] ? vmx_segment_cache_test_set+0x14b/0x400 [ 79.734356][ T8216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.736084][ T8216] ? __pfx_x86_decode_insn+0x10/0x10 [ 79.737645][ T8216] ? vmx_cache_reg+0x333/0x5e0 [ 79.738949][ T8216] ? kvm_register_read_raw+0xe9/0x240 [ 79.740535][ T8216] ? init_decode_cache+0xd/0x210 [ 79.742003][ T8216] ? init_emulate_ctxt+0x338/0x510 [ 79.743519][ T8216] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 79.745179][ T8216] ? kvm_multiple_exception+0x44a/0xb40 [ 79.746861][ T8216] ? mark_lock+0xb5/0xc60 [ 79.748201][ T8216] x86_emulate_instruction+0x975/0x1a50 [ 79.749902][ T8216] handle_ud+0x104/0x280 [ 79.751160][ T8216] ? __pfx_handle_ud+0x10/0x10 [ 79.752583][ T8216] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 79.754328][ T8216] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 79.756047][ T8216] handle_exception_nmi+0x83e/0x1410 [ 79.757565][ T8216] ? __pfx_handle_exception_nmi+0x10/0x10 [ 79.759247][ T8216] vmx_handle_exit+0x733/0x1f70 [ 79.760682][ T8216] vcpu_run+0x3047/0x4f50 [ 79.761961][ T8216] ? __pfx___mutex_trylock_common+0x10/0x10 [ 79.763773][ T8216] ? __pfx_vcpu_run+0x10/0x10 [ 79.765238][ T8216] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 79.766905][ T8216] ? rcu_is_watching+0x12/0xc0 [ 79.767515][ T5309] Bluetooth: hci0: command tx timeout [ 79.768302][ T8216] ? trace_lock_acquire+0x146/0x1e0 [ 79.771272][ T8216] ? __local_bh_enable_ip+0xa4/0x120 [ 79.772828][ T8216] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.774351][ T8216] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 79.776024][ T8216] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 79.777717][ T8216] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 79.779407][ T8216] kvm_vcpu_ioctl+0x6c7/0x1520 [ 79.780890][ T8216] ? do_vfs_ioctl+0x513/0x1990 [ 79.782329][ T8216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.783853][ T8216] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 79.785862][ T8216] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.787936][ T8216] ? __pfx_lock_release+0x10/0x10 [ 79.789543][ T8216] ? selinux_file_ioctl+0x180/0x270 [ 79.791211][ T8216] ? selinux_file_ioctl+0xb4/0x270 [ 79.792875][ T8216] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.794481][ T8216] __x64_sys_ioctl+0x190/0x200 [ 79.795881][ T8216] do_syscall_64+0xcd/0x250 [ 79.797216][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.798938][ T8216] RIP: 0033:0x7febee17e819 [ 79.800252][ T8216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.805947][ T8216] RSP: 002b:00007febeeea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.808314][ T8216] RAX: ffffffffffffffda RBX: 00007febee335fa0 RCX: 00007febee17e819 [ 79.810878][ T8216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.813171][ T8216] RBP: 00007febeeea1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.815457][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.817727][ T8216] R13: 0000000000000000 R14: 00007febee335fa0 R15: 00007ffce25f5778 [ 79.820026][ T8216] [ 79.839617][ T8078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.841978][ T8226] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 79.844369][ T8226] netlink: 'syz.0.800': attribute type 4 has an invalid length. [ 79.846553][ T8226] FAULT_INJECTION: forcing a failure. [ 79.846553][ T8226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.851577][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.0.800 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 79.854295][ T8226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.857220][ T8226] Call Trace: [ 79.858091][ T8226] [ 79.858875][ T8226] dump_stack_lvl+0x16c/0x1f0 [ 79.860135][ T8226] should_fail_ex+0x497/0x5b0 [ 79.861388][ T8226] _copy_to_user+0x32/0xd0 [ 79.862570][ T8226] simple_read_from_buffer+0xd0/0x160 [ 79.863990][ T8226] proc_fail_nth_read+0x198/0x270 [ 79.865325][ T8226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.866777][ T8226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.868222][ T8226] vfs_read+0x1df/0xbe0 [ 79.869411][ T8226] ? __fget_files+0x1fc/0x3a0 [ 79.870660][ T8226] ? __pfx___mutex_lock+0x10/0x10 [ 79.871990][ T8226] ? __pfx_vfs_read+0x10/0x10 [ 79.873193][ T8226] ? __fget_files+0x206/0x3a0 [ 79.874440][ T8226] ksys_read+0x12b/0x250 [ 79.875563][ T8226] ? __pfx_ksys_read+0x10/0x10 [ 79.876834][ T8226] do_syscall_64+0xcd/0x250 [ 79.878046][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.879606][ T8226] RIP: 0033:0x7fb8ec57d25c [ 79.880782][ T8226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 79.885771][ T8226] RSP: 002b:00007fb8ed3fa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.887915][ T8226] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57d25c [ 79.889958][ T8226] RDX: 000000000000000f RSI: 00007fb8ed3fa0a0 RDI: 0000000000000004 [ 79.892001][ T8226] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 79.894099][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.896156][ T8226] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 79.898225][ T8226] [ 79.975895][ T8235] binder: 8234:8235 ioctl c0306201 20000140 returned -14 [ 80.007394][ T5309] Bluetooth: hci3: command tx timeout [ 80.010090][ T8078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.034443][ T8237] syzkaller0: entered promiscuous mode [ 80.036040][ T8237] syzkaller0: entered allmulticast mode [ 80.039662][ T1133] syzkaller0: tun_net_xmit 48 [ 80.108708][ T8244] syzkaller0: create flow: hash 1774560908 index 1 [ 80.140496][ T8078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.280252][ T12] bridge_slave_1: left allmulticast mode [ 80.281801][ T12] bridge_slave_1: left promiscuous mode [ 80.283394][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.288653][ T12] bridge_slave_0: left allmulticast mode [ 80.290282][ T12] bridge_slave_0: left promiscuous mode [ 80.291867][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.432193][ T8262] FAULT_INJECTION: forcing a failure. [ 80.432193][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.436102][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.0.814 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 80.439268][ T8262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.442332][ T8262] Call Trace: [ 80.443412][ T8262] [ 80.444279][ T8262] dump_stack_lvl+0x16c/0x1f0 [ 80.445729][ T8262] should_fail_ex+0x497/0x5b0 [ 80.447151][ T8262] __kvm_read_guest_page+0x16b/0x210 [ 80.448843][ T8262] kvm_fetch_guest_virt+0x128/0x1a0 [ 80.450390][ T8262] __do_insn_fetch_bytes+0x420/0x6d0 [ 80.452040][ T8262] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 80.453798][ T8262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.455642][ T8262] ? vmx_check_intercept+0x1b8/0xaf0 [ 80.457368][ T8262] x86_decode_insn+0xb91/0x5530 [ 80.458787][ T8262] ? vmx_segment_cache_test_set+0x14b/0x400 [ 80.460576][ T8262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.462308][ T8262] ? __pfx_x86_decode_insn+0x10/0x10 [ 80.463919][ T8262] ? vmx_cache_reg+0x333/0x5e0 [ 80.465344][ T8262] ? kvm_register_read_raw+0xe9/0x240 [ 80.466920][ T8262] ? init_decode_cache+0xd/0x210 [ 80.468380][ T8262] ? init_emulate_ctxt+0x338/0x510 [ 80.470020][ T8262] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 80.471619][ T8262] ? kvm_multiple_exception+0x44a/0xb40 [ 80.473286][ T8262] ? mark_lock+0xb5/0xc60 [ 80.474572][ T8262] x86_emulate_instruction+0x975/0x1a50 [ 80.476183][ T8262] handle_ud+0x104/0x280 [ 80.477485][ T8262] ? __pfx_handle_ud+0x10/0x10 [ 80.478973][ T8262] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 80.480837][ T8262] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 80.482744][ T8262] handle_exception_nmi+0x83e/0x1410 [ 80.484291][ T8262] ? __pfx_handle_exception_nmi+0x10/0x10 [ 80.485952][ T8262] vmx_handle_exit+0x733/0x1f70 [ 80.487435][ T8262] vcpu_run+0x3047/0x4f50 [ 80.488707][ T8262] ? __pfx___mutex_trylock_common+0x10/0x10 [ 80.490436][ T8262] ? __pfx_vcpu_run+0x10/0x10 [ 80.491816][ T8262] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 80.493570][ T8262] ? rcu_is_watching+0x12/0xc0 [ 80.495031][ T8262] ? trace_lock_acquire+0x146/0x1e0 [ 80.496551][ T8262] ? __local_bh_enable_ip+0xa4/0x120 [ 80.498205][ T8262] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.499795][ T8262] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 80.501667][ T8262] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 80.503521][ T8262] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 80.505233][ T8262] kvm_vcpu_ioctl+0x6c7/0x1520 [ 80.506778][ T8262] ? do_vfs_ioctl+0x513/0x1990 [ 80.508168][ T8262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.509792][ T8262] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 80.511665][ T8262] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.513736][ T8262] ? __pfx_lock_release+0x10/0x10 [ 80.515206][ T8262] ? selinux_file_ioctl+0x180/0x270 [ 80.516825][ T8262] ? selinux_file_ioctl+0xb4/0x270 [ 80.518527][ T8262] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 80.520074][ T8262] __x64_sys_ioctl+0x190/0x200 [ 80.521568][ T8262] do_syscall_64+0xcd/0x250 [ 80.522942][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.524828][ T8262] RIP: 0033:0x7fb8ec57e819 [ 80.526365][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.531958][ T8262] RSP: 002b:00007fb8ed3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.534444][ T8262] RAX: ffffffffffffffda RBX: 00007fb8ec735fa0 RCX: 00007fb8ec57e819 [ 80.536895][ T8262] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.539211][ T8262] RBP: 00007fb8ed3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 80.541654][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.544007][ T8262] R13: 0000000000000000 R14: 00007fb8ec735fa0 R15: 00007ffd57b59008 [ 80.546503][ T8262] [ 80.642043][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.645890][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.649412][ T12] bond0 (unregistering): Released all slaves [ 80.666247][ T8078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.685666][ T8078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.692613][ T8078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.696383][ T8078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.756714][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.789410][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.800433][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.802503][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.805291][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.807265][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.850853][ T8275] xt_hashlimit: size too large, truncated to 1048576 [ 80.856524][ T8273] __nla_validate_parse: 2 callbacks suppressed [ 80.856534][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 80.864992][ T8236] syzkaller0: delete flow: hash 1774560908 index 1 [ 80.988783][ T8283] cgroup: subsys name conflicts with all [ 81.285447][ T8301] FAULT_INJECTION: forcing a failure. [ 81.285447][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.289846][ T8301] CPU: 2 UID: 0 PID: 8301 Comm: syz.4.823 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 81.293434][ T8301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.296931][ T8301] Call Trace: [ 81.297906][ T8301] [ 81.298781][ T8301] dump_stack_lvl+0x16c/0x1f0 [ 81.300197][ T8301] should_fail_ex+0x497/0x5b0 [ 81.301737][ T8301] __kvm_read_guest_page+0x16b/0x210 [ 81.303509][ T8301] kvm_fetch_guest_virt+0x128/0x1a0 [ 81.305141][ T8301] __do_insn_fetch_bytes+0x420/0x6d0 [ 81.306742][ T8301] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 81.308468][ T8301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.310190][ T8301] ? vmx_check_intercept+0x1b8/0xaf0 [ 81.311829][ T8301] x86_decode_insn+0xb91/0x5530 [ 81.313837][ T8301] ? vmx_segment_cache_test_set+0x14b/0x400 [ 81.315842][ T8301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.317565][ T8301] ? __pfx_x86_decode_insn+0x10/0x10 [ 81.319084][ T8301] ? vmx_cache_reg+0x333/0x5e0 [ 81.320478][ T8301] ? kvm_register_read_raw+0xe9/0x240 [ 81.322087][ T8301] ? init_decode_cache+0xd/0x210 [ 81.323537][ T8301] ? init_emulate_ctxt+0x338/0x510 [ 81.325139][ T8301] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 81.326729][ T8301] ? kvm_multiple_exception+0x44a/0xb40 [ 81.328341][ T8301] ? mark_lock+0xb5/0xc60 [ 81.329615][ T8301] x86_emulate_instruction+0x975/0x1a50 [ 81.331223][ T8301] handle_ud+0x104/0x280 [ 81.332761][ T8301] ? __pfx_handle_ud+0x10/0x10 [ 81.334166][ T8301] ? nested_vmx_reflect_vmexit+0x74e/0x3fb0 [ 81.335889][ T8301] ? __pfx_nested_vmx_reflect_vmexit+0x10/0x10 [ 81.337682][ T8301] handle_exception_nmi+0x83e/0x1410 [ 81.339215][ T8301] ? __pfx_handle_exception_nmi+0x10/0x10 [ 81.340870][ T8301] vmx_handle_exit+0x733/0x1f70 [ 81.342561][ T8301] vcpu_run+0x3047/0x4f50 [ 81.344275][ T8301] ? __pfx___mutex_trylock_common+0x10/0x10 [ 81.346074][ T8301] ? __pfx_vcpu_run+0x10/0x10 [ 81.348019][ T8301] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 81.350438][ T8301] ? rcu_is_watching+0x12/0xc0 [ 81.352439][ T8301] ? trace_lock_acquire+0x146/0x1e0 [ 81.354497][ T8301] ? __local_bh_enable_ip+0xa4/0x120 [ 81.356526][ T8301] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.358236][ T8301] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 81.359929][ T8301] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 81.361619][ T8301] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 81.363789][ T8301] kvm_vcpu_ioctl+0x6c7/0x1520 [ 81.365740][ T8301] ? do_vfs_ioctl+0x513/0x1990 [ 81.367693][ T8301] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 81.369724][ T8301] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 81.372160][ T8301] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.374904][ T8301] ? __pfx_lock_release+0x10/0x10 [ 81.377090][ T8301] ? selinux_file_ioctl+0x180/0x270 [ 81.379180][ T8301] ? selinux_file_ioctl+0xb4/0x270 [ 81.381326][ T8301] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 81.383471][ T8301] __x64_sys_ioctl+0x190/0x200 [ 81.385366][ T8301] do_syscall_64+0xcd/0x250 [ 81.387187][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.389602][ T8301] RIP: 0033:0x7f83a877e819 [ 81.391419][ T8301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.399108][ T8301] RSP: 002b:00007f83a955c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.402505][ T8301] RAX: ffffffffffffffda RBX: 00007f83a8936080 RCX: 00007f83a877e819 [ 81.405717][ T8301] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 81.409096][ T8301] RBP: 00007f83a955c090 R08: 0000000000000000 R09: 0000000000000000 [ 81.412200][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.414473][ T8301] R13: 0000000000000000 R14: 00007f83a8936080 R15: 00007ffe6ece80a8 [ 81.416782][ T8301] [ 81.520906][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 82.076292][ T8306] batman_adv: batadv0: Adding interface: dummy0 [ 82.078898][ T8306] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.087767][ T8306] batman_adv: batadv0: Interface activated: dummy0 [ 82.089349][ T5309] Bluetooth: hci3: command tx timeout [ 82.092134][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.170086][ T12] hsr_slave_0: left promiscuous mode [ 82.172302][ T12] hsr_slave_1: left promiscuous mode [ 82.174597][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.177606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.180811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.183482][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.205659][ T12] veth1_macvtap: left promiscuous mode [ 82.207248][ T12] veth0_macvtap: left promiscuous mode [ 82.208728][ T12] veth1_vlan: left promiscuous mode [ 82.210416][ T12] veth0_vlan: left promiscuous mode [ 82.275597][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 82.275607][ T39] audit: type=1400 audit(1732429284.198:472): avc: denied { getopt } for pid=8318 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.518441][ T39] audit: type=1400 audit(1732429284.448:473): avc: denied { nlmsg_write } for pid=8333 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.817781][ T5989] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 82.861616][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.925089][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.977381][ T5989] usb 9-1: Using ep0 maxpacket: 8 [ 82.981585][ T5989] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.985321][ T5989] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.988704][ T5989] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.992038][ T5989] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.995585][ T5989] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.999452][ T5989] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 83.004356][ T5989] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.006781][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.008926][ T5989] usb 9-1: Product: syz [ 83.010021][ T5989] usb 9-1: Manufacturer: syz [ 83.011291][ T5989] usb 9-1: SerialNumber: syz [ 83.329848][ T39] audit: type=1400 audit(1732429285.248:474): avc: denied { mount } for pid=8328 comm="syz.4.831" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.335841][ T39] audit: type=1400 audit(1732429285.258:475): avc: denied { remount } for pid=8328 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.389532][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 83.407532][ T5989] cdc_ncm 9-1:1.0: bind() failure [ 83.410558][ T5989] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 83.410741][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.412253][ T5989] cdc_ncm 9-1:1.1: bind() failure [ 83.417167][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 83.425556][ T8078] veth0_vlan: entered promiscuous mode [ 83.426378][ T5989] usb 9-1: USB disconnect, device number 2 [ 83.434859][ T8078] veth1_vlan: entered promiscuous mode [ 83.440636][ T8342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.836'. [ 83.453734][ T8078] veth0_macvtap: entered promiscuous mode [ 83.456718][ T8078] veth1_macvtap: entered promiscuous mode [ 83.474970][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.478859][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.481456][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.484169][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.486678][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.489789][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.492904][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.496966][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.500059][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.502522][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.505449][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.509105][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.511804][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.514924][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.520105][ T8078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.522540][ T8078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.524802][ T8078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.527066][ T8078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.564088][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.566218][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.583137][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.585242][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.904633][ T39] audit: type=1400 audit(1732429285.828:476): avc: denied { unmount } for pid=7995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.945722][ T8358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=8358 comm=syz.3.840 [ 83.955278][ T8355] GUP no longer grows the stack in syz.0.839 (8355): 20004000-20008000 (20002000) [ 83.959347][ T8355] CPU: 1 UID: 0 PID: 8355 Comm: syz.0.839 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 83.962053][ T8355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.964848][ T8355] Call Trace: [ 83.965732][ T8355] [ 83.966527][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 83.967787][ T8355] gup_vma_lookup+0x1d2/0x220 [ 83.969007][ T8355] __get_user_pages+0x236/0x3b50 [ 83.970312][ T8355] ? find_held_lock+0x2d/0x110 [ 83.971572][ T8355] ? mtree_load+0x30a/0xa40 [ 83.972780][ T8355] ? __pfx_lock_release+0x10/0x10 [ 83.974117][ T8355] ? __pfx___get_user_pages+0x10/0x10 [ 83.975527][ T8355] get_user_pages_remote+0x25e/0xb30 [ 83.976929][ T8355] ? __pfx_get_user_pages_remote+0x10/0x10 [ 83.978478][ T8355] __access_remote_vm+0x235/0x7b0 [ 83.979880][ T8355] ? __pfx___access_remote_vm+0x10/0x10 [ 83.981382][ T8355] ? _copy_to_user+0xbb/0xd0 [ 83.982623][ T8355] proc_pid_cmdline_read+0x4f5/0x900 [ 83.984023][ T8355] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 83.985574][ T8355] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 83.985837][ T8363] netlink: 'syz.3.841': attribute type 178 has an invalid length. [ 83.987109][ T8355] vfs_readv+0x6bf/0x890 [ 83.990325][ T8355] ? __pfx___lock_acquire+0x10/0x10 [ 83.991045][ T39] audit: type=1400 audit(1732429285.918:477): avc: denied { listen } for pid=8362 comm="syz.3.841" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.991691][ T8355] ? __pfx_vfs_readv+0x10/0x10 [ 83.998455][ T8355] ? __fget_files+0x1fc/0x3a0 [ 83.999711][ T8355] ? __pfx_lock_release+0x10/0x10 [ 84.001058][ T8355] ? __fget_files+0x206/0x3a0 [ 84.002371][ T8355] ? do_preadv+0x1b1/0x270 [ 84.003614][ T8355] do_preadv+0x1b1/0x270 [ 84.004768][ T8355] ? __pfx_do_preadv+0x10/0x10 [ 84.006050][ T8355] do_syscall_64+0xcd/0x250 [ 84.007255][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.008836][ T8355] RIP: 0033:0x7fb8ec57e819 [ 84.010012][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.015017][ T8355] RSP: 002b:00007fb8ed3d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 84.017195][ T8355] RAX: ffffffffffffffda RBX: 00007fb8ec736080 RCX: 00007fb8ec57e819 [ 84.018744][ T39] audit: type=1400 audit(1732429285.948:478): avc: denied { accept } for pid=8362 comm="syz.3.841" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.019244][ T8355] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 84.026951][ T8355] RBP: 00007fb8ec5f175e R08: 0000000000000000 R09: 0000000000000000 [ 84.029063][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.031164][ T8355] R13: 0000000000000000 R14: 00007fb8ec736080 R15: 00007ffd57b59008 [ 84.033248][ T8355] [ 84.034120][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.083151][ T39] audit: type=1400 audit(1732429286.008:479): avc: denied { listen } for pid=8369 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.153886][ T8374] process 'syz.3.841' launched '/dev/fd/13' with NULL argv: empty string added [ 84.157750][ T39] audit: type=1400 audit(1732429286.078:480): avc: denied { execute_no_trans } for pid=8362 comm="syz.3.841" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.262872][ T39] audit: type=1400 audit(1732429286.188:481): avc: denied { append } for pid=8376 comm="syz.0.853" name="file0" dev="9p" ino=35922878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.414972][ T8391] capability: warning: `syz.4.850' uses deprecated v2 capabilities in a way that may be insecure [ 84.421713][ T8391] ================================================================== [ 84.423791][ T8391] BUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.425646][ T8391] Read of size 4 at addr ffffc90003d4b038 by task syz.4.850/8391 [ 84.428569][ T8391] [ 84.429946][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.850 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 84.432808][ T8391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.435266][ T8391] Call Trace: [ 84.436083][ T8391] [ 84.436830][ T8391] dump_stack_lvl+0x116/0x1f0 [ 84.438029][ T8391] print_report+0xc3/0x620 [ 84.439159][ T8391] ? __virt_addr_valid+0x5e/0x590 [ 84.440448][ T8391] kasan_report+0xd9/0x110 [ 84.441539][ T8391] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.442707][ T8391] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.443845][ T8391] acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.444955][ T8391] ? trace_contention_end+0xea/0x140 [ 84.446152][ T8391] ? __mutex_lock+0x1cc/0xa60 [ 84.447256][ T8391] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 84.448411][ T8391] ? nd_ioctl+0xf7a/0x18c0 [ 84.449447][ T8391] ? __pfx___mutex_lock+0x10/0x10 [ 84.450594][ T8391] ? __pfx___mutex_lock+0x10/0x10 [ 84.451768][ T8391] ? __might_fault+0xe3/0x190 [ 84.452877][ T8391] nd_ioctl+0x13bc/0x18c0 [ 84.453854][ T8391] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 84.455207][ T8391] ? __pfx_nd_ioctl+0x10/0x10 [ 84.456282][ T8391] ? __pfx_lock_release+0x10/0x10 [ 84.457441][ T8391] ? selinux_file_ioctl+0x180/0x270 [ 84.458632][ T8391] ? selinux_file_ioctl+0xb4/0x270 [ 84.459798][ T8391] ? __pfx_bus_ioctl+0x10/0x10 [ 84.460923][ T8391] __x64_sys_ioctl+0x190/0x200 [ 84.462025][ T8391] do_syscall_64+0xcd/0x250 [ 84.463087][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.464457][ T8391] RIP: 0033:0x7f83a877e819 [ 84.465484][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.469874][ T8391] RSP: 002b:00007f83a957d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.471787][ T8391] RAX: ffffffffffffffda RBX: 00007f83a8935fa0 RCX: 00007f83a877e819 [ 84.473628][ T8391] RDX: 0000000020000140 RSI: 00000000c008640a RDI: 0000000000000003 [ 84.475456][ T8391] RBP: 00007f83a87f175e R08: 0000000000000000 R09: 0000000000000000 [ 84.477339][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.477772][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 84.479110][ T8391] R13: 0000000000000000 R14: 00007f83a8935fa0 R15: 00007ffe6ece80a8 [ 84.479126][ T8391] [ 84.481916][ T8392] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 84.483675][ T8391] [ 84.484500][ T8392] netlink: 'syz.4.850': attribute type 2 has an invalid length. [ 84.486205][ T8391] The buggy address belongs to the virtual mapping at [ 84.486205][ T8391] [ffffc90003d4b000, ffffc90003d4d000) created by: [ 84.486205][ T8391] nd_ioctl+0xf14/0x18c0 [ 84.486937][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 84.488588][ T8391] [ 84.488593][ T8391] The buggy address belongs to the physical page: [ 84.488597][ T8391] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2095f pfn:0x4f265 [ 84.488607][ T8391] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.488621][ T8391] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 84.488631][ T8391] raw: 000000000002095f 0000000000000000 00000001ffffffff 0000000000000000 [ 84.488637][ T8391] page dumped because: kasan: bad access detected [ 84.488643][ T8391] page_owner tracks the page as allocated [ 84.488647][ T8391] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 8391, tgid 8390 (syz.4.850), ts 84421635312, free_ts 84048031169 [ 84.488665][ T8391] post_alloc_hook+0x2d1/0x350 [ 84.488678][ T8391] get_page_from_freelist+0xfce/0x2f80 [ 84.488689][ T8391] __alloc_pages_noprof+0x223/0x25a0 [ 84.488701][ T8391] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 84.488712][ T8391] alloc_pages_bulk_array_mempolicy_noprof+0x250/0x11f0 [ 84.488747][ T8391] __vmalloc_node_range_noprof+0x517/0x1530 [ 84.521598][ T8391] vmalloc_noprof+0x6b/0x90 [ 84.522630][ T8391] nd_ioctl+0xf14/0x18c0 [ 84.523636][ T8391] __x64_sys_ioctl+0x190/0x200 [ 84.524805][ T8391] do_syscall_64+0xcd/0x250 [ 84.525931][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.527392][ T8391] page last free pid 34 tgid 34 stack trace: [ 84.528822][ T8391] free_unref_page+0x661/0x1080 [ 84.530037][ T8391] __folio_put+0x32a/0x450 [ 84.531098][ T8391] free_page_and_swap_cache+0x249/0x2c0 [ 84.532398][ T8391] tlb_remove_table_rcu+0x89/0xe0 [ 84.533601][ T8391] rcu_core+0x79d/0x14d0 [ 84.534605][ T8391] handle_softirqs+0x213/0x8f0 [ 84.535736][ T8391] run_ksoftirqd+0x3a/0x60 [ 84.536807][ T8391] smpboot_thread_fn+0x661/0xa30 [ 84.537970][ T8391] kthread+0x2c1/0x3a0 [ 84.538936][ T8391] ret_from_fork+0x45/0x80 [ 84.540004][ T8391] ret_from_fork_asm+0x1a/0x30 [ 84.541146][ T8391] [ 84.541719][ T8391] Memory state around the buggy address: [ 84.543046][ T8391] ffffc90003d4af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.544944][ T8391] ffffc90003d4af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.546823][ T8391] >ffffc90003d4b000: 00 00 00 00 00 00 00 03 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.548705][ T8391] ^ [ 84.550100][ T8391] ffffc90003d4b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.551954][ T8391] ffffc90003d4b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 84.553716][ T8391] ================================================================== [ 84.555550][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.558331][ T8391] Kernel panic - not syncing: KASAN: panic_on_warn set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.560077][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.4.850 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 84.562613][ T8391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.565170][ T8391] Call Trace: [ 84.565997][ T8391] [ 84.566732][ T8391] dump_stack_lvl+0x3d/0x1f0 [ 84.567888][ T8391] panic+0x71d/0x800 [ 84.568893][ T8391] ? __pfx_panic+0x10/0x10 [ 84.570040][ T8391] ? preempt_schedule_thunk+0x1a/0x30 [ 84.571376][ T8391] ? preempt_schedule_common+0x44/0xc0 [ 84.572681][ T8391] check_panic_on_warn+0xab/0xb0 [ 84.573911][ T8391] end_report+0x117/0x180 [ 84.574951][ T8391] kasan_report+0xe9/0x110 [ 84.576025][ T8391] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.577236][ T8391] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.578415][ T8391] acpi_nfit_ctl+0x19e8/0x1cf0 [ 84.579608][ T8391] ? trace_contention_end+0xea/0x140 [ 84.580896][ T8391] ? __mutex_lock+0x1cc/0xa60 [ 84.582027][ T8391] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 84.583257][ T8391] ? nd_ioctl+0xf7a/0x18c0 [ 84.584538][ T8391] ? __pfx___mutex_lock+0x10/0x10 [ 84.585804][ T8391] ? __pfx___mutex_lock+0x10/0x10 [ 84.587054][ T8391] ? __might_fault+0xe3/0x190 [ 84.588254][ T8391] nd_ioctl+0x13bc/0x18c0 [ 84.589349][ T8391] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 84.590784][ T8391] ? __pfx_nd_ioctl+0x10/0x10 [ 84.591917][ T8391] ? __pfx_lock_release+0x10/0x10 [ 84.593208][ T8391] ? selinux_file_ioctl+0x180/0x270 [ 84.594537][ T8391] ? selinux_file_ioctl+0xb4/0x270 [ 84.595799][ T8391] ? __pfx_bus_ioctl+0x10/0x10 [ 84.596941][ T8391] __x64_sys_ioctl+0x190/0x200 [ 84.598054][ T8391] do_syscall_64+0xcd/0x250 [ 84.599118][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.600469][ T8391] RIP: 0033:0x7f83a877e819 [ 84.601519][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.605935][ T8391] RSP: 002b:00007f83a957d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.607860][ T8391] RAX: ffffffffffffffda RBX: 00007f83a8935fa0 RCX: 00007f83a877e819 [ 84.609783][ T8391] RDX: 0000000020000140 RSI: 00000000c008640a RDI: 0000000000000003 [ 84.611629][ T8391] RBP: 00007f83a87f175e R08: 0000000000000000 R09: 0000000000000000 [ 84.613538][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.615531][ T8391] R13: 0000000000000000 R14: 00007f83a8935fa0 R15: 00007ffe6ece80a8 [ 84.617567][ T8391] [ 84.618861][ T8391] Kernel Offset: disabled [ 84.619910][ T8391] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:21:26 Registers: info registers vcpu 0 CPU#0 RAX=1ffff1100b1ec176 RBX=ffff888058f60b98 RCX=0000000000000206 RDX=1ffffffff35537e7 RSI=0000000000000004 RDI=ffff888058f60bb0 RBP=ffffc900067bfb88 RSP=ffffc900067bfaa0 R8 =ffff888022f9ba00 R9 =fffff52000cf7f42 R10=0000000000000003 R11=0000000000000002 R12=0000000000000006 R13=dffffc0000000000 R14=0000000000000001 R15=1ffff92000cf7f58 RIP=ffffffff849050dd RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c303bf2 CR3=0000000051694000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ece8440 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85067aa5 RDI=ffffffff9ab05bc0 RBP=ffffffff9ab05b80 RSP=ffffc9000175f598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000039333854 R12=0000000000000000 R13=0000000000000034 R14=ffffffff85067a40 R15=0000000000000000 RIP=ffffffff85067acf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f83a957d6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f83a957cf98 CR3=0000000035432000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a87f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a890c488 00007f83a890c480 00007f83a890c478 00007f83a890c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a946d100 00007f83a890c440 00007f83a890c458 00007f83a890c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83a890c498 00007f83a890c490 00007f83a890c488 00007f83a890c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000a606d RBX=0000000000000002 RCX=ffffffff8b24ee99 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd0e980 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f5c10 R15=0000000000000000 RIP=ffffffff8b25027f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd9e9d05a8 CR3=000000004c482000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820c572f ffffffff843fb5a9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff843fb5a9 ffffffff820c572f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff820c572f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81d75bac ffffffff81d75bac ffffffff81d75b69 ffffffff81d75b69 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febeee6d100 00007febee30c440 00007feb00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee30c498 00007febee30c490 00007febee30c488 00007febee30c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 0000000000000000 0000000000000000 0000000000006964 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a6b91 RBX=0000000000000003 RCX=ffffffff8b24ee99 RDX=0000000000000000 RSI=ffffffff8b6cdee0 RDI=ffffffff8bd0e980 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f5c10 R15=0000000000000000 RIP=ffffffff8b25027f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2d8fe1f6c0 CR3=000000004c482000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820c572f ffffffff843fb5a9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff843fb5a9 ffffffff820c572f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff820c572f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee1f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81d75bac ffffffff81d75bac ffffffff81d75b69 ffffffff81d75b69 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febeee6d100 00007febee30c440 00007feb00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007febee30c498 00007febee30c490 00007febee30c488 00007febee30c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 0000000000000000 0000000000000000 0000000000006964 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000