last executing test programs: 57.029216335s ago: executing program 0 (id=354): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xa4ca43b2d718449a}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x800}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x7, @initdev={0xac, 0x1e, 0xff, 0x0}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x12, 0x94, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "49c0194cecf2dd2c10254593d7dfa27e"}, @nop, @nop, @exp_fastopen={0xfe, 0x14, 0xf989, "1f7dae425b2b2fcff08189a5b2cddb8b"}, @mptcp=@mp_fclose={0x1e, 0xc, 0xaf7, 0x0, 0x7cb}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="1c0023a00600030012000000060012100400000006000c000565f0f2"], 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x4c880) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x50, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x58e8, &(0x7f0000000140)={0x0, 0x704a, 0x10000, 0x2, 0x1f}, &(0x7f00000001c0), &(0x7f0000000240)) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = dup(r7) connect$pppl2tp(r8, &(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x2}}, 0x26) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 56.938226467s ago: executing program 0 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0xa00) 56.699560371s ago: executing program 0 (id=359): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}}, 0x80) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x3e8}, 0x0) 55.849377744s ago: executing program 0 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_usb_connect(0x4, 0x2eb, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x66, 0x98, 0xf1, 0x0, 0x10a6, 0xaa26, 0xb05, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d9, 0x1, 0x72, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0xc, 0x1, 0x5, 0x93, 0x46, 0x99, 0x3, [@generic={0x8f, 0x22, "a627f4ac9ab60279b6d9f829d0c55d9d8fa16e1391af3a2e5e7d04a8b5c643c0e03e6bfcd77e8a84b09604a8bec328418ed22f1832259c80bed067b76a72a86cffe20258bd9becbeccd1c9628c7061f2e6291a783cf9572b1b41bc2990f86de864fcfff808aa8f463516bb8cfbe7ea71d9124a8fb1c3685ce09d1a6e850df540ac864525e78ea03b96fd2ba4d9"}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'uv'}, {0x5, 0x24, 0x0, 0x63}, {0xd, 0x24, 0xf, 0x1, 0x58e, 0x1, 0x7f, 0x8}, {0x6, 0x24, 0x1a, 0x913, 0x4}, [@obex={0x5, 0x24, 0x15, 0x401}]}], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x2, 0x7, [@generic={0x59, 0xb, "03fbe98ec87396c77ad3a1482db47fd670521c2451a052fc15c9b2bbca72e37c6f4201bf62291040d02a26eda00de61cc42c1f934ba6236b267cfe6b7a52081f03e4bf06fe8c2ca15517890b7374272cbbe2b22a42c777"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x9, 0xef, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0xff, 0x2, 0x63, [@generic={0x8c, 0x7, "3aa34c6956d1057df1c2bfb5e68cd0a92a4a4b03fd1b1a8afa4d72b1dca8beb75347b5478c497e0034c9ae429196c19dde1491821785429296224599ec8ab7f6460dc9d9b5c758c941ffcd3fd6c0298adaa043cbea9f7468cbc9170ac79c1bf11facfebad015da6c75aed81590389fa1bbc90fcd9e2b8cc25dca218ef56b9b83ff33d1abf7b20e7c5eaa"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x9, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x35, 0x4, 0x2, [@generic={0xf4, 0x10, "c54e3de43de671682256f9220f7b0ee2ec0a6890afcacabc1e670b55c6cf4dac1fde983354586ead5793056e8cd961dba239854fc2136df13bbd93891873fd319b1073667c3a1472b5158e2edb6da02ca0b843b44095f30e476ae06acf8c7eac0eb726dc12c949abef77bf60087197ac36f2940fff9c56f805d7fcf8e4b016bea85d15ba77000296103839a64e40b7bc0a124524bb38a2a35c2f29a5fd027ddcc01e43da385dd7494be2ff60817fa51b88ea47029c6e95b8ce5a94b1ec4c4efd7a62d93a64a190c7801522ce85e47d7866e99999cd8bc851978ac0b3ecdeef5f73bb8bfc34a2243ee0ba589fab4dfc619e7c"}]}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xdd, 0xff, 0xfb, 0x8, 0x7f}, 0x20, &(0x7f0000000200)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0xea1}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xc63, 0xf000, 0xff5e, [0xff0000, 0x3f3f]}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x5, 0x24, {0x24, 0xe, "6012d5918afce383ea164e0df80a03bf5ad26d3a39d66c0b72ba3bbfa05bf151a15b"}}, &(0x7f0000000940)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "917cebea3875eb2951c3fccaf438d7b89b9a6a7216d6299dbd2dc3d9d80a5c919820ea6ba0d59d2465a3"}}, &(0x7f0000000980)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1e, 0x0, 0x4, 0x57, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x2, 0xf00, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x42, "ac4990a4a01bb56ea1faba65fa1b2441"}, @ptm_cap={0x3}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0xfe, 0x0, "fd529f6d", "0af679b0"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x81, 0x9, 0x4a, 0xdc, 0x7}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000a80)={0x60, 0x30, 0xce, "98c347749a68614880414d764147b96bae12172eb425a927dfe62bf1845c82e4abdebd61c29920ed3dafb5937f1a89d47f86b277a4c4db6f1b94ca3e6f2a225de0af69895fa2504a546d29159d53686840ca6c5ec287000ab0640862c9cdb06259e6dd73c448ae603b4c840e35b00d0a71f01b86719457c91afb2c17703d21f018758f95a76c1d93a26f0e1a6c4beb39f7000fb1e0ecb5e280d60d0e4c47b7c7999806a8f7f5e594620062e13617f406431059bb0f07c805728d37467e1db43e3091d29ae2d69af0397bb86f443d"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x70}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "1cb9"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "0564"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x5}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffcae, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)="92d2fd9ce218b8", 0x7}], 0x1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0x100801700) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r3, 0x0, r7, 0x0, 0x7, 0xd) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 52.780830573s ago: executing program 0 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="0f01790ff466b8e80000000f23d80f21f86635400000b00f23f8baf80c66b8fa0fc28466efbafc0cb80080ef262e7c0f0f015cd9b880038ed066b819eff3b30f23c80f21f866350c0000000f23f864650f300f35", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 52.490341046s ago: executing program 0 (id=422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4018aee3, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff1000000000000000ff"]) 52.478151926s ago: executing program 32 (id=422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4018aee3, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff1000000000000000ff"]) 39.577479212s ago: executing program 3 (id=643): io_uring_setup(0x30d8, &(0x7f00000000c0)={0x0, 0xf489, 0x400, 0x0, 0x238}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000017c0), r0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x4}, 'syz1\x00', 0x26}) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x8004001f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) read(0xffffffffffffffff, 0x0, 0x0) 39.389304765s ago: executing program 3 (id=646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 39.388963098s ago: executing program 3 (id=648): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 39.330271439s ago: executing program 3 (id=649): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060d000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000080000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x16a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090009000000b51acdfcf4f8a9777b62f897eb9602ec7e43a4a42ff71977df247050da12574bce9811f6363ce21c9bb391ce622b46577991b0defda3f3414dc8ae7d0098ac453308a649a06817ef16c9f677c5172b6145e9a0677b2de7182310403b569e8edc5bf838215bf7d7c0620a673cb8e1b344daa4f1b83f50f3302d79da4044afb52c04d107733b29298b2b4f2c989b77525b5270a419e00199cecfebaf564741e6eb63dd96502d5c2025508bf4d542449b17a5f09959efaeaeb3c5659dcea0d4100bc982cde87b7d5e8cb4f007ff0e1a00"], 0x30}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x8f, 0x0, 0x77b}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x205a) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}}, 0x0) syz_fuse_handle_req(r4, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) syz_fuse_handle_req(r4, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x0, 0x200, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000002740)=ANY=[@ANYBLOB="05030ffffffffd10008ea05829389493f6fd51c8e24ef15a2b15e64fdcbe3c14eefb782c2b7e9d5652ce56e1769a3ef8f7ac4f663ed7115b572f12bcb72cde6066d53dcec15bc721c549bf2e1f70b2af9e6c314b2c4ca7c36e370bd22f7bbe79fbcefd6a6e67c8b544287c51a1183cf75a7e219aa99401c88d1ccff2e9f8ad5cbbffbd723481064fc6899ac3698a64370a358bd6cd7dd465db372152d2ee0aa6629f886ab7433f719f40e0f3097e719326fc578cc00511d837bb727c6b9c49a55871e50024790218c209bc961e1402d6d8990d84d74babe9975b6a83a239b72707846c075135b23707a922ac6c864cfe8fe9461f0b2f5bdd7913426bf86136ac758c1857a73a16cda012b28ff9e9fbfeb53ba0e1f846e7f0ea763cd782b6901ccd6e0b95acb79f2609c492c53b85698c6361430c30734ccb8c6d8d65c7852f6e7bba9a23d98b445edba311fc357691fa48f25c4c90d2f565e252d48c5e7e2e5dd6bb988143bdb9e5b3c672c7e1c527d787cb1e5a5367e63903bfe034b6095eea090fef5b13bf21212d13bbd7dcfb9e795d6caebdc5155d94e4f82840d36c37050c65df694dc1ee30b882b768535740250a406e72194d6870b51a6847b55cfe9d18600d74d0859807c72c00dd8999222711e4d76929e41032d1d182ed2d37cc231a66141d2242775b78549b35b635066d45d6aa30fe215e0a6cc77e689ca144f8f3a5d5b1ac453a054add27b93e711985ab377f988b0e67a3289ea689a19b65c2e5022e548a4847d1e458522f472a862b53dd9d9767aec3d891c2d22beb959fb732f865a9adaaf1fbc90f03cb4b383af3c74004066f1cc4423d7e32b1545eae258d3ff0ae147320e7bf0d68badb3a3c6a71c4b611ad6e3b573c0594c9a8576065cf7e776dc1923ef8945beef2f16e363d4a70e52c2ad51ae942f35c7a05fc6c5029fbd9df09f16204575230341202e8f67f0833ddd4bb29b7e6fdab34baf46f7c1c64be8f0dc3e269394337383a9f55acf9d45fcae604079e578db59aa0f224865f1b1a633ff661e598ac09a440ff26d6ca7c069c87da85b6cc18947c29bfb378006bd202bdbe2670e2a482f0e4073d8e9e3ba7fb0b14e8c713fe9f0c17a50272f69038a3128d2729ace434c59ea4713d5cf38606a03531de2c4fdbf569ff518dafc0e5efcc1ae6ca81b36e3eb237942ea1791770d909886b0f0c7afc2c82e5af7fe098ab4086e96555ef0e2b9b505d63612e20e8f4fc630b5efce5ea716c570ad97d5a63c84d95441bcecbd04e11e3c3c7128ba8e00d5dcb6621c0b57721dcb1f7e593bfb86e34f68d53ef92f096f7b543854769b1ff5644572cdf8eb24160beb1188a779a8ea1dc7d58c48cf9e2ccf6483abf11f7f3fce6281977ed42988a5ebce82f738a082535b1126492963f6c81f30dd9df799c8b45dec0eddc117805333ca9e6535d760b3e388481e8d36ae4beb86fdeec50252edc8b4beb384de3a556eeabaf7881a41caff313db28a639cd1357cef9618723c0f8fb2ed262fc6ac88ca37010a9481790aa32c885912a706d97635af1e3102b245291001c0ae0f73087d4772ac4b6130fd24836c6b96d460790e7fe7823baa8291104fb79afc7001343668f83aa313cce4863b02c2d15f797aae87614c1128b252607edfab666edc915bc2cbc3953d20927da69ed0cedb215a4f2fceb02db7cb17174bf0544f19ebc84f434335cdcd2e71552bfe6bac9eeacd282682938e5d5e5dde212216ce35a479b75c0a881a435ec9141170c695b78d5d5cea2155949a4f268280e8c6a8f0390957cccede3d0dba1e3980ef500dff96e843b6f86ba0f872df13be4b83bdc43e6002276feebaf328e681fc28425d8a2909e2a4e76967c8842733da9ad7c1bcabf2c2f71313958e80858a505d2126122419208aa0d9883cece5dc2c744af50dde86d02365caea1379b07f714f001121d85cec37b7236d89edb22d0e842dd5e70b8fe201fa28bb1e1d2d5f638c11753393d6f37ed9523df621afa983fa5952d6684476bcd65e1dcf856a7da762caceefa1b6a8ed49d9542db3d18335565198fd26194848aa82c88c5e2066182eba0944f021db3151d285940de451238aa582620f9854fddccf2857b1a00acade3707ec71d0fae0068898f010052b302cc838b382acdbb6262cdc87d9a7fbc18a07d0086b8d41bc3369ee32720f80f779da7413fb7209cc6e72048b063ab4a0070b21da93a2f3be288f6dfac18b78197afc6be62014c875ac2009fa2bdf485a13b44bc874bb3390950aad6e32ee61992e1e38b67567d3beefd6b0e8f0c06e143af1719359ba1dde122add4d0142653e34c3ee5b874747a72f3f3daf54ecf35ac11e9162b830fcc1a812aae71dace04c89bbe821cc5e1e04796de3a700d4dc31ed0cf069afde8a15db0760c004be8a7f7800ca31e82efe2b99854a951ad864efa0fd35f97634893fdad62d5b2d6e602da32b2a1a79268ad36bf4e64278942f63e66bf4fbecbe1fc649fde7daaa121eda7644a5d48ddda3c6a3abb5b9829dbbba00fba35a0dd1cc9a7653e4a79ef0f3ec25c911cbd0bad084f201271ca3c73b8f6326696ee123a89c6feccf52d8e45be6b6d540c6544afefe4632c2bcb3d5ace8d010b3e9438d0ef9cb40ba5910ae602120bca474c1dc87f26ed218678c7c7f50e92c0ddf9eb91edc2a90cf23c8048eb997f8c5b0036be17dcccd2df633834e8d70925e175569ec3f109707c1d688b78e3292cb3d658b380fd53d912b7ca7fd3d7dbfde1c3aecd8beee01aac08cecf1507cd21adef08001efe0b52ada70843fc98f8932a28ed456b54ef71f285737e6e91d76e431795836836895f44a888cd1fc3f286ebde17ca5643599fb17f2221819bd49325d40537ae62457bd7d3517c971a53524479b36baed9007c9799b15d3121b99e8d973561a771d4ed032c7f51912962f1e01edbbec2257779534f104fac624e59878f73611855b88348102e3bf3a1dbec1c2975f3b0586df22e2c1ef05c9b118c446861f33251697c884011c6ffa38f0c51ff20388cb6c5d048a671d63f92b6d400941a8858d4e3f2bd56e8cb495c4c9d35952f71a19fd2ac7ef81abacb989dc788e2c2ddf885f1a8123a11ee2cb427e5b4ff8991bcd1a82abd419de312b4bb66643741eabc8959efa9b90faf13c51fe6574990e5e141abdf23c2ce5b2649d6dd4b9e9d67b85f48ca664154a92b7f7bed9ac627629ee96037d01e768c95ba8174a2b1c0f712ec21940fbecde53f526bda2d23bca6945fd8517c23bbf8731826f671c7699525462eaace441f005740f41936f0e0c85f54d4a9a0da12812bc3dc0399738788f58174dca1dc92068d12219e17537070c5b734362eea321be257eb3934f904b15eea14c88b5808da906c55472c21852a9a978fb3f5784f50885c34abca5cac2987acc8379b851a29cc71f94cc213cfa44f56a1d9204b9ba636b6b058037a441f5605ccfd78bb52e948cda3db5bc0b2b179ac90973a1d211400387f6e31d2c709b8a9f22ea2840893f2a575986050c82fac65964c2c2a01fa4992517ae68d08a7c1ae138b435cf6b7322f6eb753a23d6058c2d0c4e7cecccc8c54ac2fc3f27aa85ff1c373ee9b9e496371b76238507f4ce5f207ce9dde8ee2ed0d7419c93624dba5a0b286f98467b8916cac501f5e0dd5e914b8212f42c38e922fae3731cb7448fee8b3185128a731451e49c8e2b03dddcb4f21265cc3fd13a261a547721d8a1fd20b330c0a7f66c93535aa30b3e765b28b5e66ab613db539fb4a0ae3de61832c9c6f8592e075c9e17aeb4d15c9a51b6f4fff261b86abd4c68b1bcb81dc3675e7f907d9eae94e878f4812a2cc82786df577c3f8fa2a96abaf855959e744bcb4e502e32919d74ce420b78f45d06e520a54bf7d7a3bd5135b4826a879762c7bd821048f5753a214f54b579630871015ffaa47935b91835d17c24fcff6f69a157f35e54a6ae3fef8bcf981b439612e4d833679081c80b48c7fb0fe1ed71b997a3b3bd53fe1b187ac8ea1a70df3cb635a1b051c507fd549c7e08d01674af8efbcc6c63531de1e6283ebee0d0d1c48fe582d12325f208436c7b43debc792ec79a2a74fcaede331e429a93d650e3cd36b2fc31e7fab5caf30c678dae25c2c1cf81d7d8af9b90835ef813d0d7aef6341d3bf29e2807018256cf2f7f5a556efe689512d10f0c3dcc7f818b162d8adb9e3d44ca63b9e2e3d08d41b6a69e6334cd7c68629cbdf8b8c835233713c1bdaa18509c9e74f7c92971f91279c6d7cec3a0f2c1b7b920088b415c0ef3c28ba1ff53c89fc1f2777a668789f3eba2c0108ee3301543455af1391d34dd6475f8ff3ab52b74dc7f9e276e1a5011f0dbd3100236a33f6563be06c37be04bd1f715673b7386b62a9e7a16c8b0ddb89a7d834f988d9586b01dcb430dbc3323f7e12bc701f9d9a2c1d1f8805f6c5ed2e507742ba3ce03a78018d04f5d20e20d41118aea329cb3cf8ee8d42d2bb800f720b974ada2706098f0b68be31325634977e0a468fad4c7b05f2679eb1da3877b30fcf3c2826940d470728cb34886a4e14233d13ef1ed296c62ff95f11e9388bf52c54c47ef42c005f6c7846d13a48883be5a09f916400bf2b38b4294637edc1086c6c8626be80e68cf584be022477945b091659c90104b4478aca9127a33bc094b6c84385a1d172fee3192f519052c626cd023fa4d570ab6e4aac18a70dbc6af885ccb9e8dbef0f6b32cadd0b90b9f1e53fc44c76d091bd3d4a16b95ba70cd25f05461ad0eae4b34483ae77f9c02e22d1d4fe6e648098ef581549700fc25f214902cee2b367bab31a62036af3e9f5beaa27d12c7b1b6b2dbeaf7a962075879b9f850f3786bec3457833c4cc2383432d9d14b3a53ea58a60259528b93e077b1e1424807190879c0942cb27997dcf3cbb62a11ddd597025ec3b593a87ebb9bf3203510f04a6db98753e16fae64343ce613533926200515f5cc37eec24a3816a0e0115c7fcccad5c1d3cb5326e327b276ffe15e65ce967913f106e76f4d728916a8c50ae6c49b08a56e2577b8e6def9b5472f78e75fd68761e193981476d59646d3090b4368c7b9bf7d53a2938a42b60efdb34a1a75a6ee4b8f7bbaf5c752a22e18e53bcb08786fcad38cf4b9e6d7067fc0f87bf66100c73e0d26cfb54e0715f6cdcfdd6065c9782ed24adc55c01e20f3568a892c18e061e077a14457a4c98ea14cb6758d14fe64e6184f990e7cdde7a44bb11db83eebe2a25ee60d43057315ecdd47548ac2e17fef662014958950139bb9d27e1f1912e22c92661542d8f43bd6a0cdae4d71939ab9dedc95d2f59fada93431bffb22d71189064cb58cca2c352416dcd7e6c8a075bee672c3d1d56f9b5028d0b5c56a918296210a354e3486af2da7ece520f837d74d946393aab7d4176a58ec9639d8b1b475185dbb78d78a57a9180c7bb0c6a2968d58b927f5382b5e1a052d02f469b8c3ac6308964706f92ed685c48bac765da5570ae7b79b280edbf7eeaa4ac85b28c3a433803617242a931fcb2d7cb4507e17f72c3eb9b4ce43337863adf3c7adccd42f138d1c66d6abd4d07ba35617b9c7e158a3944f2500b068ad05490b4cfa1e1a48cac9ab3eb8fdab0da4a012cab6dd3716ea99dd7cdf086532fa2d3e3ac2dc707560cab72581af42282bd6b0a95584be13d2b2acc471684026792dd0660f38467694d685f7ea5e095791852538671f1b690c428977c4fe5f0ef552172bc11146780838fe67c24d117c9260e7cecde4600"/4105], 0x1009, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x150, 0x150, 0x0, 0x0, 0x1e0, 0x238, 0x206, 0x1e0, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_to_bond\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x3d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 38.459679336s ago: executing program 3 (id=667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="0f01790ff466b8e80000000f23d80f21f86635400000b00f23f8baf80c66b8fa0fc28466efbafc0cb80080ef262e7c0f0f015cd9b880038ed066b819eff3b30f23c80f21f866350c0000000f23f864650f300f35", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 38.190683228s ago: executing program 3 (id=672): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "1e624a4603"}}}}}, 0x0) 38.15647127s ago: executing program 33 (id=672): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "1e624a4603"}}}}}, 0x0) 30.577695351s ago: executing program 4 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 30.449213025s ago: executing program 4 (id=822): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0x9, 0x88}) (async) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)={0x9, 0x88}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0xca8b, [], 0xefc7}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 30.370163536s ago: executing program 4 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x5, 0x9}, {0x4}}}, 0x24}}, 0x800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x5, 0x9}, {0x4}}}, 0x24}}, 0x800) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x2, 0x0) (async) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '!\xd7'}]}, 0x7) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000003000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) 30.009677613s ago: executing program 4 (id=830): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x3}}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x2, 0x0, 0xa, 0x0, 0x800, 0x7, {0x5, 0x6, 0x7ff, 0x5, 0x51b5, 0x4, 0x1, 0x7fffffff, 0xf5, 0x6000, 0x9, 0x0, 0x0, 0x6, 0x3e}}}, 0x90) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, &(0x7f0000000180)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x9, 0x2c, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) chdir(&(0x7f0000000040)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = userfaultfd(0x80001) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000a0b000/0x4000)=nil, 0x4000}}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)='./file0/../file0\x00') ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4, 0x300, 0x0, 0x101, 0x300}}) 29.948023403s ago: executing program 4 (id=832): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{r1, r2+60000000}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x60142, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000002800000000000000030300000000000000000000040038000100040004000d00060000000080000000000000004800000700000000000000080000000000400005000000000000000204"], 0x78) r4 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x5, 0x10800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000480)=0x7ea) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc1, 0x0) fstat(r5, &(0x7f0000000240)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = getpid() syz_clone3(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r6], 0x1}, 0x58) 29.859535121s ago: executing program 4 (id=839): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008b"]) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0x4, 0x6, 0xb2, 0x6, "d77355bde4f77f984e916f57d5f22f80ff7845"}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)={0x82, 0x4, 0xffff, 0x1, "f6de3f41987b0246e6ba18a76992c287c25b3f275cebca1d6c35d19b4b0d4df40755f33e4e2831e7fc5bfd4fdc3e00626c27fb8e5ea6a3fa5ce25fb41432d75ca8b1d264b7bb01ed61d0e2525729e3fd6b293fcbff73afced1698eacc71230da58966711218ccdc049b1"}) write$char_usb(r0, &(0x7f00000008c0)='-', 0x1) 29.786089544s ago: executing program 34 (id=839): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008b"]) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0x4, 0x6, 0xb2, 0x6, "d77355bde4f77f984e916f57d5f22f80ff7845"}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)={0x82, 0x4, 0xffff, 0x1, "f6de3f41987b0246e6ba18a76992c287c25b3f275cebca1d6c35d19b4b0d4df40755f33e4e2831e7fc5bfd4fdc3e00626c27fb8e5ea6a3fa5ce25fb41432d75ca8b1d264b7bb01ed61d0e2525729e3fd6b293fcbff73afced1698eacc71230da58966711218ccdc049b1"}) write$char_usb(r0, &(0x7f00000008c0)='-', 0x1) 3.610369572s ago: executing program 2 (id=1417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x300d}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004801}, 0x9590f6cc3aa711f2) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff}], 0x0, 0x0, 0x0}) 3.610152808s ago: executing program 2 (id=1418): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='jfs\x00', 0x8007, 0x0) (fail_nth: 1) 3.60988574s ago: executing program 2 (id=1419): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="400d05000040722162a88a04e7c8ce15f298dca1f4cc4de77689303bce5ada4125988ba38f77422207b05373e41241d338678ccb82147abe9db7232954833901cdc30a0ca7ac5ed445ae236af4927847d8e8a4dd7fdfaec88f47fa49bb864180300300000036fad0f6fa13c3161f43d895c2498d433f5ebce0a92c366a0ff3929ff4f4302dbd9743922b144a4bd74e5af6817ed42077c83fd243d03b6982a00ac4a7f06164f97ba46728c440a091c2637fcf3611041e83e4a484fbee"], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() syz_clone3(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r4], 0x1}, 0x58) 880.345328ms ago: executing program 6 (id=1497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0006007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 879.408627ms ago: executing program 6 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') (rerun: 64) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd27, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004880}, 0x24040044) 815.490517ms ago: executing program 6 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="a132f23bdb6ff8f30365ecbf30e138c9dffbbe1697cf1939c84d613afce228f279554c27bccf826b53671b2bdb4f2417715868843646579df7a71764d238a7ca9439184ecc841fdf6a32c6ae10dbab599f2b197ebc8cfcd9826ece0d0b72d3688bd4918eca8771727cff5e6fbf8c1adca04b9ddbb40f9afa002a0988206cfe92a71eaed4ade810f7f2f800e03bb2c1a9486fc661f78cbd4b7f8ff2b68e0b557f527986fdab39d53197d4c36de939e148294f90cfb614e579d133ffde92d2b69c6b761d1b", @ANYBLOB="010025bd7000ffdbdf2501001000000000000841000000140018c5ffff017564703a73797a32"], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4044090) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2000010c, &(0x7f0000000280)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000080)=0x800) 783.375682ms ago: executing program 6 (id=1504): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() syz_clone3(&(0x7f0000001100)={0x1d000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r2], 0x1}, 0x58) 739.788781ms ago: executing program 6 (id=1507): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{0xffffffe4}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x4f}, {0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0xba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x6, 0x0, 0x2}, {}, {0xffffffff}, {0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x1}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3d}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 678.533817ms ago: executing program 6 (id=1510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xabd0}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200000000000000000000000000000000000000000000000000f32a984b511fd02e609dbbdb2bfd41c5c7430e3becf71d0cca46"], 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0x4, 0x0, 0x0, 0xafc698828e51567) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffb}) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/203, 0xcb}], 0x1) r9 = signalfd4(r8, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x1, 0x8002) ioctl$SG_GET_LOW_DMA(r10, 0x227a, &(0x7f00000000c0)) r11 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x101, 0x1, 0x2000, r4, 0x7, '\x00', 0x0, r8, 0x1, 0x4, 0x0, 0xb, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, [@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x8, 0xb, 0x6, 0x7fff, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x3, 0x6, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}]}, &(0x7f0000000300)='GPL\x00', 0xffffffff, 0x34, &(0x7f0000000380)=""/52, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, r4, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x3, 0x7, 0x7fffffff}, 0x10, 0x0, r9, 0x1, &(0x7f0000000600)=[r3, r8, 0x1, r8, r13, r8], &(0x7f0000000640)=[{0x0, 0x4, 0xf, 0x7}], 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r14, @ANYBLOB="200001"], 0x38}}, 0x40840) ioctl$FBIOPUT_CON2FBMAP(r11, 0x4610, &(0x7f0000000140)={0x1}) 550.093968ms ago: executing program 2 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="a132f23bdb6ff8f30365ecbf30e138c9dffbbe1697cf1939c84d613afce228f279554c27bccf826b53671b2bdb4f2417715868843646579df7a71764d238a7ca9439184ecc841fdf6a32c6ae10dbab599f2b197ebc8cfcd9826ece0d0b72d3688bd4918eca8771727cff5e6fbf8c1adca04b9ddbb40f9afa002a0988206cfe92a71eaed4ade810f7f2f800e03bb2c1a9486fc661f78cbd4b7f8ff2b68e0b557f527986fdab39d53197d4c36de939e148294f90cfb614e579d133ffde92d2b69c6b761d1b", @ANYBLOB="010025bd7000ffdbdf2501001000000000000841000000140018c5ffff017564703a73797a32"], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4044090) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2000010c, &(0x7f0000000280)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) shutdown(0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000080)=0x800) 549.971126ms ago: executing program 1 (id=1514): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x403, r4, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r4}, 0x38) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) 500.006132ms ago: executing program 2 (id=1515): prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x0) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x1) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x0) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x2) (rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x1) (async) prctl$PR_SET_ENDIAN(0x14, 0x1) (async, rerun: 64) prctl$PR_SET_ENDIAN(0x14, 0x2) (async, rerun: 64) prctl$PR_SET_ENDIAN(0x14, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'veth0_to_bond\x00'}) (async) prctl$PR_SET_ENDIAN(0x14, 0x1) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x0) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x2) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0x0) (async, rerun: 32) prctl$PR_SET_ENDIAN(0x14, 0xc67a7c3b6eb622e) prctl$PR_SET_ENDIAN(0x14, 0x0) (async) prctl$PR_SET_ENDIAN(0x14, 0x0) (async, rerun: 64) prctl$PR_SET_ENDIAN(0x14, 0x0) (rerun: 64) prctl$PR_SET_ENDIAN(0x14, 0x2) (async) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) 498.789821ms ago: executing program 2 (id=1518): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x4, [{@rand_addr=0x64010102, 0xf}]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1a, '\x00', r0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0x0, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203243, 0x0, [0x2], [0x800], [], [0x0, 0x1]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) sendmsg$netlink(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x4f}, 0x0) 370.165897ms ago: executing program 5 (id=1519): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{}, [{0x0, 0xe4}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x4f}, {0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0xba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x6, 0x0, 0x2}, {}, {0xffffffff}, {0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x1}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3d}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 369.981654ms ago: executing program 5 (id=1520): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000004100), 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000004140)={0x2, 0xc6, 0x2}) close(r0) 310.328484ms ago: executing program 1 (id=1521): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000400)) writev(r0, &(0x7f0000000000), 0x0) 309.626342ms ago: executing program 5 (id=1522): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() 193.846987ms ago: executing program 1 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="a132f23bdb6ff8f30365ecbf30e138c9dffbbe1697cf1939c84d613afce228f279554c27bccf826b53671b2bdb4f2417715868843646579df7a71764d238a7ca9439184ecc841fdf6a32c6ae10dbab599f2b197ebc8cfcd9826ece0d0b72d3688bd4918eca8771727cff5e6fbf8c1adca04b9ddbb40f9afa002a0988206cfe92a71eaed4ade810f7f2f800e03bb2c1a9486fc661f78cbd4b7f8ff2b68e0b557f527986fdab39d53197d4c36de939e148294f90cfb614e579d133ffde92d2b69c6b761d1b", @ANYBLOB="010025bd7000ffdbdf2501001000000000000841000000140018c5ffff017564703a73797a32"], 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x4044090) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2000010c, &(0x7f0000000280)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000080)=0x800) 193.77482ms ago: executing program 5 (id=1524): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a32000000002800048008000240000000000800014000000001140003"], 0xb0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 193.684946ms ago: executing program 5 (id=1525): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x0, 0x400, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x0, 0x400, 0x0, 'queue1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r3, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, &(0x7f0000000140)='grpquota') 193.02888ms ago: executing program 1 (id=1526): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 192.598497ms ago: executing program 5 (id=1527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="ba4000ec65f20f1af50f792a66b9940800000f32df280f00943a7366b9a90b000066b8fc7f000066ba000000000f300fa236660f3881bb6600660f3882aac20e", 0x40}], 0x1, 0x5a, &(0x7f0000000240)=[@cstype0={0x4, 0xf}, @cr4={0x1, 0x400}], 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xb077, 0x200) syz_open_dev$sndctrl(&(0x7f0000000000), 0xe, 0xc41c2) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 100.512961ms ago: executing program 1 (id=1528): set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006, 0x41d0}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x30}}, 0x840) 0s ago: executing program 1 (id=1529): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_PORT_SELF={0x4}, @IFLA_PROP_LIST={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x4000084) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000300)={0x0, [[0x0, 0x300], [0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001]], '\x00', [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7fff}, {}, {}, {0x40}, {0xfffffffe}, {0xea2}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010200000000000000000300260008000400ac1414aa14000600736975300000000000000000000000001400070000000000000000000000ffff7f00000108118b8431bcf4cb"], 0x4c}, 0x8, 0x3000000000002}, 0x0) kernel console output (not intermixed with test programs): e+0x14e/0x1f0 [ 76.886838][ T7671] ? __local_bh_enable_ip+0xa4/0x120 [ 76.888475][ T7671] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.890075][ T7671] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 76.891839][ T7671] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 76.893596][ T7671] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 76.895840][ T7671] kvm_vcpu_ioctl+0x6ce/0x1520 [ 76.897827][ T7671] ? do_vfs_ioctl+0x513/0x1990 [ 76.899871][ T7671] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.902053][ T7671] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 76.904784][ T7671] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.907657][ T7671] ? __pfx_lock_release+0x10/0x10 [ 76.909779][ T7671] ? selinux_file_ioctl+0x180/0x270 [ 76.911941][ T7671] ? selinux_file_ioctl+0xb4/0x270 [ 76.913537][ T7671] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.915174][ T7671] __x64_sys_ioctl+0x190/0x200 [ 76.916724][ T7671] do_syscall_64+0xcd/0x250 [ 76.918138][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.919993][ T7671] RIP: 0033:0x7f53d2f85d29 [ 76.921457][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.927452][ T7671] RSP: 002b:00007f53d3ce5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.929999][ T7671] RAX: ffffffffffffffda RBX: 00007f53d3175fa0 RCX: 00007f53d2f85d29 [ 76.932452][ T7671] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 76.934882][ T7671] RBP: 00007f53d3ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 76.937331][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.939785][ T7671] R13: 0000000000000000 R14: 00007f53d3175fa0 R15: 00007fffa18dedf8 [ 76.942234][ T7671] [ 77.087673][ T7679] netlink: 17 bytes leftover after parsing attributes in process `syz.2.558'. [ 77.279337][ T7697] overlayfs: missing 'workdir' [ 77.293682][ T7703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.306463][ T7698] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.339582][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.371272][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.378254][ T7713] kvm: Disabled LAPIC found during irq injection [ 77.457774][ T7722] program syz.4.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.476178][ T7722] fuse: Bad value for 'fd' [ 77.799571][ T7749] netlink: 45 bytes leftover after parsing attributes in process `syz.4.583'. [ 77.815005][ T7754] overlay: Bad value for 'workdir' [ 77.882596][ T7759] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 77.885112][ T7759] netlink: 224 bytes leftover after parsing attributes in process `syz.4.587'. [ 77.995776][ T7763] FAULT_INJECTION: forcing a failure. [ 77.995776][ T7763] name failslab, interval 1, probability 0, space 0, times 0 [ 77.999769][ T7763] CPU: 2 UID: 0 PID: 7763 Comm: syz.4.588 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 78.003717][ T7763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.004631][ T7770] netlink: 'syz.2.590': attribute type 4 has an invalid length. [ 78.008377][ T7763] Call Trace: [ 78.008388][ T7763] [ 78.008397][ T7763] dump_stack_lvl+0x16c/0x1f0 [ 78.008445][ T7763] should_fail_ex+0x497/0x5b0 [ 78.008483][ T7763] ? fs_reclaim_acquire+0xae/0x150 [ 78.008504][ T7763] should_failslab+0xc2/0x120 [ 78.008528][ T7763] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 78.008550][ T7763] ? __pfx_mark_lock+0x10/0x10 [ 78.008570][ T7763] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 78.008595][ T7763] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 78.008622][ T7763] mmu_topup_memory_caches+0x22/0xd0 [ 78.008651][ T7763] kvm_mmu_load+0xda/0x21f0 [ 78.008677][ T7763] ? mark_held_locks+0x9f/0xe0 [ 78.008698][ T7763] ? kvm_apic_has_interrupt+0xb6/0x190 [ 78.035473][ T7763] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 78.037307][ T7763] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 78.039017][ T7763] ? __pfx_kvm_mmu_load+0x10/0x10 [ 78.040555][ T7763] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 78.042314][ T7763] ? kvm_check_and_inject_events+0x725/0x12e0 [ 78.044182][ T7763] vcpu_run+0x33a4/0x4f50 [ 78.045510][ T7763] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 78.047207][ T7763] ? __pfx_vcpu_run+0x10/0x10 [ 78.048633][ T7763] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 78.050354][ T7763] ? rcu_is_watching+0x12/0xc0 [ 78.051821][ T7763] ? trace_lock_acquire+0x14e/0x1f0 [ 78.053480][ T7763] ? __local_bh_enable_ip+0xa4/0x120 [ 78.055095][ T7763] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.056665][ T7763] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 78.058579][ T7763] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 78.060969][ T7763] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 78.063326][ T7763] kvm_vcpu_ioctl+0x6ce/0x1520 [ 78.065342][ T7763] ? do_vfs_ioctl+0x513/0x1990 [ 78.067508][ T7763] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.069211][ T7763] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 78.071595][ T7763] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.074396][ T7763] ? __pfx_lock_release+0x10/0x10 [ 78.076527][ T7763] ? selinux_file_ioctl+0x180/0x270 [ 78.078720][ T7763] ? selinux_file_ioctl+0xb4/0x270 [ 78.080886][ T7763] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.083065][ T7763] __x64_sys_ioctl+0x190/0x200 [ 78.085120][ T7763] do_syscall_64+0xcd/0x250 [ 78.087047][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.089343][ T7763] RIP: 0033:0x7f6818985d29 [ 78.090745][ T7763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.096422][ T7763] RSP: 002b:00007f6819857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.098906][ T7763] RAX: ffffffffffffffda RBX: 00007f6818b75fa0 RCX: 00007f6818985d29 [ 78.101261][ T7763] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 78.103669][ T7763] RBP: 00007f6819857090 R08: 0000000000000000 R09: 0000000000000000 [ 78.106080][ T7763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.108470][ T7763] R13: 0000000000000000 R14: 00007f6818b75fa0 R15: 00007ffc5a0933b8 [ 78.110858][ T7763] [ 78.135639][ T7777] syzkaller1: entered promiscuous mode [ 78.137572][ T7777] syzkaller1: entered allmulticast mode [ 78.325902][ T7789] netlink: 45 bytes leftover after parsing attributes in process `syz.2.596'. [ 78.385791][ T7797] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 78.527490][ T3229] vhci_hcd: vhci_device speed not set [ 78.531782][ T7795] netlink: 'syz.2.597': attribute type 39 has an invalid length. [ 78.635964][ T7814] FAULT_INJECTION: forcing a failure. [ 78.635964][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 78.641069][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.3.603 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 78.644621][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.648082][ T7814] Call Trace: [ 78.649099][ T7814] [ 78.649919][ T7814] dump_stack_lvl+0x16c/0x1f0 [ 78.651252][ T7814] should_fail_ex+0x497/0x5b0 [ 78.652709][ T7814] ? fs_reclaim_acquire+0xae/0x150 [ 78.654308][ T7814] should_failslab+0xc2/0x120 [ 78.654926][ T7816] binder: BINDER_SET_CONTEXT_MGR already set [ 78.655771][ T7814] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 78.655785][ T7814] ? __pfx_mark_lock+0x10/0x10 [ 78.659496][ T7816] binder: 7812:7816 ioctl 4018620d 20000040 returned -16 [ 78.660863][ T7814] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 78.664992][ T7814] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 78.666820][ T7814] mmu_topup_memory_caches+0x22/0xd0 [ 78.668434][ T7814] kvm_mmu_load+0xda/0x21f0 [ 78.669820][ T7814] ? mark_held_locks+0x9f/0xe0 [ 78.671288][ T7814] ? kvm_apic_has_interrupt+0xb6/0x190 [ 78.672932][ T7814] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 78.674751][ T7814] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 78.676473][ T7814] ? __pfx_kvm_mmu_load+0x10/0x10 [ 78.678053][ T7814] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 78.679866][ T7814] ? kvm_check_and_inject_events+0x725/0x12e0 [ 78.681737][ T7814] vcpu_run+0x33a4/0x4f50 [ 78.683074][ T7814] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 78.684900][ T7814] ? __pfx_vcpu_run+0x10/0x10 [ 78.686367][ T7814] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 78.688167][ T7814] ? rcu_is_watching+0x12/0xc0 [ 78.689661][ T7814] ? trace_lock_acquire+0x14e/0x1f0 [ 78.691265][ T7814] ? __local_bh_enable_ip+0xa4/0x120 [ 78.692926][ T7814] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.694675][ T7814] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 78.696454][ T7814] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 78.698183][ T7814] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 78.699986][ T7814] kvm_vcpu_ioctl+0x6ce/0x1520 [ 78.701524][ T7814] ? do_vfs_ioctl+0x513/0x1990 [ 78.703004][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.704624][ T7814] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 78.706647][ T7814] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.708756][ T7814] ? __pfx_lock_release+0x10/0x10 [ 78.710318][ T7814] ? selinux_file_ioctl+0x180/0x270 [ 78.711947][ T7814] ? selinux_file_ioctl+0xb4/0x270 [ 78.713519][ T7814] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.715182][ T7814] __x64_sys_ioctl+0x190/0x200 [ 78.717330][ T7814] do_syscall_64+0xcd/0x250 [ 78.717350][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.717365][ T7814] RIP: 0033:0x7f0f8c185d29 [ 78.717374][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.717385][ T7814] RSP: 002b:00007f0f8cf22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.717396][ T7814] RAX: ffffffffffffffda RBX: 00007f0f8c376080 RCX: 00007f0f8c185d29 [ 78.717403][ T7814] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 78.717409][ T7814] RBP: 00007f0f8cf22090 R08: 0000000000000000 R09: 0000000000000000 [ 78.717415][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.717422][ T7814] R13: 0000000000000000 R14: 00007f0f8c376080 R15: 00007ffe190bd7c8 [ 78.717434][ T7814] [ 78.757178][ T7813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.604'. [ 78.852491][ T7795] Mount JFS Failure: -22 [ 78.937746][ T7795] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 79.098766][ T7837] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 79.101229][ T7832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=97 sclass=netlink_route_socket pid=7832 comm=syz.1.608 [ 79.176911][ T5292] Bluetooth: hci0: command tx timeout [ 79.243743][ T7853] overlay: ./file0 is not a directory [ 79.441839][ T7870] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 79.495514][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.539855][ T7879] can: request_module (can-proto-0) failed. [ 79.700044][ T7897] misc userio: No port type given on /dev/userio [ 79.702459][ T7899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.810603][ T7905] __nla_validate_parse: 1 callbacks suppressed [ 79.810614][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 79.817164][ T7905] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 79.908796][ T7916] FAULT_INJECTION: forcing a failure. [ 79.908796][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 79.916991][ T7916] CPU: 2 UID: 0 PID: 7916 Comm: syz.1.636 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 79.920386][ T7916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.923686][ T7916] Call Trace: [ 79.924729][ T7916] [ 79.925696][ T7916] dump_stack_lvl+0x16c/0x1f0 [ 79.927171][ T7916] should_fail_ex+0x497/0x5b0 [ 79.928649][ T7916] ? fs_reclaim_acquire+0xae/0x150 [ 79.930233][ T7916] should_failslab+0xc2/0x120 [ 79.931745][ T7916] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 79.933459][ T7916] ? __pfx_mark_lock+0x10/0x10 [ 79.934970][ T7916] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 79.936890][ T7916] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 79.938715][ T7916] mmu_topup_memory_caches+0x22/0xd0 [ 79.940373][ T7916] kvm_mmu_load+0xda/0x21f0 [ 79.941790][ T7916] ? mark_held_locks+0x9f/0xe0 [ 79.943280][ T7916] ? kvm_apic_has_interrupt+0xb6/0x190 [ 79.944750][ T7916] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 79.946401][ T7916] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 79.948143][ T7916] ? __pfx_kvm_mmu_load+0x10/0x10 [ 79.949708][ T7916] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 79.951548][ T7916] ? kvm_check_and_inject_events+0x725/0x12e0 [ 79.953429][ T7916] vcpu_run+0x33a4/0x4f50 [ 79.954667][ T7918] fuse: Unknown parameter 'gèoup_id' [ 79.954671][ T7916] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 79.954691][ T7916] ? __pfx_vcpu_run+0x10/0x10 [ 79.959867][ T7916] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 79.961598][ T7916] ? rcu_is_watching+0x12/0xc0 [ 79.963125][ T7916] ? trace_lock_acquire+0x14e/0x1f0 [ 79.964750][ T7916] ? __local_bh_enable_ip+0xa4/0x120 [ 79.966446][ T7916] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.968053][ T7916] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 79.969799][ T7916] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 79.971441][ T7916] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 79.973028][ T7916] kvm_vcpu_ioctl+0x6ce/0x1520 [ 79.974396][ T7916] ? do_vfs_ioctl+0x513/0x1990 [ 79.976044][ T7916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.977814][ T7916] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 79.980562][ T7916] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.983515][ T7916] ? __pfx_lock_release+0x10/0x10 [ 79.985740][ T7916] ? selinux_file_ioctl+0x180/0x270 [ 79.988008][ T7916] ? selinux_file_ioctl+0xb4/0x270 [ 79.990183][ T7916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.992443][ T7916] __x64_sys_ioctl+0x190/0x200 [ 79.994401][ T7916] do_syscall_64+0xcd/0x250 [ 79.995841][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.998254][ T7916] RIP: 0033:0x7fca04f85d29 [ 80.000129][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.006738][ T7916] RSP: 002b:00007fca05de0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.009407][ T7916] RAX: ffffffffffffffda RBX: 00007fca05176080 RCX: 00007fca04f85d29 [ 80.012478][ T7916] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 80.015320][ T7916] RBP: 00007fca05de0090 R08: 0000000000000000 R09: 0000000000000000 [ 80.018052][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.021233][ T7916] R13: 0000000000000000 R14: 00007fca05176080 R15: 00007ffdb9c26ae8 [ 80.024577][ T7916] [ 80.034186][ T7923] netlink: 45 bytes leftover after parsing attributes in process `syz.2.640'. [ 80.315500][ T7938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.431493][ T7948] netlink: 'syz.2.651': attribute type 13 has an invalid length. [ 80.441147][ T7948] veth0_macvtap: left promiscuous mode [ 80.443753][ T7948] macvtap0: entered allmulticast mode [ 80.452214][ T7948] macvtap0: refused to change device tx_queue_len [ 80.607439][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.656'. [ 80.636637][ T7966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.685524][ T7969] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 80.833736][ T7971] mmap: syz.1.659 (7971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.045646][ T7985] netlink: 45 bytes leftover after parsing attributes in process `syz.4.663'. [ 81.413432][ T7998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.429642][ T3332] cfg80211: failed to load regulatory.db [ 81.487852][ T8000] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 81.545338][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.560697][ T8006] binfmt_misc: register: failed to install interpreter file ./file0 [ 81.593080][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 81.593096][ T40] audit: type=1400 audit(1735600295.252:462): avc: denied { execute } for pid=8008 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.605142][ T40] audit: type=1400 audit(1735600295.252:463): avc: denied { execute_no_trans } for pid=8008 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.672859][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.705077][ T68] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.710399][ T68] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.714253][ T68] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.719236][ T68] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.723529][ T68] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.727140][ T68] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.797992][ T8016] netlink: 'syz.2.676': attribute type 1 has an invalid length. [ 81.799556][ T40] audit: type=1400 audit(1735600295.452:464): avc: denied { append } for pid=8024 comm="syz.4.679" name="002" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.811012][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.812728][ T40] audit: type=1400 audit(1735600295.472:465): avc: denied { nlmsg_read } for pid=8024 comm="syz.4.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.815137][ T8025] nfs: Unknown parameter 'ud­ ' [ 81.845723][ T8016] bond1: entered promiscuous mode [ 81.851399][ T8016] bond1: entered allmulticast mode [ 81.858905][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 81.866554][ T8022] bond1: (slave batadv1): making interface the new active one [ 81.871392][ T8022] batadv1: entered promiscuous mode [ 81.873189][ T8022] batadv1: entered allmulticast mode [ 81.875605][ T8022] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 81.908203][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.981171][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 81.985258][ T40] audit: type=1400 audit(1735600295.642:466): avc: denied { name_bind } for pid=8047 comm="syz.1.685" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.079041][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.081303][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.082808][ T8054] FAULT_INJECTION: forcing a failure. [ 82.082808][ T8054] name failslab, interval 1, probability 0, space 0, times 0 [ 82.083588][ T8013] bridge_slave_0: entered allmulticast mode [ 82.090559][ T8054] CPU: 0 UID: 0 PID: 8054 Comm: syz.1.686 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 82.092315][ T8013] bridge_slave_0: entered promiscuous mode [ 82.093716][ T8054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.096228][ T1143] bridge_slave_1: left allmulticast mode [ 82.099329][ T8054] Call Trace: [ 82.099343][ T8054] [ 82.099350][ T8054] dump_stack_lvl+0x16c/0x1f0 [ 82.099396][ T8054] should_fail_ex+0x497/0x5b0 [ 82.099421][ T8054] ? fs_reclaim_acquire+0xae/0x150 [ 82.099438][ T8054] should_failslab+0xc2/0x120 [ 82.099456][ T8054] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 82.102517][ T1143] bridge_slave_1: left promiscuous mode [ 82.103182][ T8054] ? __pfx_mark_lock+0x10/0x10 [ 82.104741][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.106075][ T8054] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 82.118353][ T8054] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 82.120226][ T8054] mmu_topup_memory_caches+0x22/0xd0 [ 82.121864][ T8054] kvm_mmu_load+0xda/0x21f0 [ 82.123384][ T8054] ? mark_held_locks+0x9f/0xe0 [ 82.124870][ T8054] ? kvm_apic_has_interrupt+0xb6/0x190 [ 82.126543][ T8054] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 82.128965][ T8054] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 82.131094][ T8054] ? __pfx_kvm_mmu_load+0x10/0x10 [ 82.132673][ T8054] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 82.134472][ T8054] ? kvm_check_and_inject_events+0x725/0x12e0 [ 82.136370][ T8054] vcpu_run+0x33a4/0x4f50 [ 82.138101][ T8054] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 82.140335][ T8054] ? __pfx_vcpu_run+0x10/0x10 [ 82.141806][ T8054] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 82.143543][ T8054] ? rcu_is_watching+0x12/0xc0 [ 82.145018][ T8054] ? trace_lock_acquire+0x14e/0x1f0 [ 82.146663][ T8054] ? __local_bh_enable_ip+0xa4/0x120 [ 82.148896][ T8054] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.151007][ T8054] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 82.152769][ T8054] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 82.154533][ T8054] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 82.156268][ T8054] kvm_vcpu_ioctl+0x6ce/0x1520 [ 82.157716][ T8054] ? do_vfs_ioctl+0x513/0x1990 [ 82.159208][ T8054] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 82.160843][ T8054] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 82.162868][ T8054] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.165030][ T8054] ? __pfx_lock_release+0x10/0x10 [ 82.166595][ T8054] ? selinux_file_ioctl+0x180/0x270 [ 82.168742][ T8054] ? selinux_file_ioctl+0xb4/0x270 [ 82.171001][ T8054] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 82.173070][ T8054] __x64_sys_ioctl+0x190/0x200 [ 82.174593][ T8054] do_syscall_64+0xcd/0x250 [ 82.176086][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.177938][ T8054] RIP: 0033:0x7fca04f85d29 [ 82.179381][ T8054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.185424][ T8054] RSP: 002b:00007fca05e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.188485][ T8054] RAX: ffffffffffffffda RBX: 00007fca05175fa0 RCX: 00007fca04f85d29 [ 82.191757][ T8054] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 82.194214][ T8054] RBP: 00007fca05e01090 R08: 0000000000000000 R09: 0000000000000000 [ 82.196737][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.199652][ T8054] R13: 0000000000000000 R14: 00007fca05175fa0 R15: 00007ffdb9c26ae8 [ 82.202602][ T8054] [ 82.203898][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.214431][ T1143] bridge_slave_0: left allmulticast mode [ 82.216727][ T1143] bridge_slave_0: left promiscuous mode [ 82.219197][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.312968][ T8063] netlink: 'syz.4.689': attribute type 10 has an invalid length. [ 82.368335][ T40] audit: type=1400 audit(1735600296.032:467): avc: denied { setopt } for pid=8062 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.376287][ T8066] netlink: 'syz.4.689': attribute type 10 has an invalid length. [ 82.516225][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.520394][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.523964][ T1143] bond0 (unregistering): Released all slaves [ 82.532635][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.534896][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.537398][ T8013] bridge_slave_1: entered allmulticast mode [ 82.539812][ T8013] bridge_slave_1: entered promiscuous mode [ 82.545212][ T8063] syz_tun: entered promiscuous mode [ 82.552223][ T8063] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 82.566953][ T8022] syz.2.676 (8022) used greatest stack depth: 21472 bytes left [ 82.568703][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.576331][ T8066] team0: Port device bond0 added [ 82.633794][ T8075] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 82.656936][ T1143] IPVS: stopping backup sync thread 6740 ... [ 82.698715][ T8083] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 82.702131][ T8083] netlink: 'syz.2.693': attribute type 11 has an invalid length. [ 82.706411][ T8083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.693'. [ 82.713558][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.716018][ T8076] netlink: 240 bytes leftover after parsing attributes in process `syz.2.693'. [ 82.718743][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.719629][ T8076] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 82.826220][ T8091] FAULT_INJECTION: forcing a failure. [ 82.826220][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 82.831298][ T8091] CPU: 0 UID: 0 PID: 8091 Comm: syz.2.698 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 82.834658][ T8091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.837946][ T8091] Call Trace: [ 82.838979][ T8091] [ 82.839924][ T8091] dump_stack_lvl+0x16c/0x1f0 [ 82.841400][ T8091] should_fail_ex+0x497/0x5b0 [ 82.842876][ T8091] ? fs_reclaim_acquire+0xae/0x150 [ 82.844500][ T8091] should_failslab+0xc2/0x120 [ 82.845991][ T8091] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 82.847684][ T8091] ? __pfx_mark_lock+0x10/0x10 [ 82.849154][ T8091] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 82.851005][ T8091] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 82.852798][ T8091] mmu_topup_memory_caches+0x22/0xd0 [ 82.854396][ T8091] kvm_mmu_load+0xda/0x21f0 [ 82.855791][ T8091] ? mark_held_locks+0x9f/0xe0 [ 82.857392][ T8091] ? kvm_apic_has_interrupt+0xb6/0x190 [ 82.859271][ T8091] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 82.861285][ T8091] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 82.863224][ T8091] ? __pfx_kvm_mmu_load+0x10/0x10 [ 82.864806][ T8091] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 82.866685][ T8091] ? kvm_check_and_inject_events+0x725/0x12e0 [ 82.868652][ T8091] vcpu_run+0x33a4/0x4f50 [ 82.869997][ T8091] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 82.871725][ T8091] ? __pfx_vcpu_run+0x10/0x10 [ 82.873212][ T8091] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 82.874947][ T8091] ? rcu_is_watching+0x12/0xc0 [ 82.876476][ T8091] ? trace_lock_acquire+0x14e/0x1f0 [ 82.878125][ T8091] ? __local_bh_enable_ip+0xa4/0x120 [ 82.879818][ T8091] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.881463][ T8091] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 82.883243][ T8091] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 82.885015][ T8091] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 82.886751][ T8091] kvm_vcpu_ioctl+0x6ce/0x1520 [ 82.888248][ T8091] ? do_vfs_ioctl+0x513/0x1990 [ 82.889734][ T8091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 82.891361][ T8091] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 82.893373][ T8091] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 82.895503][ T8091] ? __pfx_lock_release+0x10/0x10 [ 82.897077][ T8091] ? selinux_file_ioctl+0x180/0x270 [ 82.898696][ T8091] ? selinux_file_ioctl+0xb4/0x270 [ 82.900291][ T8091] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 82.901902][ T8091] __x64_sys_ioctl+0x190/0x200 [ 82.903390][ T8091] do_syscall_64+0xcd/0x250 [ 82.904819][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.906695][ T8091] RIP: 0033:0x7f53d2f85d29 [ 82.908297][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.914401][ T8091] RSP: 002b:00007f53d3ce5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.917021][ T8091] RAX: ffffffffffffffda RBX: 00007f53d3175fa0 RCX: 00007f53d2f85d29 [ 82.919405][ T8091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 82.921855][ T8091] RBP: 00007f53d3ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 82.924293][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.926830][ T8091] R13: 0000000000000000 R14: 00007f53d3175fa0 R15: 00007fffa18dedf8 [ 82.929331][ T8091] [ 82.930409][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.941066][ T8013] team0: Port device team_slave_0 added [ 82.951564][ T8013] team0: Port device team_slave_1 added [ 83.038795][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.041075][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.049414][ T8013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.059725][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.061898][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.070330][ T8013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.114546][ T40] audit: type=1400 audit(1735600296.772:468): avc: denied { bind } for pid=8111 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.115547][ T8112] program syz.2.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.135759][ T8013] hsr_slave_0: entered promiscuous mode [ 83.141463][ T8013] hsr_slave_1: entered promiscuous mode [ 83.146916][ T8013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.150924][ T8013] Cannot create hsr debugfs directory [ 83.239265][ T1143] hsr_slave_0: left promiscuous mode [ 83.242105][ T1143] hsr_slave_1: left promiscuous mode [ 83.244088][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.246394][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.249698][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.252046][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.267964][ T1143] veth1_macvtap: left promiscuous mode [ 83.269789][ T1143] veth0_macvtap: left promiscuous mode [ 83.271441][ T1143] veth1_vlan: left promiscuous mode [ 83.272979][ T1143] veth0_vlan: left promiscuous mode [ 83.789816][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 83.820169][ T5292] Bluetooth: hci2: command tx timeout [ 83.856209][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 84.390837][ T40] audit: type=1400 audit(1735600298.052:469): avc: denied { execheap } for pid=8136 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.511528][ T8013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.524596][ T8013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.534120][ T8013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.545738][ T8013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.622342][ T8160] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.633400][ T8160] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.668729][ T8160] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.683417][ T8160] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.686189][ T8160] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.690766][ T8160] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.694917][ T8160] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.698233][ T8160] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.724513][ T8160] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.728454][ T8160] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.743477][ T8160] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.745966][ T8160] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.752577][ T8160] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.755548][ T8160] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.757992][ T8160] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.763586][ T8160] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.786955][ T8160] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.797542][ T8160] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.809672][ T8160] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.817790][ T8160] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.825045][ T8177] validate_nla: 1 callbacks suppressed [ 84.825057][ T8177] netlink: 'syz.1.713': attribute type 4 has an invalid length. [ 84.827817][ T8160] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.835326][ T8160] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.843979][ T8160] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.854045][ T8160] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.864428][ T8160] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.882541][ T8160] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.888214][ T1143] IPVS: stop unused estimator thread 0... [ 84.889988][ T8160] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.910354][ T8186] sp0: Synchronizing with TNC [ 84.912325][ T8160] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.919589][ T8160] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.927422][ T8160] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.935611][ T8160] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.943112][ T8013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.948688][ T40] audit: type=1400 audit(1735600298.612:470): avc: denied { mounton } for pid=8182 comm="syz.4.715" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 84.951066][ T8160] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 84.953405][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.982467][ T8160] bridge33: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.000714][ T8160] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.006254][ T8160] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.016405][ T8160] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.021861][ T8160] bridge37: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.029914][ T8160] bridge38: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.036200][ T8160] bridge39: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.044000][ T8160] bridge40: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.048867][ T8013] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.055158][ T8160] bridge41: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.063039][ T8160] bridge42: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.065389][ T40] audit: type=1400 audit(1735600298.722:471): avc: denied { append } for pid=8184 comm="syz.1.716" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.072133][ T8160] bridge43: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.091031][ T8199] pimreg: entered allmulticast mode [ 85.098910][ T8160] bridge44: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.103749][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.105960][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.110211][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.112603][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.116113][ T8199] pimreg: left allmulticast mode [ 85.133779][ T8160] bridge45: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.150009][ T8160] bridge46: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.155864][ T8160] bridge47: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.161894][ T8160] bridge48: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.177205][ T8160] bridge49: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.183786][ T8160] bridge50: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.190549][ T8160] bridge51: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.216428][ T8160] bridge52: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.223511][ T8160] bridge53: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.230627][ T8160] bridge54: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.236113][ T8160] bridge55: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.244342][ T8160] bridge56: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.254119][ T8160] bridge57: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.263022][ T8160] bridge58: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.271549][ T8160] bridge59: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.282207][ T8160] bridge60: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.290188][ T8160] bridge61: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.310726][ T8160] bridge62: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.328542][ T8160] bridge63: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.341228][ T8212] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 85.350007][ T8160] bridge64: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.356182][ T8160] bridge65: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 85.406387][ T8013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.537957][ T8013] veth0_vlan: entered promiscuous mode [ 85.542378][ T8013] veth1_vlan: entered promiscuous mode [ 85.578589][ T8013] veth0_macvtap: entered promiscuous mode [ 85.581800][ T8013] veth1_macvtap: entered promiscuous mode [ 85.595466][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.599493][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.602562][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.605856][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.611407][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.614603][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.619203][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.633809][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.638749][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.642488][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.647268][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.649981][ T8013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.653134][ T8013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.657544][ T8013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.661849][ T8013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.664524][ T8013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.667454][ T8013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.676855][ T8013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.711927][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.714248][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.730037][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.732801][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.833577][ T8265] netlink: 45 bytes leftover after parsing attributes in process `syz.5.673'. [ 85.901156][ T5292] Bluetooth: hci2: command tx timeout [ 85.915774][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.732'. [ 86.153930][ T8307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.270938][ T8317] binder: 8316:8317 unknown command 0 [ 86.272657][ T8317] binder: 8316:8317 ioctl c0306201 20000080 returned -22 [ 86.277541][ T8317] binder_alloc: 8316: binder_alloc_buf size 8 failed, no address space [ 86.280383][ T8317] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 86.369372][ T8249] syz.2.724 (8249) used greatest stack depth: 20480 bytes left [ 86.388173][ T8326] netlink: 45 bytes leftover after parsing attributes in process `syz.5.740'. [ 86.467884][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.742'. [ 86.471342][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.742'. [ 86.578314][ T8257] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 86.629938][ T8347] tmpfs: Bad value for 'mpol' [ 86.821278][ T8369] netlink: 'syz.4.749': attribute type 4 has an invalid length. [ 86.881644][ T68] Bluetooth: hci0: hardware error 0x08 [ 86.921524][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 86.921534][ T40] audit: type=1400 audit(1735600300.582:480): avc: denied { sqpoll } for pid=8388 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.939553][ T8389] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 86.942424][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.944836][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.945733][ T8384] NILFS (loop1): device size too small [ 86.953091][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.955283][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.957558][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.959676][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.962808][ T8389] bridge0: entered promiscuous mode [ 86.964494][ T8389] bridge0: entered allmulticast mode [ 86.966301][ T8389] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.972161][ T8392] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 86.975661][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.977880][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.070216][ T40] audit: type=1400 audit(1735600300.722:481): avc: denied { remount } for pid=8397 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.110191][ T8406] netlink: 'syz.2.758': attribute type 4 has an invalid length. [ 87.217788][ T8408] netlink: 'syz.5.757': attribute type 39 has an invalid length. [ 87.377648][ T8424] netlink: 256 bytes leftover after parsing attributes in process `syz.1.763'. [ 87.380601][ T8424] netlink: 56 bytes leftover after parsing attributes in process `syz.1.763'. [ 87.393201][ T8413] Mount JFS Failure: -22 [ 87.428591][ T8413] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 87.455010][ T40] audit: type=1400 audit(1735600301.112:482): avc: denied { accept } for pid=8430 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 87.589723][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 87.838675][ T8473] FAULT_INJECTION: forcing a failure. [ 87.838675][ T8473] name failslab, interval 1, probability 0, space 0, times 0 [ 87.842432][ T8473] CPU: 1 UID: 0 PID: 8473 Comm: syz.2.778 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 87.845624][ T8473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.848884][ T8473] Call Trace: [ 87.849899][ T8473] [ 87.850799][ T8473] dump_stack_lvl+0x16c/0x1f0 [ 87.852219][ T8473] should_fail_ex+0x497/0x5b0 [ 87.853612][ T8473] ? fs_reclaim_acquire+0xae/0x150 [ 87.855177][ T8473] should_failslab+0xc2/0x120 [ 87.856547][ T8473] __kmalloc_noprof+0xcb/0x510 [ 87.857966][ T8473] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 87.859653][ T8473] tomoyo_realpath_from_path+0xb9/0x720 [ 87.861311][ T8473] ? tomoyo_path_number_perm+0x235/0x590 [ 87.862980][ T8473] ? tomoyo_path_number_perm+0x235/0x590 [ 87.864642][ T8473] tomoyo_path_number_perm+0x248/0x590 [ 87.866299][ T8473] ? tomoyo_path_number_perm+0x235/0x590 [ 87.868038][ T8473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.869905][ T8473] ? __pfx_lock_release+0x10/0x10 [ 87.871409][ T8473] ? trace_lock_acquire+0x14e/0x1f0 [ 87.872949][ T8473] ? lock_acquire+0x2f/0xb0 [ 87.874262][ T8473] ? __fget_files+0x40/0x3a0 [ 87.875676][ T8473] ? __fget_files+0x206/0x3a0 [ 87.877114][ T8473] security_file_ioctl+0x9b/0x240 [ 87.878650][ T8473] __x64_sys_ioctl+0xb7/0x200 [ 87.880203][ T8473] do_syscall_64+0xcd/0x250 [ 87.881544][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.883265][ T8473] RIP: 0033:0x7f53d2f85d29 [ 87.884655][ T8473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.890684][ T8473] RSP: 002b:00007f53d0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.893293][ T8473] RAX: ffffffffffffffda RBX: 00007f53d3176080 RCX: 00007f53d2f85d29 [ 87.895965][ T8473] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 87.898461][ T8473] RBP: 00007f53d0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.900937][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.903322][ T8473] R13: 0000000000000000 R14: 00007f53d3176080 R15: 00007fffa18dedf8 [ 87.903536][ T8477] netlink: 'syz.4.780': attribute type 4 has an invalid length. [ 87.905770][ T8473] [ 87.909874][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.913267][ T8473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.963434][ T40] audit: type=1400 audit(1735600301.622:483): avc: denied { create } for pid=8480 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 87.986892][ T5292] Bluetooth: hci2: command tx timeout [ 88.118432][ T40] audit: type=1400 audit(1735600301.782:484): avc: denied { write } for pid=8499 comm="syz.2.788" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.126194][ T40] audit: type=1400 audit(1735600301.782:485): avc: denied { create } for pid=8499 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.126213][ T40] audit: type=1400 audit(1735600301.782:486): avc: denied { getopt } for pid=8499 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.208591][ T8509] netlink: 292 bytes leftover after parsing attributes in process `syz.4.790'. [ 88.267610][ T8515] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.790'. [ 88.270276][ T8515] openvswitch: netlink: Flow actions attr not present in new flow. [ 88.526376][ T40] audit: type=1400 audit(1735600302.182:487): avc: denied { bind } for pid=8537 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.685719][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.864609][ T8575] x_tables: duplicate underflow at hook 1 [ 88.937045][ T68] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 89.138885][ T8599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8599 comm=syz.4.814 [ 89.186501][ T68] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 89.236119][ T8610] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 89.380168][ T40] audit: type=1400 audit(1735600303.042:488): avc: denied { nlmsg_read } for pid=8613 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.475389][ T40] audit: type=1400 audit(1735600303.132:489): avc: denied { search } for pid=5653 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=35966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 89.479852][ T8644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.767060][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 89.782719][ T8678] netlink: 'syz.5.831': attribute type 4 has an invalid length. [ 89.803383][ T7991] bond0: (slave syz_tun): Releasing backup interface [ 89.823906][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.897176][ T8] usb 6-1: device descriptor read/64, error -71 [ 89.979817][ T8699] mmap: syz.2.841 (8699): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 90.036662][ T8710] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 90.057938][ T8712] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 90.062022][ T68] Bluetooth: hci2: command tx timeout [ 90.121351][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.146995][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.153782][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.158866][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.163474][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.171689][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.175865][ T5938] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.180020][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.267942][ T8721] netlink: 'syz.2.848': attribute type 39 has an invalid length. [ 90.276979][ T8] usb 6-1: device descriptor read/64, error -71 [ 90.289789][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 90.368677][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.371666][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.374596][ T8719] bridge_slave_0: entered allmulticast mode [ 90.378913][ T8719] bridge_slave_0: entered promiscuous mode [ 90.384203][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.387118][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.390173][ T8719] bridge_slave_1: entered allmulticast mode [ 90.393443][ T8719] bridge_slave_1: entered promiscuous mode [ 90.396604][ T8] usb usb6-port1: attempt power cycle [ 90.421491][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.426167][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.472090][ T8719] team0: Port device team_slave_0 added [ 90.476916][ T8719] team0: Port device team_slave_1 added [ 90.525007][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.527833][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.538735][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.553854][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.556651][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.567099][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.609541][ T8719] hsr_slave_0: entered promiscuous mode [ 90.612457][ T8719] hsr_slave_1: entered promiscuous mode [ 90.615121][ T8719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.619311][ T8719] Cannot create hsr debugfs directory [ 90.695384][ T8748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.733990][ T8719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.736995][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 90.737974][ T8719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.743445][ T8719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.746912][ T8719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.757667][ T8] usb 6-1: device descriptor read/8, error -71 [ 90.791421][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.805551][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.812144][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.815057][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.827982][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.831184][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.864374][ T8719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.869149][ T8719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.962724][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.996957][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 91.020122][ T8] usb 6-1: device descriptor read/8, error -71 [ 91.095750][ T8719] veth0_vlan: entered promiscuous mode [ 91.101548][ T8719] veth1_vlan: entered promiscuous mode [ 91.117999][ T8719] veth0_macvtap: entered promiscuous mode [ 91.123014][ T8719] veth1_macvtap: entered promiscuous mode [ 91.127240][ T8] usb usb6-port1: unable to enumerate USB device [ 91.137944][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.142210][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.145376][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.149065][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.152101][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.156011][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.159954][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.163703][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.168823][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.175686][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.180336][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.183692][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.188072][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.192061][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.196308][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.200353][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.204131][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.208255][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.213362][ T8719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216981][ T8719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.220635][ T8719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.224254][ T8719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228494][ T5938] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 91.252394][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.255562][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.269461][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.272741][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.308804][ T8780] __nla_validate_parse: 4 callbacks suppressed [ 91.308816][ T8780] netlink: 45 bytes leftover after parsing attributes in process `syz.5.860'. [ 91.404260][ T8788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8788 comm=syz.5.862 [ 91.410088][ T8788] IPVS: length: 184 != 24 [ 91.599308][ T8796] XFS (nullb0): Invalid superblock magic number [ 91.927135][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 91.927148][ T40] audit: type=1400 audit(1735600305.592:500): avc: denied { read } for pid=8817 comm="syz.2.870" path="socket:[37946]" dev="sockfs" ino=37946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.105170][ T8823] sp0: Synchronizing with TNC [ 92.137051][ T5938] Bluetooth: hci2: command 0x0405 tx timeout [ 92.166894][ T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 92.226964][ T5292] Bluetooth: hci3: command tx timeout [ 92.285990][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.326926][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 92.329757][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.340359][ T8] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 92.343186][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.345591][ T8] usb 7-1: Product: syz [ 92.347202][ T8] usb 7-1: Manufacturer: syz [ 92.348626][ T8] usb 7-1: SerialNumber: syz [ 92.350899][ T8] usb 7-1: config 0 descriptor?? [ 92.353461][ T8] hub 7-1:0.0: bad descriptor, ignoring hub [ 92.355289][ T8] hub 7-1:0.0: probe with driver hub failed with error -5 [ 92.359004][ T8] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 92.387884][ T8845] netlink: 'syz.5.878': attribute type 3 has an invalid length. [ 92.390687][ T8845] netlink: 132 bytes leftover after parsing attributes in process `syz.5.878'. [ 92.468568][ T1253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.534345][ T1253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.548206][ T40] audit: type=1400 audit(1735600306.212:501): avc: denied { write } for pid=8859 comm="syz.6.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.558395][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 92.562291][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 92.570552][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.870'. [ 92.574267][ T40] audit: type=1400 audit(1735600306.232:502): avc: denied { read } for pid=8817 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.583076][ T40] audit: type=1400 audit(1735600306.242:503): avc: denied { write } for pid=8817 comm="syz.2.870" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.593616][ T8863] netlink: 45 bytes leftover after parsing attributes in process `syz.1.882'. [ 92.596365][ T40] audit: type=1400 audit(1735600306.252:504): avc: denied { read write } for pid=8864 comm="syz.6.884" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.603642][ T40] audit: type=1400 audit(1735600306.252:505): avc: denied { open } for pid=8864 comm="syz.6.884" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.611507][ T40] audit: type=1400 audit(1735600306.252:506): avc: denied { map } for pid=8864 comm="syz.6.884" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.618793][ T40] audit: type=1400 audit(1735600306.252:507): avc: denied { execute } for pid=8864 comm="syz.6.884" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.625415][ T40] audit: type=1400 audit(1735600306.262:508): avc: denied { ioctl } for pid=8864 comm="syz.6.884" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.626561][ T1253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.643033][ T40] audit: type=1400 audit(1735600306.302:509): avc: denied { shutdown } for pid=8817 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.717640][ T1253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.787752][ T8] usb 7-1: USB disconnect, device number 6 [ 92.830653][ T1253] bridge_slave_1: left allmulticast mode [ 92.832510][ T1253] bridge_slave_1: left promiscuous mode [ 92.834400][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.837763][ T1253] bridge_slave_0: left allmulticast mode [ 92.839580][ T1253] bridge_slave_0: left promiscuous mode [ 92.841377][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.106739][ T1253] team0: Port device bond0 removed [ 93.111109][ T1253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.116690][ T1253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.120531][ T1253] bond0 (unregistering): Released all slaves [ 93.318372][ T8904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8904 comm=syz.5.892 [ 93.325833][ T8903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8903 comm=syz.5.892 [ 93.384851][ T1253] hsr_slave_0: left promiscuous mode [ 93.389800][ T8903] netlink: 52 bytes leftover after parsing attributes in process `syz.5.892'. [ 93.392897][ T1253] hsr_slave_1: left promiscuous mode [ 93.395506][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.398582][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.405035][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.407733][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.431638][ T1253] veth1_macvtap: left promiscuous mode [ 93.433443][ T1253] veth0_macvtap: left promiscuous mode [ 93.435126][ T1253] veth1_vlan: left promiscuous mode [ 93.436966][ T1253] veth0_vlan: left promiscuous mode [ 94.190956][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 94.262021][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 94.296951][ T5292] Bluetooth: hci3: command tx timeout [ 94.810496][ T8931] netlink: 45 bytes leftover after parsing attributes in process `syz.1.897'. [ 94.920774][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.902'. [ 95.130450][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.908'. [ 95.325150][ T9001] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 95.328416][ T9001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 95.331845][ T9001] Invalid ELF header type: 0 != 1 [ 95.397371][ T8994] netlink: 'syz.6.911': attribute type 39 has an invalid length. [ 95.505620][ T9032] FAULT_INJECTION: forcing a failure. [ 95.505620][ T9032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.511121][ T9032] CPU: 3 UID: 0 PID: 9032 Comm: syz.1.924 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 95.515352][ T9032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.518623][ T9032] Call Trace: [ 95.519726][ T9032] [ 95.520670][ T9032] dump_stack_lvl+0x16c/0x1f0 [ 95.522132][ T9032] should_fail_ex+0x497/0x5b0 [ 95.523613][ T9032] _copy_from_user+0x2e/0xd0 [ 95.525126][ T9032] copy_msghdr_from_user+0x99/0x160 [ 95.526868][ T9032] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 95.528943][ T9032] ___sys_sendmsg+0xff/0x1e0 [ 95.530455][ T9032] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.532063][ T9032] ? __pfx_lock_release+0x10/0x10 [ 95.533307][ T9034] Mount JFS Failure: -22 [ 95.533674][ T9032] ? trace_lock_acquire+0x14e/0x1f0 [ 95.537089][ T9032] ? __fget_files+0x206/0x3a0 [ 95.538522][ T9032] __sys_sendmsg+0x16e/0x220 [ 95.539960][ T9032] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.541500][ T9032] do_syscall_64+0xcd/0x250 [ 95.542881][ T9032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.544736][ T9032] RIP: 0033:0x7fca04f85d29 [ 95.546102][ T9032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.551912][ T9032] RSP: 002b:00007fca05e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.554338][ T9032] RAX: ffffffffffffffda RBX: 00007fca05175fa0 RCX: 00007fca04f85d29 [ 95.556687][ T9032] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 95.558970][ T9032] RBP: 00007fca05e01090 R08: 0000000000000000 R09: 0000000000000000 [ 95.561361][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.563723][ T9032] R13: 0000000000000000 R14: 00007fca05175fa0 R15: 00007ffdb9c26ae8 [ 95.566106][ T9032] [ 95.609721][ T9040] mkiss: ax0: crc mode is auto. [ 95.629169][ T9034] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 95.866250][ T9061] trusted_key: encrypted_key: master key parameter '' is invalid [ 95.871064][ T9062] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 96.373669][ T9120] __nla_validate_parse: 1 callbacks suppressed [ 96.373686][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.6.947'. [ 96.379500][ T5292] Bluetooth: hci3: command tx timeout [ 96.426436][ T9135] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 96.466296][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.947'. [ 96.543430][ T9142] netlink: 'syz.2.954': attribute type 4 has an invalid length. [ 96.611236][ T9151] netlink: 4420 bytes leftover after parsing attributes in process `syz.5.957'. [ 96.667488][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 96.697459][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.710453][ T9170] netlink: 'syz.2.964': attribute type 4 has an invalid length. [ 96.717162][ T9162] netlink: 'syz.6.960': attribute type 27 has an invalid length. [ 96.802965][ T9176] xt_hashlimit: invalid rate [ 96.898388][ T8570] Bluetooth: hci4: Frame reassembly failed (-90) [ 96.924353][ T9196] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.981069][ T9199] tipc: Started in network mode [ 96.983001][ T9199] tipc: Node identity 3290927f6df3, cluster identity 4711 [ 96.986198][ T9199] tipc: Enabled bearer , priority 0 [ 97.036703][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 97.036715][ T40] audit: type=1400 audit(1735600310.692:519): avc: denied { nlmsg_write } for pid=9197 comm="syz.6.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 97.090521][ T9197] tipc: Disabling bearer [ 97.268593][ T40] audit: type=1400 audit(1735600310.932:520): avc: denied { read } for pid=9212 comm="syz.6.977" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 97.269359][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.977'. [ 97.279426][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.977'. [ 97.283416][ T9213] netlink: 64 bytes leftover after parsing attributes in process `syz.6.977'. [ 97.693432][ T40] audit: type=1400 audit(1735600311.352:521): avc: denied { bind } for pid=9229 comm="syz.6.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.914335][ T9245] FAULT_INJECTION: forcing a failure. [ 97.914335][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 97.936868][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.6.987 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 97.941095][ T9245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.945354][ T9245] Call Trace: [ 97.946723][ T9245] [ 97.947976][ T9245] dump_stack_lvl+0x16c/0x1f0 [ 97.949683][ T9245] should_fail_ex+0x497/0x5b0 [ 97.951251][ T9245] ? fs_reclaim_acquire+0xae/0x150 [ 97.953036][ T9245] should_failslab+0xc2/0x120 [ 97.954708][ T9245] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 97.956472][ T9245] ? __alloc_skb+0x2b1/0x380 [ 97.957811][ T9245] __alloc_skb+0x2b1/0x380 [ 97.959083][ T9245] ? __pfx___alloc_skb+0x10/0x10 [ 97.960690][ T9245] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 97.962415][ T9245] netlink_alloc_large_skb+0x69/0x130 [ 97.963968][ T9245] netlink_sendmsg+0x689/0xd70 [ 97.965346][ T9245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.967165][ T9245] ____sys_sendmsg+0xaaf/0xc90 [ 97.969334][ T9245] ? copy_msghdr_from_user+0x10b/0x160 [ 97.971583][ T9245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.973691][ T9245] ___sys_sendmsg+0x135/0x1e0 [ 97.975502][ T9245] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.977632][ T9245] ? __pfx_lock_release+0x10/0x10 [ 97.979294][ T9245] ? trace_lock_acquire+0x14e/0x1f0 [ 97.980827][ T9245] ? __fget_files+0x206/0x3a0 [ 97.982219][ T9245] __sys_sendmsg+0x16e/0x220 [ 97.983705][ T9245] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.985229][ T9245] do_syscall_64+0xcd/0x250 [ 97.986686][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.989128][ T9245] RIP: 0033:0x7f2189585d29 [ 97.990949][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.997951][ T9245] RSP: 002b:00007f218a35c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.000799][ T9245] RAX: ffffffffffffffda RBX: 00007f2189775fa0 RCX: 00007f2189585d29 [ 98.003111][ T9245] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 98.005372][ T9245] RBP: 00007f218a35c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.007860][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.010702][ T9245] R13: 0000000000000000 R14: 00007f2189775fa0 R15: 00007ffd489e0908 [ 98.013139][ T9245] [ 98.197035][ T9278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=9278 comm=syz.6.995 [ 98.333027][ T9284] netlink: 32 bytes leftover after parsing attributes in process `syz.6.997'. [ 98.370461][ T9293] netlink: 'syz.6.999': attribute type 4 has an invalid length. [ 98.456977][ T5938] Bluetooth: hci3: command tx timeout [ 98.489487][ T9308] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 98.531353][ T40] audit: type=1400 audit(1735600312.192:522): avc: denied { read append } for pid=9312 comm="syz.6.1005" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.542763][ T40] audit: type=1400 audit(1735600312.202:523): avc: denied { open } for pid=9312 comm="syz.6.1005" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.561276][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.564702][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.568380][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.571578][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.574582][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.577542][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.578636][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 98.580386][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.583416][ T9320] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1007'. [ 98.590121][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.592846][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.592882][ T40] audit: type=1400 audit(1735600312.252:524): avc: denied { mounton } for pid=9319 comm="syz.1.1007" path="/120/file1/bus" dev="hugetlbfs" ino=39446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 98.592948][ T9320] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.592978][ T9320] overlayfs: failed to set xattr on upper [ 98.592982][ T9320] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.592986][ T9320] overlayfs: ...falling back to index=off. [ 98.592990][ T9320] overlayfs: ...falling back to uuid=null. [ 98.592994][ T9320] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 98.593003][ T9320] overlayfs: maximum fs stacking depth exceeded [ 98.595131][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.595145][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.595156][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.595167][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.595178][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.619377][ T9320] SELinux: policydb magic number 0x37313008 does not match expected magic number 0xf97cff8c [ 98.620755][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.623595][ T40] audit: type=1400 audit(1735600312.282:525): avc: denied { load_policy } for pid=9319 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.625455][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.630581][ T9320] SELinux: failed to load policy [ 98.630746][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.656911][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.659226][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.661506][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.663749][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.665973][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.668333][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.670625][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.672909][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.675182][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.677475][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.679734][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.682005][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.684280][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.686544][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.688957][ T9] hid-generic 0000:0000:410000.0003: unknown main item tag 0x0 [ 98.695053][ T9] hid-generic 0000:0000:410000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 98.836971][ T1331] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 98.907264][ T9345] FAULT_INJECTION: forcing a failure. [ 98.907264][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 98.912272][ T9345] CPU: 1 UID: 0 PID: 9345 Comm: syz.1.1010 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 98.916618][ T9345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.921057][ T9345] Call Trace: [ 98.922479][ T9345] [ 98.923750][ T9345] dump_stack_lvl+0x16c/0x1f0 [ 98.925809][ T9345] should_fail_ex+0x497/0x5b0 [ 98.927858][ T9345] should_failslab+0xc2/0x120 [ 98.929842][ T9345] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 98.932132][ T9345] ? skb_clone+0x190/0x3f0 [ 98.934022][ T9345] skb_clone+0x190/0x3f0 [ 98.935865][ T9345] netlink_deliver_tap+0xabd/0xd30 [ 98.936901][ T5292] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.937009][ T5938] Bluetooth: hci4: command 0x1003 tx timeout [ 98.938022][ T9345] netlink_unicast+0x6b4/0x7f0 [ 98.945530][ T9345] ? __pfx_netlink_unicast+0x10/0x10 [ 98.947772][ T9345] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 98.949999][ T9345] netlink_ack+0x6ac/0xb80 [ 98.951964][ T9345] netlink_rcv_skb+0x348/0x440 [ 98.953995][ T9345] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.956280][ T9345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.958477][ T9345] ? netlink_deliver_tap+0x1ae/0xd30 [ 98.960262][ T9345] netlink_unicast+0x53c/0x7f0 [ 98.961706][ T9345] ? __pfx_netlink_unicast+0x10/0x10 [ 98.963298][ T9345] netlink_sendmsg+0x8b8/0xd70 [ 98.964722][ T9345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.966324][ T9345] ____sys_sendmsg+0xaaf/0xc90 [ 98.968262][ T9345] ? copy_msghdr_from_user+0x10b/0x160 [ 98.970243][ T9345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.971852][ T9345] ___sys_sendmsg+0x135/0x1e0 [ 98.973287][ T9345] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.974834][ T9345] ? __pfx_lock_release+0x10/0x10 [ 98.976342][ T9345] ? trace_lock_acquire+0x14e/0x1f0 [ 98.977798][ T9345] ? __fget_files+0x206/0x3a0 [ 98.979215][ T9345] __sys_sendmsg+0x16e/0x220 [ 98.980597][ T9345] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.982125][ T9345] do_syscall_64+0xcd/0x250 [ 98.983489][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.985231][ T9345] RIP: 0033:0x7fca04f85d29 [ 98.986591][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.992376][ T9345] RSP: 002b:00007fca05e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.994819][ T9345] RAX: ffffffffffffffda RBX: 00007fca05175fa0 RCX: 00007fca04f85d29 [ 98.997210][ T9345] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 98.999564][ T9345] RBP: 00007fca05e01090 R08: 0000000000000000 R09: 0000000000000000 [ 99.001901][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.004243][ T9345] R13: 0000000000000000 R14: 00007fca05175fa0 R15: 00007ffdb9c26ae8 [ 99.006631][ T9345] [ 99.007681][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.039997][ T1331] usb 11-1: config 0 has no interfaces? [ 99.041765][ T1331] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 99.044470][ T1331] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.048332][ T1331] usb 11-1: config 0 descriptor?? [ 99.157768][ T9350] netlink: 'syz.1.1012': attribute type 39 has an invalid length. [ 99.229973][ T9368] FAULT_INJECTION: forcing a failure. [ 99.229973][ T9368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.235425][ T9368] CPU: 2 UID: 0 PID: 9368 Comm: syz.2.1016 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 99.239720][ T9368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.243947][ T9368] Call Trace: [ 99.245221][ T9368] [ 99.246411][ T9368] dump_stack_lvl+0x16c/0x1f0 [ 99.248310][ T9368] should_fail_ex+0x497/0x5b0 [ 99.250179][ T9368] ? fs_reclaim_acquire+0xae/0x150 [ 99.252235][ T9368] should_fail_alloc_page+0xe7/0x130 [ 99.254385][ T9368] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 99.256907][ T9368] __alloc_pages_noprof+0x190/0x25b0 [ 99.258987][ T9368] ? hlock_class+0x4e/0x130 [ 99.260815][ T9368] ? mark_lock+0xb5/0xc60 [ 99.262575][ T9368] ? hlock_class+0x4e/0x130 [ 99.264392][ T9368] ? __pfx_mark_lock+0x10/0x10 [ 99.266314][ T9368] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 99.268586][ T9368] ? __lock_acquire+0x15a9/0x3c40 [ 99.270579][ T9368] ? mark_lock+0xb5/0xc60 [ 99.272305][ T9368] ? hlock_class+0x4e/0x130 [ 99.274087][ T9368] ? __lock_acquire+0xcc5/0x3c40 [ 99.275544][ T9313] Bluetooth: MGMT ver 1.23 [ 99.276012][ T9368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.279969][ T9368] ? policy_nodemask+0xea/0x4e0 [ 99.281815][ T9368] alloc_pages_mpol_noprof+0x2c9/0x610 [ 99.283985][ T9368] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 99.286395][ T9368] ? __lock_acquire+0xcc5/0x3c40 [ 99.288408][ T9368] folio_alloc_mpol_noprof+0x36/0xd0 [ 99.290469][ T9368] vma_alloc_folio_noprof+0xee/0x1b0 [ 99.292436][ T35] usb 11-1: USB disconnect, device number 2 [ 99.292802][ T9368] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 99.297047][ T9368] ? find_held_lock+0x2d/0x110 [ 99.299052][ T9368] do_pte_missing+0x2017/0x3e00 [ 99.301002][ T9368] __handle_mm_fault+0x103c/0x2a40 [ 99.303056][ T9368] ? lock_vma_under_rcu+0x6b9/0x980 [ 99.305135][ T9368] ? __pfx___handle_mm_fault+0x10/0x10 [ 99.307408][ T9368] handle_mm_fault+0x3fa/0xaa0 [ 99.309374][ T9368] do_user_addr_fault+0x60d/0x13f0 [ 99.311486][ T9368] exc_page_fault+0x5c/0xc0 [ 99.313385][ T9368] asm_exc_page_fault+0x26/0x30 [ 99.315369][ T9368] RIP: 0033:0x7f53d2e4d7ca [ 99.317210][ T9368] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 99.324708][ T9368] RSP: 002b:00007f53d3ce34f0 EFLAGS: 00010206 [ 99.327184][ T9368] RAX: 00007f53d2e4d7b0 RBX: 00007f53d3175fa0 RCX: 0000000020000300 [ 99.330300][ T9368] RDX: 0000000020dff000 RSI: 0000000000000003 RDI: ffffffffffffffff [ 99.333252][ T9368] RBP: 00007f53d3ce5090 R08: 0000000000000001 R09: 0000000000000021 [ 99.335722][ T9368] R10: ffffffffffffffff R11: 0000000020dff000 R12: 0000000000000000 [ 99.338139][ T9368] R13: 0000000000000000 R14: 00007f53d3175fa0 R15: 00000000fec00000 [ 99.340616][ T9368] [ 99.342470][ T9368] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.408695][ T9356] /dev/sr0: Can't open blockdev [ 99.445884][ T9380] FAULT_INJECTION: forcing a failure. [ 99.445884][ T9380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.450204][ T9380] CPU: 3 UID: 0 PID: 9380 Comm: syz.6.1020 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 99.453863][ T9380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.457299][ T9380] Call Trace: [ 99.459235][ T9380] [ 99.459243][ T9380] dump_stack_lvl+0x16c/0x1f0 [ 99.459262][ T9380] should_fail_ex+0x497/0x5b0 [ 99.459279][ T9380] _copy_to_user+0x32/0xd0 [ 99.459295][ T9380] simple_read_from_buffer+0xd0/0x160 [ 99.459319][ T9380] proc_fail_nth_read+0x198/0x270 [ 99.459333][ T9380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.459348][ T9380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.459362][ T9380] vfs_read+0x1df/0xbe0 [ 99.459373][ T9380] ? __fget_files+0x1fc/0x3a0 [ 99.459384][ T9380] ? __pfx___mutex_lock+0x10/0x10 [ 99.459397][ T9380] ? __pfx_vfs_read+0x10/0x10 [ 99.459410][ T9380] ? __fget_files+0x206/0x3a0 [ 99.459423][ T9380] ksys_read+0x12b/0x250 [ 99.459433][ T9380] ? __pfx_ksys_read+0x10/0x10 [ 99.459445][ T9380] do_syscall_64+0xcd/0x250 [ 99.459460][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.459473][ T9380] RIP: 0033:0x7f218958473c [ 99.459483][ T9380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.459492][ T9380] RSP: 002b:00007f218a35c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.459503][ T9380] RAX: ffffffffffffffda RBX: 00007f2189775fa0 RCX: 00007f218958473c [ 99.459510][ T9380] RDX: 000000000000000f RSI: 00007f218a35c0a0 RDI: 0000000000000004 [ 99.459516][ T9380] RBP: 00007f218a35c090 R08: 0000000000000000 R09: 0000000000000000 [ 99.459523][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.459529][ T9380] R13: 0000000000000000 R14: 00007f2189775fa0 R15: 00007ffd489e0908 [ 99.459541][ T9380] [ 99.512636][ T40] audit: type=1400 audit(1735600313.172:526): avc: denied { listen } for pid=9381 comm="syz.5.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 99.520148][ T40] audit: type=1400 audit(1735600313.182:527): avc: denied { ioctl } for pid=9376 comm="syz.2.1019" path="socket:[41073]" dev="sockfs" ino=41073 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.563198][ T9387] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 99.571378][ T40] audit: type=1400 audit(1735600313.232:528): avc: denied { write } for pid=9388 comm="syz.6.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 99.710642][ T9407] i2c i2c-1: Invalid block write size 34 [ 99.711899][ T9409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.876867][ T1331] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 99.994772][ T9425] CUSE: zero length info key specified [ 100.038744][ T1331] usb 7-1: not running at top speed; connect to a high speed hub [ 100.043281][ T1331] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 100.050214][ T1331] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.055547][ T1331] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.062838][ T1331] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.066058][ T1331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.072931][ T1331] usb 7-1: Product: åžã©¬ã¥·é•¢ê–»äŽ¬êᤵÙ里䦶迠긊ᶈ㖤áŽà¬“ጆᩥ炵ϫⱙ쌶唙ä€åœŽè¡˜ä¦‹â–ªê¥ë°¼è©å´•à¯Žä¨ªÇ†Ý¨ [ 100.077547][ T1331] usb 7-1: Manufacturer: Ч [ 100.079102][ T1331] usb 7-1: SerialNumber: ㉠[ 100.521574][ T9469] netlink: 'syz.5.1048': attribute type 4 has an invalid length. [ 100.675149][ T9490] erofs (device loop5): cannot find valid erofs superblock [ 100.947585][ T66] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 101.128288][ T66] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 101.131601][ T66] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 101.136198][ T66] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 101.140163][ T66] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 101.144551][ T66] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 101.148456][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 101.152135][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 101.160483][ T66] usb 6-1: string descriptor 0 read error: -22 [ 101.163161][ T66] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 101.166215][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.171352][ T66] usb 6-1: config 0 descriptor?? [ 101.173998][ T9471] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 101.180608][ T66] hub 6-1:0.0: bad descriptor, ignoring hub [ 101.183052][ T66] hub 6-1:0.0: probe with driver hub failed with error -5 [ 101.190640][ T66] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 101.201993][ C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 101.218848][ C2] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 101.317325][ T9522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=9522 comm=syz.5.1066 [ 101.371369][ T9524] kvm: user requested TSC rate below hardware speed [ 101.393746][ T9524] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 101.397436][ T9524] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 101.636156][ T9534] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 101.671981][ T9536] fuse: Unknown parameter 'grXup_id' [ 101.770347][ T9545] /dev/nullb0: Can't open blockdev [ 101.816112][ T9547] input: syz0 as /devices/virtual/input/input11 [ 101.899931][ T9551] FAULT_INJECTION: forcing a failure. [ 101.899931][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 101.904945][ T9551] CPU: 2 UID: 0 PID: 9551 Comm: syz.6.1077 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 101.908343][ T9551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.911665][ T9551] Call Trace: [ 101.912712][ T9551] [ 101.913963][ T9551] dump_stack_lvl+0x16c/0x1f0 [ 101.915503][ T9551] should_fail_ex+0x497/0x5b0 [ 101.916994][ T9551] should_failslab+0xc2/0x120 [ 101.918451][ T9551] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 101.920473][ T9551] ? nf_ct_ext_add+0x1a7/0x420 [ 101.921930][ T9551] krealloc_noprof+0x1fb/0x380 [ 101.923409][ T9551] nf_ct_ext_add+0x1a7/0x420 [ 101.925205][ T9551] ctnetlink_create_conntrack+0x60b/0x1630 [ 101.927684][ T9551] ? __pfx_ctnetlink_create_conntrack+0x10/0x10 [ 101.929528][ T9551] ? nf_conntrack_find_get+0x137/0x350 [ 101.931136][ T9551] ? __pfx_lock_release+0x10/0x10 [ 101.932735][ T9551] ? __mutex_trylock_common+0xea/0x250 [ 101.934437][ T9551] ? lock_acquire+0x2f/0xb0 [ 101.935948][ T9551] ? nf_conntrack_find_get+0xbd/0x350 [ 101.937872][ T9551] ? nf_conntrack_find_get+0x141/0x350 [ 101.939621][ T9551] ctnetlink_new_conntrack+0x5f5/0x1050 [ 101.941345][ T9551] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 101.943210][ T9551] ? __pfx___mutex_lock+0x10/0x10 [ 101.944805][ T9551] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 101.946382][ T9551] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.948498][ T9551] ? __pfx___lock_acquire+0x10/0x10 [ 101.950143][ T9551] ? lock_acquire+0x2f/0xb0 [ 101.951583][ T9551] ? avc_has_perm_noaudit+0x61/0x3a0 [ 101.953367][ T9551] netlink_rcv_skb+0x16b/0x440 [ 101.955026][ T9551] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.956788][ T9551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.958519][ T9551] ? bpf_lsm_capable+0x9/0x10 [ 101.959982][ T9551] ? security_capable+0x7e/0x260 [ 101.961559][ T9551] ? ns_capable+0xd7/0x110 [ 101.962939][ T9551] nfnetlink_rcv+0x1b4/0x430 [ 101.964416][ T9551] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.966009][ T9551] ? netlink_deliver_tap+0x1ae/0xd30 [ 101.967626][ T9551] netlink_unicast+0x53c/0x7f0 [ 101.969042][ T9551] ? __pfx_netlink_unicast+0x10/0x10 [ 101.970687][ T9551] netlink_sendmsg+0x8b8/0xd70 [ 101.972189][ T9551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.973835][ T9551] ____sys_sendmsg+0xaaf/0xc90 [ 101.975396][ T9551] ? copy_msghdr_from_user+0x10b/0x160 [ 101.977105][ T9551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.978746][ T9551] ___sys_sendmsg+0x135/0x1e0 [ 101.980247][ T9551] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.982117][ T9551] ? __pfx_lock_release+0x10/0x10 [ 101.983703][ T9551] ? trace_lock_acquire+0x14e/0x1f0 [ 101.985643][ T9551] ? __fget_files+0x206/0x3a0 [ 101.987236][ T9551] __sys_sendmsg+0x16e/0x220 [ 101.988680][ T9551] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.990267][ T9551] do_syscall_64+0xcd/0x250 [ 101.991664][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.993505][ T9551] RIP: 0033:0x7f2189585d29 [ 101.994998][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.001442][ T9551] RSP: 002b:00007f218a35c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.003939][ T9551] RAX: ffffffffffffffda RBX: 00007f2189775fa0 RCX: 00007f2189585d29 [ 102.006515][ T9551] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 102.008931][ T9551] RBP: 00007f218a35c090 R08: 0000000000000000 R09: 0000000000000000 [ 102.011274][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.013681][ T9551] R13: 0000000000000000 R14: 00007f2189775fa0 R15: 00007ffd489e0908 [ 102.016368][ T9551] [ 102.066165][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 102.066208][ T40] audit: type=1400 audit(1735600315.722:537): avc: denied { setopt } for pid=9556 comm="syz.5.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.190476][ T9567] ptrace attach of "/syz-executor exec"[8013] was attempted by " [ 102.257740][ T9555] /dev/sr0: Can't open blockdev [ 102.473746][ T40] audit: type=1400 audit(1735600316.132:538): avc: denied { setopt } for pid=9588 comm="syz.5.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.521232][ T40] audit: type=1400 audit(1735600316.182:539): avc: denied { mount } for pid=9593 comm="syz.5.1088" name="/" dev="rpc_pipefs" ino=41456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 102.531723][ T40] audit: type=1400 audit(1735600316.192:540): avc: denied { bind } for pid=9593 comm="syz.5.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.538480][ T40] audit: type=1400 audit(1735600316.192:541): avc: denied { listen } for pid=9593 comm="syz.5.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.544933][ T40] audit: type=1400 audit(1735600316.202:542): avc: denied { accept } for pid=9593 comm="syz.5.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.600458][ T9598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9598 comm=syz.5.1089 [ 102.604554][ T9598] __nla_validate_parse: 3 callbacks suppressed [ 102.604562][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1089'. [ 102.628187][ T1331] usb 7-1: 0:2 : does not exist [ 102.637342][ T1331] usb 7-1: USB disconnect, device number 7 [ 102.807344][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.821679][ T9614] netlink: 'syz.5.1095': attribute type 4 has an invalid length. [ 102.877460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 102.967207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.970284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 103.165487][ T40] audit: type=1400 audit(1735600316.822:543): avc: denied { write } for pid=9623 comm="syz.2.1099" lport=37474 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.360898][ T9631] : entered promiscuous mode [ 103.364676][ T9631] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1102'. [ 103.508112][ T9628] /dev/sr0: Can't open blockdev [ 103.546681][ T40] audit: type=1400 audit(1735600317.202:544): avc: denied { getopt } for pid=9641 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.596000][ T9] usb 6-1: USB disconnect, device number 10 [ 103.597150][ T9646] netlink: 'syz.5.1108': attribute type 4 has an invalid length. [ 103.651041][ T40] audit: type=1804 audit(1735600317.312:545): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1111" name="/newroot/135/bus/file1" dev="overlay" ino=727 res=1 errno=0 [ 103.658228][ T40] audit: type=1400 audit(1735600317.322:546): avc: denied { watch watch_reads } for pid=9651 comm="syz.5.1111" path="/135/bus/file1" dev="overlay" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.687024][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 103.690339][ T9654] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 103.694898][ T9654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.695291][ T9658] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 103.700603][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1109'. [ 103.707082][ T9658] ipvlan1: entered promiscuous mode [ 103.708806][ T9658] ipvlan1: entered allmulticast mode [ 103.712516][ T9658] veth0_vlan: entered allmulticast mode [ 103.719094][ T9658] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 103.729100][ T9659] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1113'. [ 103.986371][ T9698] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1126'. [ 104.065103][ T9706] netlink: 'syz.5.1130': attribute type 1 has an invalid length. [ 104.069369][ T9706] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1130'. [ 104.187476][ T25] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 104.309884][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1140'. [ 104.357085][ T25] usb 11-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 104.360184][ T25] usb 11-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 104.362907][ T25] usb 11-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 104.365632][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.394512][ T9733] overlayfs: missing 'lowerdir' [ 104.398972][ T9733] syz.5.1141: attempt to access beyond end of device [ 104.398972][ T9733] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 104.403394][ T9733] vxfs: unable to read disk superblock at 1 [ 104.406035][ T9733] syz.5.1141: attempt to access beyond end of device [ 104.406035][ T9733] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.411976][ T9733] vxfs: unable to read disk superblock at 8 [ 104.414385][ T9733] vxfs: can't find superblock. [ 104.465914][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1142'. [ 104.469007][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1142'. [ 104.520534][ T9739] xt_cgroup: path and classid specified [ 104.731555][ T9762] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.776921][ T9762] usb 2-1: USB disconnect, device number 2 [ 105.765892][ T9802] tipc: Started in network mode [ 105.767560][ T9802] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 105.769866][ T9802] tipc: Enabled bearer , priority 10 [ 105.912416][ T9807] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 105.915515][ T9808] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 105.970908][ T9808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9808 comm=syz.5.1168 [ 106.322437][ T9834] IPVS: Unknown mcast interface: dvmrp0 [ 106.444727][ T9849] Failed to get privilege flags for destination (handle=0x2:0x0) [ 106.777034][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.862352][ T1331] usb 11-1: USB disconnect, device number 3 [ 106.890355][ T58] tipc: Node number set to 15444650 [ 106.936905][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 106.943833][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.948286][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.953112][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.953137][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 106.961770][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.967237][ T9] usb 6-1: config 0 descriptor?? [ 107.009801][ T9870] syz_tun: entered allmulticast mode [ 107.020968][ T9870] syz.6.1189: attempt to access beyond end of device [ 107.020968][ T9870] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 107.026017][ T9870] vxfs: unable to read disk superblock at 1 [ 107.031747][ T9870] syz.6.1189: attempt to access beyond end of device [ 107.031747][ T9870] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 107.036321][ T9870] vxfs: unable to read disk superblock at 8 [ 107.039090][ T9870] vxfs: can't find superblock. [ 107.045897][ T9869] syz_tun: left allmulticast mode [ 107.058455][ T9871] netlink: 'syz.2.1190': attribute type 4 has an invalid length. [ 107.391077][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 107.402397][ T9] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 107.404864][ T9] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 107.500033][ T9922] netlink: 'syz.2.1207': attribute type 16 has an invalid length. [ 107.502572][ T9922] netlink: 'syz.2.1207': attribute type 3 has an invalid length. [ 107.505346][ T9922] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 107.508771][ T9922] netlink: 'syz.2.1207': attribute type 2 has an invalid length. [ 107.583188][ T9854] input: syz0 as /devices/virtual/input/input14 [ 107.631439][ T1331] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 107.631464][ T5978] usb 6-1: USB disconnect, device number 11 [ 107.634979][ T1331] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 107.640608][ T1331] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 107.644740][ T1331] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 107.691049][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 107.691059][ T40] audit: type=1400 audit(1735600321.352:567): avc: denied { bind } for pid=9931 comm="syz.2.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.700353][ T9932] openvswitch: netlink: Key type 29 is not supported [ 107.703995][ T9932] __nla_validate_parse: 5 callbacks suppressed [ 107.704005][ T9932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1211'. [ 108.037162][ T9945] syz.2.1216: attempt to access beyond end of device [ 108.037162][ T9945] loop2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 108.041331][ T9945] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 108.048569][ T9942] /dev/sr0: Can't open blockdev [ 108.073264][ T40] audit: type=1400 audit(1735600321.732:568): avc: denied { getopt } for pid=9946 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.082441][ T9947] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.085371][ T9947] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.088182][ T9947] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.090922][ T9947] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.093938][ T9947] geneve2: entered promiscuous mode [ 108.095564][ T9947] geneve2: entered allmulticast mode [ 108.524646][ T9992] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1233'. [ 108.536101][ T9996] netlink: 'syz.5.1234': attribute type 4 has an invalid length. [ 108.541570][ T9981] /dev/sr0: Can't open blockdev [ 108.615148][T10000] overlayfs: failed to resolve './file1': -2 [ 108.801721][ T40] audit: type=1400 audit(1735600322.462:569): avc: denied { block_suspend } for pid=10029 comm="syz.2.1247" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.879901][T10039] netlink: 'syz.6.1252': attribute type 21 has an invalid length. [ 108.882311][T10039] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1252'. [ 109.029023][ T40] audit: type=1400 audit(1735600322.692:570): avc: denied { watch } for pid=10056 comm="syz.6.1259" path="/sys/power/pm_trace" dev="sysfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.036188][ T40] audit: type=1400 audit(1735600322.692:571): avc: denied { watch_sb watch_reads } for pid=10056 comm="syz.6.1259" path="/sys/power/pm_trace" dev="sysfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 109.181386][T10061] XFS (nullb0): Invalid superblock magic number [ 109.233975][ T40] audit: type=1400 audit(1735600322.892:572): avc: denied { mount } for pid=10065 comm="syz.1.1264" name="/" dev="autofs" ino=45303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.246019][T10078] program syz.2.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.318340][ T40] audit: type=1400 audit(1735600322.982:573): avc: denied { unmount } for pid=8719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.381982][T10089] ªªªªª: renamed from hsr0 (while UP) [ 109.390384][ T40] audit: type=1400 audit(1735600323.052:574): avc: denied { ioctl } for pid=10090 comm="syz.6.1270" path="socket:[46273]" dev="sockfs" ino=46273 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.406202][T10089] ebt_limit: overflow, try lower: 570423552/2483027968 [ 109.410915][T10078] cgroup2: Unknown parameter 'euid' [ 109.513363][T10095] fuse: Bad value for 'group_id' [ 109.515047][T10095] fuse: Bad value for 'group_id' [ 109.636313][T10109] XFS (nullb0): Invalid superblock magic number [ 109.703599][ T40] audit: type=1400 audit(1735600323.362:575): avc: denied { map } for pid=10115 comm="syz.6.1278" path="socket:[43697]" dev="sockfs" ino=43697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.713198][ T40] audit: type=1400 audit(1735600323.362:576): avc: denied { read } for pid=10115 comm="syz.6.1278" path="socket:[43697]" dev="sockfs" ino=43697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.736890][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.736955][ T25] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 109.741477][ T25] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 109.745761][T10116] input: syz0 as /devices/virtual/input/input15 [ 110.056856][T10136] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1285'. [ 110.192047][T10153] fuse: Bad value for 'rootmode' [ 110.307071][ T5938] Bluetooth: hci2: command 0x0405 tx timeout [ 110.350216][T10166] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1295'. [ 110.380897][T10173] netlink: 'syz.1.1297': attribute type 4 has an invalid length. [ 110.408115][T10168] XFS (nullb0): Invalid superblock magic number [ 110.583242][T10177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.590298][T10177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.596490][T10177] bond0 (unregistering): Released all slaves [ 110.701336][T10192] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1302'. [ 110.726951][ T66] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 110.879544][ T66] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.883043][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.885467][ T66] usb 6-1: Product: syz [ 110.887001][ T66] usb 6-1: Manufacturer: syz [ 110.888400][ T66] usb 6-1: SerialNumber: syz [ 110.892304][ T66] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 110.909242][T10213] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1311'. [ 110.913159][T10213] NCSI netlink: No device for ifindex 33022 [ 110.918649][ T66] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.923290][T10213] syzkaller1: entered promiscuous mode [ 110.925648][T10213] syzkaller1: entered allmulticast mode [ 110.932585][T10213] program syz.2.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.936624][T10213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10213 comm=syz.2.1311 [ 111.256909][ T5292] Bluetooth: hci3: command tx timeout [ 111.303710][T10223] overlayfs: missing 'lowerdir' [ 111.330234][ T1331] usb 6-1: USB disconnect, device number 12 [ 111.429067][T10226] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1315'. [ 111.454867][T10229] IPVS: length: 184 != 24 [ 111.607922][T10237] XFS (nullb0): Invalid superblock magic number [ 111.704202][T10244] kvm: pic: non byte write [ 111.802589][T10255] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1324'. [ 112.109089][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1329'. [ 112.112698][T10271] bond0: option ad_select: unable to set because the bond device is up [ 112.113052][ T65] bond0: (slave bond_slave_0): interface is now down [ 112.120534][T10271] bond0: option ad_select: unable to set because the bond device is up [ 112.126886][ T65] bond0: (slave bond_slave_1): interface is now down [ 112.134212][ T65] bond0: now running without any active interface! [ 112.148303][ T66] usb 6-1: Service connection timeout for: 256 [ 112.151214][ T66] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 112.167980][ T66] ath9k_htc: Failed to initialize the device [ 112.170175][ T1331] usb 6-1: ath9k_htc: USB layer deinitialized [ 112.376893][ T25] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 112.376993][ T5292] Bluetooth: hci2: command 0x0405 tx timeout [ 112.378941][ T25] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 114.456882][ T5292] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.461812][ T25] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 114.464226][ T25] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 114.491339][T10290] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 114.612815][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 114.612826][ T40] audit: type=1400 audit(1735600328.272:584): avc: denied { mounton } for pid=10316 comm="syz.2.1345" path="/371/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 114.612868][T10318] overlay: Unknown parameter 'dont_measure' [ 114.631321][ T40] audit: type=1326 audit(1735600328.292:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.5.1344" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0018785d29 code=0x0 [ 114.639245][ T40] audit: type=1400 audit(1735600328.292:586): avc: denied { remount } for pid=10316 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.737701][T10335] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 114.756893][T10335] Invalid option length (1047906) for dns_resolver key [ 114.874744][T10341] __nla_validate_parse: 1 callbacks suppressed [ 114.874759][T10341] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1354'. [ 114.903959][T10360] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1358'. [ 114.904211][ T40] audit: type=1800 audit(1735600328.562:587): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1357" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 114.908514][T10346] XFS (nullb0): Invalid superblock magic number [ 115.102679][T10380] No such timeout policy "syz0" [ 115.229809][T10406] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 115.236595][T10406] ubi0: attaching mtd0 [ 115.241254][T10406] ubi0: scanning is finished [ 115.242632][T10406] ubi0: empty MTD device detected [ 115.255979][T10409] validate_nla: 2 callbacks suppressed [ 115.255992][T10409] netlink: 'syz.5.1377': attribute type 21 has an invalid length. [ 115.262158][T10409] netlink: 'syz.5.1377': attribute type 20 has an invalid length. [ 115.265465][T10409] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.343690][T10406] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.346258][T10406] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.351026][T10406] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.353994][T10406] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.354388][T10418] netlink: 'syz.6.1378': attribute type 4 has an invalid length. [ 115.357492][T10406] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.362532][T10406] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.365797][T10406] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 525959816 [ 115.370653][T10406] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.374711][T10416] ubi0: background thread "ubi_bgt0d" started, PID 10416 [ 115.516258][T10432] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1385'. [ 115.553950][T10442] netlink: 'syz.5.1389': attribute type 4 has an invalid length. [ 115.570467][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 115.573246][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 115.575874][T10447] netlink: 'syz.1.1390': attribute type 13 has an invalid length. [ 115.579700][T10447] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 115.593697][ T40] audit: type=1400 audit(1735600329.252:588): avc: denied { setopt } for pid=10448 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.601960][T10444] veth1_macvtap: left promiscuous mode [ 115.604157][T10444] macsec0: entered promiscuous mode [ 115.606239][T10444] macsec0: entered allmulticast mode [ 115.614379][T10445] veth1_macvtap: entered promiscuous mode [ 115.616476][T10445] veth1_macvtap: entered allmulticast mode [ 115.618833][T10445] macsec0: left promiscuous mode [ 115.620727][T10445] macsec0: left allmulticast mode [ 115.622434][T10445] veth1_macvtap: left allmulticast mode [ 115.784228][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 115.787527][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 115.789245][T10474] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1399'. [ 115.793078][ T40] audit: type=1400 audit(1735600329.452:589): avc: denied { accept } for pid=10475 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.818874][ T40] audit: type=1400 audit(1735600329.472:590): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 115.864054][T10492] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 115.916496][ T40] audit: type=1400 audit(1735600329.572:591): avc: denied { read } for pid=10496 comm="syz.2.1407" path="socket:[47372]" dev="sockfs" ino=47372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 116.072107][T10499] can: request_module (can-proto-0) failed. [ 116.217953][T10525] /dev/sr0: Can't open blockdev [ 116.263631][T10534] netlink: 'syz.6.1420': attribute type 4 has an invalid length. [ 116.371218][T10543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.373395][T10543] IPv6: NLM_F_CREATE should be set when creating new route [ 116.378035][T10539] gtp0: entered promiscuous mode [ 116.528783][T10556] x_tables: duplicate underflow at hook 2 [ 116.635231][T10564] netlink: 'syz.6.1429': attribute type 4 has an invalid length. [ 116.807958][T10578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.810115][T10578] IPv6: NLM_F_CREATE should be set when creating new route [ 116.849643][ T40] audit: type=1326 audit(1735600330.512:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018785d29 code=0x7ffc0000 [ 116.857951][ T40] audit: type=1326 audit(1735600330.512:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0018785d29 code=0x7ffc0000 [ 116.927470][T10592] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1440'. [ 116.972585][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 117.116689][T10604] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.121516][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.305842][T10632] binder: 10630:10632 ioctl c00c620f 20000540 returned -22 [ 117.596919][ T58] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 117.744811][T10671] netlink: 'syz.5.1468': attribute type 4 has an invalid length. [ 117.746894][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 117.754053][ T58] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 117.763453][ T58] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.767512][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.771282][ T58] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.774799][ T58] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.778740][ T58] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.781460][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.923126][T10686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.996004][ T58] usb 6-1: GET_CAPABILITIES returned 0 [ 117.997785][ T58] usbtmc 6-1:16.0: can't read capabilities [ 118.226012][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.231728][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.318440][ T66] usb 6-1: USB disconnect, device number 13 [ 118.318968][T10717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.689975][T10744] netlink: zone id is out of range [ 118.691824][T10744] netlink: zone id is out of range [ 118.693568][T10744] netlink: zone id is out of range [ 118.700250][T10744] netlink: set zone limit has 8 unknown bytes [ 118.705052][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10745 comm=syz.6.1495 [ 118.802500][T10751] binder: 10748:10751 ioctl c018620c 20000100 returned -22 [ 118.894638][T10761] netlink: 'syz.5.1500': attribute type 2 has an invalid length. [ 119.190404][T10800] program syz.1.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.306915][ T25] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 119.468042][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 119.475302][ T25] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.478852][ T25] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.483256][T10832] jfs: Unknown parameter 'grpquotaOSS Sequencer Emulation' [ 119.487905][ T25] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 119.490880][ T25] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 119.493538][ T25] usb 11-1: Product: syz [ 119.494846][ T25] usb 11-1: Manufacturer: syz [ 119.496466][ T25] usb 11-1: SerialNumber: syz [ 119.510638][ T25] appletouch 11-1:1.0: Could not find int-in endpoint [ 119.512850][ T25] appletouch 11-1:1.0: probe with driver appletouch failed with error -5 [ 119.515775][ T25] usbhid 11-1:1.0: couldn't find an input interrupt endpoint [ 119.731889][T10845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10845 comm=syz.1.1529 [ 119.770019][T10789] ================================================================== [ 119.770028][T10789] BUG: KASAN: stack-out-of-bounds in sys_imageblit+0x1d95/0x21d0 [ 119.770060][T10789] Write of size 4 at addr ffffc9000523fca0 by task syz.6.1510/10789 [ 119.770072][T10789] [ 119.770077][T10789] CPU: 2 UID: 0 PID: 10789 Comm: syz.6.1510 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 119.770097][T10789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.770108][T10789] Call Trace: [ 119.770114][T10789] [ 119.770120][T10789] dump_stack_lvl+0x116/0x1f0 [ 119.770154][T10789] print_report+0xc3/0x620 [ 119.770177][T10789] ? __virt_addr_valid+0x5e/0x590 [ 119.770204][T10789] kasan_report+0xd9/0x110 [ 119.770225][T10789] ? sys_imageblit+0x1d95/0x21d0 [ 119.770255][T10789] ? sys_imageblit+0x1d95/0x21d0 [ 119.770291][T10789] sys_imageblit+0x1d95/0x21d0 [ 119.770327][T10789] ? __pfx_sys_imageblit+0x10/0x10 [ 119.770358][T10789] ? fb_pad_unaligned_buffer+0x3c1/0x470 [ 119.770377][T10789] ? __pfx___might_resched+0x10/0x10 [ 119.770401][T10789] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 119.770422][T10789] bit_putcs+0x90e/0xdf0 [ 119.770465][T10789] ? mark_lock+0xb5/0xc60 [ 119.770488][T10789] ? __pfx_bit_putcs+0x10/0x10 [ 119.770541][T10789] ? fb_get_color_depth+0x120/0x250 [ 119.770600][T10789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.770645][T10789] ? __pfx_bit_putcs+0x10/0x10 [ 119.770672][T10789] fbcon_putcs+0x364/0x480 [ 119.770703][T10789] do_update_region+0x2e6/0x3f0 [ 119.770736][T10789] ? __pfx_fbcon_invert_region+0x10/0x10 [ 119.770784][T10789] invert_screen+0x1da/0x570 [ 119.770828][T10789] ? __pfx_invert_screen+0x10/0x10 [ 119.770847][T10789] ? __pfx_complement_pos+0x10/0x10 [ 119.770866][T10789] ? trace_kmalloc+0x2d/0xd0 [ 119.770901][T10789] ? __kmalloc_noprof.cold+0x5c/0x61 [ 119.770930][T10789] ? __drm_fb_helper_restore_fbdev_mode_unlocked+0x11e/0x180 [ 119.770963][T10789] clear_selection+0x59/0x70 [ 119.771032][T10789] vc_do_resize+0xda1/0x10f0 [ 119.771094][T10789] ? __pfx_vc_do_resize+0x10/0x10 [ 119.771158][T10789] fbcon_set_disp+0x7a5/0xe00 [ 119.771188][T10789] set_con2fb_map+0x6fd/0x1060 [ 119.771232][T10789] fbcon_set_con2fb_map_ioctl+0x16d/0x220 [ 119.771258][T10789] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 119.771284][T10789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.771314][T10789] do_fb_ioctl+0x32a/0x7d0 [ 119.771338][T10789] ? __pfx_do_fb_ioctl+0x10/0x10 [ 119.771370][T10789] ? do_vfs_ioctl+0x513/0x1990 [ 119.771420][T10789] ? selinux_file_ioctl+0x180/0x270 [ 119.771456][T10789] fb_ioctl+0xe5/0x150 [ 119.771496][T10789] ? __pfx_fb_ioctl+0x10/0x10 [ 119.771531][T10789] __x64_sys_ioctl+0x190/0x200 [ 119.771560][T10789] do_syscall_64+0xcd/0x250 [ 119.771585][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.771620][T10789] RIP: 0033:0x7f2189585d29 [ 119.771636][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.771656][T10789] RSP: 002b:00007f218a35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.771675][T10789] RAX: ffffffffffffffda RBX: 00007f2189775fa0 RCX: 00007f2189585d29 [ 119.771688][T10789] RDX: 0000000020000140 RSI: 0000000000004610 RDI: 000000000000000a [ 119.771699][T10789] RBP: 00007f2189601b08 R08: 0000000000000000 R09: 0000000000000000 [ 119.771712][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.771723][T10789] R13: 0000000000000000 R14: 00007f2189775fa0 R15: 00007ffd489e0908 [ 119.771741][T10789] [ 119.771754][T10789] [ 119.771767][T10789] The buggy address belongs to the virtual mapping at [ 119.771767][T10789] [ffffc90005238000, ffffc90005241000) created by: [ 119.771767][T10789] kernel_clone+0xfd/0x960 [ 119.771801][T10789] [ 119.771806][T10789] The buggy address belongs to the physical page: [ 119.771813][T10789] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x235eb [ 119.771840][T10789] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 119.771864][T10789] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 119.771881][T10789] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 119.771902][T10789] page dumped because: kasan: bad access detected [ 119.771916][T10789] page_owner tracks the page as allocated [ 119.771922][T10789] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 39, tgid 39 (kworker/u32:2), ts 6116589842, free_ts 5988210129 [ 119.771958][T10789] post_alloc_hook+0x2d1/0x350 [ 119.771982][T10789] get_page_from_freelist+0xfce/0x2f80 [ 119.772003][T10789] __alloc_pages_noprof+0x223/0x25b0 [ 119.772033][T10789] alloc_pages_mpol_noprof+0x2c9/0x610 [ 119.772058][T10789] __vmalloc_node_range_noprof+0x724/0x1530 [ 119.772077][T10789] copy_process+0x2f06/0x8e50 [ 119.772100][T10789] kernel_clone+0xfd/0x960 [ 119.772127][T10789] user_mode_thread+0xb4/0xf0 [ 119.772204][T10789] call_usermodehelper_exec_work+0xcb/0x170 [ 119.772235][T10789] process_one_work+0x9c5/0x1ba0 [ 119.772267][T10789] worker_thread+0x6c8/0xf00 [ 119.772294][T10789] kthread+0x2c1/0x3a0 [ 119.772317][T10789] ret_from_fork+0x45/0x80 [ 119.772334][T10789] ret_from_fork_asm+0x1a/0x30 [ 119.772364][T10789] page last free pid 66 tgid 66 stack trace: [ 119.772379][T10789] free_unref_page+0x661/0x1080 [ 119.772408][T10789] vfree+0x174/0x950 [ 119.772434][T10789] delayed_vfree_work+0x56/0x70 [ 119.772456][T10789] process_one_work+0x9c5/0x1ba0 [ 119.772473][T10789] worker_thread+0x6c8/0xf00 [ 119.772498][T10789] kthread+0x2c1/0x3a0 [ 119.772522][T10789] ret_from_fork+0x45/0x80 [ 119.772538][T10789] ret_from_fork_asm+0x1a/0x30 [ 119.772580][T10789] [ 119.772584][T10789] Memory state around the buggy address: [ 119.772598][T10789] ffffc9000523fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.772615][T10789] ffffc9000523fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.772628][T10789] >ffffc9000523fc80: 00 00 00 00 f1 f1 f1 f1 f1 f1 04 f2 00 00 f2 f2 [ 119.772645][T10789] ^ [ 119.772659][T10789] ffffc9000523fd00: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 119.772672][T10789] ffffc9000523fd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.772682][T10789] ================================================================== [ 119.772804][T10789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.772822][T10789] CPU: 2 UID: 0 PID: 10789 Comm: syz.6.1510 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 119.772846][T10789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.772858][T10789] Call Trace: [ 119.772865][T10789] [ 119.772873][T10789] dump_stack_lvl+0x3d/0x1f0 [ 119.772899][T10789] panic+0x71d/0x800 [ 119.772938][T10789] ? __pfx_panic+0x10/0x10 [ 119.772976][T10789] ? preempt_schedule_thunk+0x1a/0x30 [ 119.773006][T10789] ? preempt_schedule_common+0x44/0xc0 [ 119.773033][T10789] check_panic_on_warn+0xab/0xb0 [ 119.773052][T10789] end_report+0x117/0x180 [ 119.773073][T10789] kasan_report+0xe9/0x110 [ 119.773091][T10789] ? sys_imageblit+0x1d95/0x21d0 [ 119.773117][T10789] ? sys_imageblit+0x1d95/0x21d0 [ 119.773145][T10789] sys_imageblit+0x1d95/0x21d0 [ 119.773186][T10789] ? __pfx_sys_imageblit+0x10/0x10 [ 119.773220][T10789] ? fb_pad_unaligned_buffer+0x3c1/0x470 [ 119.773245][T10789] ? __pfx___might_resched+0x10/0x10 [ 119.773280][T10789] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 119.773303][T10789] bit_putcs+0x90e/0xdf0 [ 119.773346][T10789] ? mark_lock+0xb5/0xc60 [ 119.773365][T10789] ? __pfx_bit_putcs+0x10/0x10 [ 119.773402][T10789] ? fb_get_color_depth+0x120/0x250 [ 119.773440][T10789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.773467][T10789] ? __pfx_bit_putcs+0x10/0x10 [ 119.773502][T10789] fbcon_putcs+0x364/0x480 [ 119.773526][T10789] do_update_region+0x2e6/0x3f0 [ 119.773553][T10789] ? __pfx_fbcon_invert_region+0x10/0x10 [ 119.773584][T10789] invert_screen+0x1da/0x570 [ 119.773602][T10789] ? __pfx_invert_screen+0x10/0x10 [ 119.773617][T10789] ? __pfx_complement_pos+0x10/0x10 [ 119.773641][T10789] ? trace_kmalloc+0x2d/0xd0 [ 119.773679][T10789] ? __kmalloc_noprof.cold+0x5c/0x61 [ 119.773714][T10789] ? __drm_fb_helper_restore_fbdev_mode_unlocked+0x11e/0x180 [ 119.773741][T10789] clear_selection+0x59/0x70 [ 119.773764][T10789] vc_do_resize+0xda1/0x10f0 [ 119.773824][T10789] ? __pfx_vc_do_resize+0x10/0x10 [ 119.773857][T10789] fbcon_set_disp+0x7a5/0xe00 [ 119.773876][T10789] set_con2fb_map+0x6fd/0x1060 [ 119.773890][T10789] fbcon_set_con2fb_map_ioctl+0x16d/0x220 [ 119.773902][T10789] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 119.773929][T10789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.773944][T10789] do_fb_ioctl+0x32a/0x7d0 [ 119.773958][T10789] ? __pfx_do_fb_ioctl+0x10/0x10 [ 119.773974][T10789] ? do_vfs_ioctl+0x513/0x1990 [ 119.774018][T10789] ? selinux_file_ioctl+0x180/0x270 [ 119.774048][T10789] fb_ioctl+0xe5/0x150 [ 119.774068][T10789] ? __pfx_fb_ioctl+0x10/0x10 [ 119.774092][T10789] __x64_sys_ioctl+0x190/0x200 [ 119.774122][T10789] do_syscall_64+0xcd/0x250 [ 119.774146][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.774161][T10789] RIP: 0033:0x7f2189585d29 [ 119.774178][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.774189][T10789] RSP: 002b:00007f218a35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.774201][T10789] RAX: ffffffffffffffda RBX: 00007f2189775fa0 RCX: 00007f2189585d29 [ 119.774208][T10789] RDX: 0000000020000140 RSI: 0000000000004610 RDI: 000000000000000a [ 119.774215][T10789] RBP: 00007f2189601b08 R08: 0000000000000000 R09: 0000000000000000 [ 119.774222][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.774229][T10789] R13: 0000000000000000 R14: 00007f2189775fa0 R15: 00007ffd489e0908 [ 119.774240][T10789] [ 119.774879][T10789] Kernel Offset: disabled VM DIAGNOSIS: 23:12:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff813f0720 RDX=ffff88805cbe0000 RSI=ffffffff813f0768 RDI=ffffffff937a5e20 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff26f4bc4 R10=ffffffff937a5e27 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813f0769 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f53d3ce56c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a600000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000020dd8000 CR4=00350ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00656572665f6568 6361635f6d656d6b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53d3002a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53d3002aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53d3002aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53d3002ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53d3002b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53d3002c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff813f0720 RDX=ffff88801d68c880 RSI=ffffffff813f0768 RDI=ffffffff937a5e20 RBP=0000000000000001 RSP=ffffc900006b0fd0 R8 =0000000000000001 R9 =fffffbfff26f4bc4 R10=ffffffff937a5e27 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813f0769 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555ed30808 CR3=000000003fbfa000 CR4=00350ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb9c26e80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05002a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05002aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05002aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05002ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05002b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca05002c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bcd75 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc900261a6fb0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000031 R14=ffffffff851bcd10 R15=0000000000000000 RIP=ffffffff851bcd9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f218a35c6c0 ffffffff 00c01300 GS =0000 ffff88806a800000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c405eb5 CR3=00000000298ea000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023436c6f72746e 6f632f646e732f76 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005b81cdcc268e1 c4ed660043ba6638 a76dc2c464d3c376 9d000f300f000080 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006faff1c2c4d901 0f0000fb72b90000 0005b81cdcc20004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a76dc2c464d3c376 9d000f300f000080 00ba00000000b800 0002b3b95c4d780f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff813f0720 RDX=ffff88805d420000 RSI=ffffffff813f0768 RDI=ffffffff937a5e20 RBP=0000000000000003 RSP=ffffc90000708fd0 R8 =0000000000000001 R9 =fffffbfff26f4bc4 R10=ffffffff937a5e27 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813f0769 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f001954d6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a900000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004cf7c000 CR4=00350ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3d2eb2b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0018802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000