last executing test programs: 6m10.78471882s ago: executing program 1 (id=760): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) ioctl$sock_inet_SIOCGARP(r3, 0x8954, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40080333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) (async) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd00000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8751db99173f4601}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x10001, 0xa5, &(0x7f00000001c0)=""/165, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xce7b, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_team\x00'}, 0x18) 6m10.034635482s ago: executing program 1 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x5}, @TCA_MPLS_PROTO={0x0, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESDEC=r3, @ANYRES64=r3, @ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20008016) 6m9.944726886s ago: executing program 1 (id=781): creat(&(0x7f00000001c0)='./file0\x00', 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fc0200000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b46b6e00000000000000000000000000000000000a00100080"], 0xcc}}, 0x0) mount$afs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, 0x0) 6m9.864162595s ago: executing program 1 (id=782): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) (async) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x6, 0x8000, 0x6, 0x1, 0x5}) (async) setpgid(r2, 0x0) setpgid(0x0, r2) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 6m9.845003271s ago: executing program 1 (id=784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x2a5d, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, 0x0, 0x0, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6m9.693854243s ago: executing program 1 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, r3, 0x11, 0x70bd2b, 0x25dfdbbd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6m9.621803838s ago: executing program 32 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, r3, 0x11, 0x70bd2b, 0x25dfdbbd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6m7.986313926s ago: executing program 4 (id=788): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd\x00') syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff2dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0027020000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB="3e9824c1ba98b4db94a70b10fbf3f3c6fc68f488582b142f202021edb1b7be910e53e745c2086cf4f93a2116c392e87e05", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) getdents64(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r5}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r11, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r10}, 0x10) socket$kcm(0x2, 0x1, 0x106) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r13, 0x0) preadv(r13, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000240), 0x3af4701e) 6m7.8418576s ago: executing program 4 (id=815): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f00000010c0)={0xd51, 0x42e, 0xd3, 0xfffffffe, 0x7f, 0x7, "7bfcfd11ddae41917dae6d7063732856", 0x5c, 0x3, 0x1, 0x4, 0x8, 0xff}) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80002) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000040)=[r7], &(0x7f0000000080), 0x1, 0x1}) r8 = syz_io_uring_setup(0x2b87, &(0x7f0000000480)={0x0, 0x1287, 0x10, 0x2, 0x336, 0x0, r4}, &(0x7f0000000500), &(0x7f0000000540)) r9 = socket$pppoe(0x18, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000005c0)={0xba1, 0x0, &(0x7f0000000580)=[r3, r9]}, 0x2) r10 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/197, 0xc5, 0x0, &(0x7f0000000340)=""/158, 0x9e}}, 0x10) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000c00000002000000000000000000e2652538fb0b1eca"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r13, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r14, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0x4, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES16=r15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xffffffffffffff9a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)) 6m7.094863154s ago: executing program 4 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x15c}}, 0x14) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r2, 0x1, {0x0, 0x1}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x20048090}, 0x40000) 6m7.092868971s ago: executing program 4 (id=823): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS(r0, 0x80047456, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x41}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001300290a00000000fbffffff07000000", @ANYRES32=r2, @ANYBLOB="008400000000000060000c8014000a80050008000610bf551995b2537db5306417001c0004001c000800028004000180380002803400018008000500070000000800100000000000080012000c00000008001a0005000000080008000800000008001f"], 0x80}, 0x1, 0x0, 0x0, 0x24008000}, 0x8804) 6m6.994334494s ago: executing program 4 (id=825): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000080)) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4}, {0x80000000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) connect$inet6(r2, &(0x7f00000000c0), 0x1c) (async) creat(&(0x7f0000000000)='./file0\x00', 0xb0) 6m6.994080109s ago: executing program 4 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc3f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x20000005, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9) 5m55.033736403s ago: executing program 3 (id=955): r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r0}, 0x0, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) 5m54.972809117s ago: executing program 3 (id=956): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f0000000200)}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/144, 0x90}], 0x3, &(0x7f0000001680)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/238, 0xee}, {&(0x7f00000015c0)=""/167, 0xa7}, {&(0x7f00000003c0)=""/60, 0x3c}], 0x5, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f043}) ppoll(&(0x7f0000000300)=[{r2, 0x2007}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}], 0x4f, 0x0, &(0x7f0000006280)="c8e52824324d3f880de821a79bbf3217b9fa43ea23effc77c23b598f7e69f2594c741a91ee9e4d067abca06bac6171845bc19e7204757371ee5897d0c5cf19a4df096cc61fe56c745a55c12f277220"}) fremovexattr(r1, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00') mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) syz_clone3(&(0x7f0000001cc0)={0x800000, &(0x7f0000001a40)=0xffffffffffffffff, &(0x7f0000001a80), &(0x7f0000001ac0), {0x2a}, &(0x7f0000001b00)=""/86, 0x56, &(0x7f0000001b80)=""/203, &(0x7f0000001c80)=[r0, r0], 0x2, {r1}}, 0x58) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r5, @ANYBLOB]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff97011210, 0x10, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r8, r9, 0x6, 0xfff7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000001d40)='./file0\x00', 0x2000, 0x20, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001e80)=0x0, &(0x7f0000001ec0), &(0x7f0000001f00)=0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r13, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f00000002c0)={0x50, 0x0, r14, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x3d, 0x0, 0x0, 0x2f}}, 0x50) syz_fuse_handle_req(r13, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0xffffffffffffffda, 0x20000101, {0x5, 0x4, 0x20, 0xffffffffff7ffffe, 0xa001, 0x202, {0x7, 0x20000000000200, 0x6, 0x4, 0x4, 0x800000002, 0x804, 0x9, 0x0, 0xc000, 0x2000000, 0x0, r15, 0x1ff, 0x4c3a4d6e}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000002080)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001700)="d056792650cb667026b6378ba7278f467c2734cf3a7d75548c824c539b10f3523fc45d50bd49540465e63c9f5af999bccee1815106dd32da65ea9332f873ef66f2a432850246547dafb8f28210d97e62997d0ed7a7e42245544c86f65ac0d73f93e548be453ec00363ab", 0x6a}, {&(0x7f0000001780)='RA', 0x2}], 0x2, &(0x7f0000006440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="180000000000fcff0000000001000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0008000000006bc5ab2720f5e716d79520000100000002000000", @ANYRESOCT=r11, @ANYRES32=r5, @ANYRES16=r12, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES64=r4, @ANYRES8=r13, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRESHEX=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x20000800}, 0x4048804) syz_io_uring_setup(0x2c11, &(0x7f0000000400)={0x0, 0x2, 0x4000, 0x5, 0x43}, 0x0, 0x0) 5m54.894696384s ago: executing program 3 (id=957): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x80, @mcast2}, 0x1}, 0x5c) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x4) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) (async) write$dsp(r3, &(0x7f00000004c0)='\x00', 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r5}, 0x18) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000}, 0x18) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r8, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="25d15f3e040000000400000022000000ad020200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00693fa2dfb07520000500a109"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r8, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000300012800c0001046d216301000100002000028008400100080000000a0000000008000700000000000825bd82", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) 5m54.894070421s ago: executing program 3 (id=958): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000040), &(0x7f0000000000)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 5m54.814569926s ago: executing program 3 (id=959): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0xfc93, 0x10100, 0x80000, 0x11e}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x81, 0x0, 0x0, 0x2, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 5m54.813733944s ago: executing program 3 (id=960): r0 = fanotify_init(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x28}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) membarrier(0x40, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m51.775900578s ago: executing program 33 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc3f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x20000005, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 9) 5m39.432238995s ago: executing program 34 (id=960): r0 = fanotify_init(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x28}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) membarrier(0x40, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m1.803343324s ago: executing program 5 (id=1499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf9, 0x6, "1391b5364669a599a7c84aa4decbe316d1754399ad86110719e74fc62a5ef0df47e77aeaf80e3dff9060ff41bc15b340a72171884de36b32f7892f7154f92949cd3b188aa98645e90f2aea965feb6dcfc30cda500e11fb43b7ed4aa00203d15a9ead9e0bdf27955b0f9404fc1beabb7eab70e48e4eeb82d04ef72731c6bf0dc59848f028c8b0558c06aea07d4cf5615b52a684c69552f7aef8c08250106837cef99d1dbec31e6ee3491ff8c0b1c46c0d0c1659de4db9d840e20f429f1fdefcfe3684d94047f0aef3e8d5f4573ab7031abb2d35a239d3331ea1d8de3a9d313a4f921b473f12ccc4ca1fe977daa3dead31bad89fad61"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x1a, 0x8, "0f94516a020ded0e5395e4f178c4c920bb11267d1572"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x17c}, 0x1, 0x0, 0x0, 0x970b208b435cbd7a}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xf9, 0x6, "1391b5364669a599a7c84aa4decbe316d1754399ad86110719e74fc62a5ef0df47e77aeaf80e3dff9060ff41bc15b340a72171884de36b32f7892f7154f92949cd3b188aa98645e90f2aea965feb6dcfc30cda500e11fb43b7ed4aa00203d15a9ead9e0bdf27955b0f9404fc1beabb7eab70e48e4eeb82d04ef72731c6bf0dc59848f028c8b0558c06aea07d4cf5615b52a684c69552f7aef8c08250106837cef99d1dbec31e6ee3491ff8c0b1c46c0d0c1659de4db9d840e20f429f1fdefcfe3684d94047f0aef3e8d5f4573ab7031abb2d35a239d3331ea1d8de3a9d313a4f921b473f12ccc4ca1fe977daa3dead31bad89fad61"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x1a, 0x8, "0f94516a020ded0e5395e4f178c4c920bb11267d1572"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x17c}, 0x1, 0x0, 0x0, 0x970b208b435cbd7a}, 0x80) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) 5m1.802381052s ago: executing program 5 (id=1501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000, 0x0, 0x2}, 0x0, 0xfdffff00}, [@sa={0xe4, 0x6, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x1, 0x4e20, 0x8, 0x2, 0x20, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xcd}, @in6=@mcast2, {0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xa, 0xeb}, {0x8001, 0xc, 0x4, 0x9}, {0x5, 0x3, 0xd15}, 0x70bd2c, 0x3505, 0xa, 0x0, 0x1, 0x2}}]}, 0x1dc}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$snapshot(r1, &(0x7f0000000400)=""/249, 0xf9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m1.73968278s ago: executing program 5 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) flock(0xffffffffffffffff, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101e00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x82f7, 0x10100, 0x20003}, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r3, 0x0, 0x1000, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x8a, 0xc9, "4f025c155d25693c"}}}, 0xe) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000400)={r11}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 5m0.841202816s ago: executing program 5 (id=1522): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001304000000000000000000000c", @ANYRES32=0x0, @ANYBLOB="11400200000000001c001394"], 0x3c}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0xffffffffffffffff, 0x4, 0x8}, 0x4}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x20000000) 5m0.776968673s ago: executing program 5 (id=1525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m0.423941384s ago: executing program 5 (id=1534): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ptype\x00') getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc02063a1, 0x0) 5m0.322101765s ago: executing program 35 (id=1534): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ptype\x00') getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc02063a1, 0x0) 4.676204841s ago: executing program 7 (id=4888): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="053f1600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.580402139s ago: executing program 7 (id=4889): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.580103314s ago: executing program 7 (id=4890): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x53f, 0x80000, @empty, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) 4.505541127s ago: executing program 7 (id=4891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r3, 0x25, 0x0, @void}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5}, 0x5) 4.505234699s ago: executing program 7 (id=4892): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="58000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb79164a1ccda391b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="66f97d67e1595c055897ff531edff11074ed0647a9c9863f4289223cdfad4b52cfb409ac4c76f1f3aca167660c61f73be45efb1baf97c49e"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f0b34e93ff62a9000070900becea55bca4a9755e6ab23b3c64f80"], 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000100)=""/101) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r1, &(0x7f00000007c0)={0x1, {&(0x7f0000002900)=""/4096, 0x1000, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000880)=""/196, 0xc4, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000a40)=""/181, 0xb5, 0x0, 0x3, 0x3}}, 0x48) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.326079658s ago: executing program 6 (id=4904): bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback, 0xfffffffe}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r1, 0xb, &(0x7f0000000340)={0x23, 0x7fff, 0x8000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xec, 0xfffffffffffffffe) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) socket(0x23, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) shutdown(r4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000002000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) 2.377430887s ago: executing program 6 (id=4909): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000000000850000008800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f00000072c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)='\"', 0x1}], 0x1}}], 0x1, 0x4000805) recvmsg(r2, &(0x7f0000002580)={&(0x7f0000000240)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002900)=[{&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/132, 0x84}, {&(0x7f0000002600)=""/205, 0xcd}, {&(0x7f0000002700)=""/235, 0xeb}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000002800)=""/232, 0xe8}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002500)=""/108, 0x6c}], 0xa, &(0x7f00000029c0)=""/245, 0xf5}, 0x40012160) recvfrom$inet(r2, &(0x7f0000000140)=""/241, 0xf1, 0x10001, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000300000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e02002000072836137a6000000000000000000080065"], 0x0) recvfrom(r1, &(0x7f0000000040)=""/6, 0x6, 0x0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}, 0x80) 2.114364031s ago: executing program 2 (id=4915): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 2.114216604s ago: executing program 2 (id=4916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640), 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 1.447584523s ago: executing program 0 (id=4924): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='%', 0x1}, {&(0x7f0000000240)="c8c597a1ec40d1bb4cd9ee9f5d6d2d3bb783576aa256c601038aece4bb6651483a0a189793e55aa5ead920e5071fe84827902f91ff25f280a3a8f6d8639b567bc17cf506c7c82225ffa7b2091fbe689dab4c78fef1e050d6be0741d1007efad5115ae2ba647816466a4da5ff29a939152f9e1e4c8aff83c69c13fece86e8dcab5e8ab66267787b57be81fb408e1c46244ea553b0557d32f1e63efe841bf26e5fb4d206", 0xa3}, {&(0x7f0000000380)="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", 0x151}, {&(0x7f0000000500)="cf99bd3f06ea9d3720b1a4409e7d8a175b8ca7f70ca5f64c57b299e410ad4cf724a6ac5a4efcfb824ac690be944356c706228fdc666a34abfba3a6c857d290c8b401ecae015c5be858471c772423cb113d1ac91b0d6d294eb9fbc6556bfe588ddc6fcbea7119ec918a168a2a7feed298e4850ac481ecc428c911e25d2da5eac3c57d7276b7790802bd305f7368632453", 0x90}], 0x4}}], 0x1, 0x20000040) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 1.447343499s ago: executing program 6 (id=4925): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000119000/0x3000)=nil, 0x3000, 0x200000b, 0x8010, r0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4000500, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a688ce34dd59008c65b56b463f82556bb2c1468fe771bfa7a8c8abcd4a09e3b00d7eaa7e207c34480858359b5f83d010cf143f43df050decbdabc8a636167c39e4ad957e883d79c066f0d0fe7f0c610f96178de2930091ddb9b483835f3f2e29c09ef454987f02a80b7241edd9b37a8dec9a1860ce0598481ea2ac6c7189f04b9796a1dec90f3a29438ddb9dc61e093ae18bba4f7ed28478cb48936943690aae9f668a647db99d210eff547297d78e0011817533d715ec365592ecf3662178ae4d8930992792b64204f8ac0cb8981caf936b674e210e4ad69711d78ed18df4af7267a96a6c300bb145c5f65a857fdd0e86e098888e170a2df05dbf1dab28706b1ff5bda716a18641b81b39b6ed3d01bc8f205b914bc8207cc159472ae3e9c55c55d86e53e1a7ab47519a85eb06bd135ab1eb6cbaaad64f3fed214d5628a6c39828ed95e896fb24fa370a49979aa963c5db583e8e21fe05470c35c46a8b334a11b87e92638e222ddbd9097be57059e9ba2ee1447380e8516292796a0d953db285793af32a1fa5fc2358b3fb0a21e1848caecfdb0c06e5bc6fa02a45f18dd8a4581ac3e21b09e2da3af7cde6c522296a6eb8232c481fe01b08b394f759cc2a7ce8d5731db74f6e49379d06a27f71c04ea93246b4a6806582091de9b11a56aa3a82f10b60463c6e62c3ac7ec3b3ade404ba28c73fbfa57e83dac30ad538706dfb59f2fb9f673b1db768009935530c90d21713839b7075d73ba3d7976f020c55721425fdce437a3ec4f9e12ce52ec5a7ce82a32fba0b934dbb19e5c9cbf5cbbef454916466ab3018c6ba6a41cb9612e5cf123d4795c3c579eea9a8bc20c638fc3b1a5ea99d0be7227a6b0c778c03fce09efce2ff0e79e54dc9d6a474d6b5ff5419f738c96f64efc53069bac804c981654e71a9a87", 0xc2a}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.234223219s ago: executing program 7 (id=4926): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x3e, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x200003}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) 1.148587156s ago: executing program 2 (id=4927): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d30", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.148194793s ago: executing program 2 (id=4928): ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000000)={0x1, 0x30000, 0xffffffff, 0x10, 0x10, 0x80, 0x2, 0x7, 0xffffffff, 0xc190, 0x100, 0x8, 0x0, 0x0, 0x0}) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x0, 0x7ff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.073594677s ago: executing program 2 (id=4929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'pim6reg1\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x0, 0x406, 0x0, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c064}, 0x4008000) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r12, 0x3b89, &(0x7f0000000080)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) 858.002245ms ago: executing program 2 (id=4930): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 528.499131ms ago: executing program 0 (id=4931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x0, 0x406, 0x0, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c064}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 4) 500.91395ms ago: executing program 6 (id=4932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 445.355745ms ago: executing program 6 (id=4933): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000202064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (fail_nth: 4) 415.79027ms ago: executing program 6 (id=4934): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 136.653092ms ago: executing program 0 (id=4935): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$isdn(0x22, 0x3, 0x26) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4044884) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) close_range(r0, r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x4e, &(0x7f0000000e40)=ANY=[@ANYBLOB="0dc7a907c4f062ef24b0bb06e75fd5702cb7c4e03d48f28d98c940da2f7a3c67f02bb739cf177920bc2608753ff1d38c144cbaf7143468ee0914b3a2ef1222e767b5dcebcaa46da97e4e967cf1e7d3a5c878ecca5266aaea7a90afbe951350f8e287a2503bab346415c307d9536388c2e56c47d896f1e367f99debdde555878a9d1e2c11f1e9e9e1073d37548ba4e6d3df8fb2bbf429508d9e299a2f2de073f0b5fac55805057dce4e9da3725d3c74316f6535f9d0ff253941240ddb13facbf9826255bd0b149633713bb1323a94cedaf9cdba0daf986e1fcd69afaf6cb50b0ac715bba5be6fa8f25f7c3a629ad9da6317e4ce355c65f17d"], 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000500)={0x2, 0x7f, 0xf, 0x30}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000340)={0x2, 0xffff1000, 0x4, r3, 0xb}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="96872564441f89ab898794a46d97438ac86b8d8998a458625a21da67b4c07f804b876e7a2bab6ba6d6291510a9ffe43799b3798b24013443603e3c920877ae5af593cc1983e7818c871a8a21a975477152b7e4b0a1553cf2ff3aa42757073d567763288d460e01aadac501415a8070cf6ea56b7476bdbd8e9752520f185d58ad90e885936f3fce908ee9acad62d02b2d1fc3b3f1ebba8d29f06c45dd4fa4"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x7a1901) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8640, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_AIE_OFF(r9, 0x7002) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="2f0000001800000004000000", @ANYRES32=r8, @ANYBLOB="1679a7b74deaae7ee2df69ff46673ffe63b61697f3ef53921bc61e1313d3bfad5c524728c6586520c17f3ce2e9df0213a737ce290b79ff8dead78f9a1dc02bc8fab18448b8ac76a1c41e0c6333e40e5f58e2cbd85b784e2e5e0bbdd344bcc6657e29621565dbe457a961cd980ef9063d6c1ba1af0b", @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'veth1_to_hsr\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r10}}, 0x18}}, 0x8001) 68.220481ms ago: executing program 0 (id=4936): timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000100)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket(0x1f, 0x0, 0x3) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x2f16) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc0b45545, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x7}) getsockopt$bt_BT_SECURITY(r4, 0x88, 0x68, 0x0, 0x20000000) 2.706777ms ago: executing program 0 (id=4937): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 0 (id=4938): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) kernel console output (not intermixed with test programs): 30543 Comm: syz.6.4595 Not tainted syzkaller #0 PREEMPT(full) [ 430.083286][T30543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 430.083293][T30543] Call Trace: [ 430.083297][T30543] [ 430.083302][T30543] dump_stack_lvl+0x16c/0x1f0 [ 430.083337][T30543] should_fail_ex+0x512/0x640 [ 430.083356][T30543] _copy_to_user+0x32/0xd0 [ 430.083373][T30543] simple_read_from_buffer+0xcb/0x170 [ 430.083386][T30543] proc_fail_nth_read+0x197/0x240 [ 430.083400][T30543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.083414][T30543] ? rw_verify_area+0xcf/0x6c0 [ 430.083432][T30543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.083445][T30543] vfs_read+0x1e4/0xcf0 [ 430.083458][T30543] ? __pfx___mutex_lock+0x10/0x10 [ 430.083476][T30543] ? __pfx_vfs_read+0x10/0x10 [ 430.083491][T30543] ? __fget_files+0x20e/0x3c0 [ 430.083508][T30543] ksys_read+0x12a/0x250 [ 430.083519][T30543] ? __pfx_ksys_read+0x10/0x10 [ 430.083531][T30543] ? fput+0x9b/0xd0 [ 430.083548][T30543] do_syscall_64+0xcd/0x4c0 [ 430.083562][T30543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.083575][T30543] RIP: 0033:0x7fcb0058d5fc [ 430.083585][T30543] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 430.083596][T30543] RSP: 002b:00007fcb014d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.083607][T30543] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058d5fc [ 430.083615][T30543] RDX: 000000000000000f RSI: 00007fcb014d00a0 RDI: 0000000000000005 [ 430.083621][T30543] RBP: 00007fcb014d0090 R08: 0000000000000000 R09: 0000000000000000 [ 430.083628][T30543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.083635][T30543] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 430.083649][T30543] [ 430.255231][T30554] FAULT_INJECTION: forcing a failure. [ 430.255231][T30554] name failslab, interval 1, probability 0, space 0, times 0 [ 430.261385][T30554] CPU: 2 UID: 0 PID: 30554 Comm: syz.6.4599 Not tainted syzkaller #0 PREEMPT(full) [ 430.261408][T30554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 430.261418][T30554] Call Trace: [ 430.261424][T30554] [ 430.261431][T30554] dump_stack_lvl+0x16c/0x1f0 [ 430.261453][T30554] should_fail_ex+0x512/0x640 [ 430.261471][T30554] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 430.261500][T30554] should_failslab+0xc2/0x120 [ 430.261519][T30554] __kmalloc_cache_noprof+0x6a/0x3e0 [ 430.261544][T30554] ? rcu_is_watching+0x12/0xc0 [ 430.261564][T30554] ? vhost_task_create+0xe5/0x2e0 [ 430.261583][T30554] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 430.261606][T30554] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 430.261633][T30554] vhost_task_create+0xe5/0x2e0 [ 430.261648][T30554] ? __pfx_vhost_task_create+0x10/0x10 [ 430.261672][T30554] ? __pfx_vhost_task_fn+0x10/0x10 [ 430.261701][T30554] kvm_mmu_post_init_vm+0x1b7/0x380 [ 430.261721][T30554] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 430.261745][T30554] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 430.261772][T30554] kvm_vcpu_ioctl+0x5eb/0x1690 [ 430.261796][T30554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 430.261818][T30554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 430.261839][T30554] ? do_vfs_ioctl+0x128/0x14f0 [ 430.261865][T30554] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 430.261890][T30554] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 430.261923][T30554] ? hook_file_ioctl_common+0x145/0x410 [ 430.261947][T30554] ? selinux_file_ioctl+0x180/0x270 [ 430.261969][T30554] ? selinux_file_ioctl+0xb4/0x270 [ 430.261993][T30554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 430.262016][T30554] __x64_sys_ioctl+0x18b/0x210 [ 430.262042][T30554] do_syscall_64+0xcd/0x4c0 [ 430.262063][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.262080][T30554] RIP: 0033:0x7fcb0058ebe9 [ 430.262093][T30554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.262108][T30554] RSP: 002b:00007fcb014d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.262124][T30554] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058ebe9 [ 430.262134][T30554] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 430.262144][T30554] RBP: 00007fcb014d0090 R08: 0000000000000000 R09: 0000000000000000 [ 430.262154][T30554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.262163][T30554] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 430.262187][T30554] [ 430.559099][T30564] tipc: Enabled bearer , priority 0 [ 430.563463][T30563] tipc: Resetting bearer [ 430.761164][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 431.183881][T30577] FAULT_INJECTION: forcing a failure. [ 431.183881][T30577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.190078][T30577] CPU: 2 UID: 0 PID: 30577 Comm: syz.2.4605 Not tainted syzkaller #0 PREEMPT(full) [ 431.190105][T30577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 431.190117][T30577] Call Trace: [ 431.190130][T30577] [ 431.190138][T30577] dump_stack_lvl+0x16c/0x1f0 [ 431.190164][T30577] should_fail_ex+0x512/0x640 [ 431.190190][T30577] _copy_from_user+0x2e/0xd0 [ 431.190215][T30577] __sys_bpf+0x21d/0x4de0 [ 431.190243][T30577] ? __pfx___sys_bpf+0x10/0x10 [ 431.190268][T30577] ? ksys_write+0x190/0x250 [ 431.190292][T30577] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 431.190329][T30577] ? fput+0x9b/0xd0 [ 431.190354][T30577] ? ksys_write+0x1ac/0x250 [ 431.190372][T30577] ? __pfx_ksys_write+0x10/0x10 [ 431.190395][T30577] __x64_sys_bpf+0x78/0xc0 [ 431.190419][T30577] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.190440][T30577] do_syscall_64+0xcd/0x4c0 [ 431.190464][T30577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.190484][T30577] RIP: 0033:0x7f48c498ebe9 [ 431.190500][T30577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.190519][T30577] RSP: 002b:00007f48c2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.190539][T30577] RAX: ffffffffffffffda RBX: 00007f48c4bb5fa0 RCX: 00007f48c498ebe9 [ 431.190552][T30577] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 431.190564][T30577] RBP: 00007f48c2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 431.190576][T30577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.190588][T30577] R13: 00007f48c4bb6038 R14: 00007f48c4bb5fa0 R15: 00007ffdfcc0c9d8 [ 431.190615][T30577] [ 431.338496][ T1331] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 431.502954][ T1331] usb 5-1: Using ep0 maxpacket: 32 [ 431.506761][ T1331] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 431.510585][ T1331] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 431.513546][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 431.517034][ T1331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.520637][ T1331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.524223][ T1331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.527462][ T1331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.530895][ T1331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 431.534941][ T1331] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 431.537787][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.542069][ T1331] usb 5-1: config 0 descriptor?? [ 431.755314][ T7805] tipc: Node number set to 3701028593 [ 431.790904][ T1331] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 431.798626][ T1331] usb 5-1: USB disconnect, device number 73 [ 431.803515][ T1331] usblp0: removed [ 431.873009][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 432.102353][T30563] tipc: Disabling bearer [ 432.214782][T30603] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4609'. [ 432.221236][T30603] tipc: Enabled bearer , priority 10 [ 432.262967][ T5972] Bluetooth: hci4: sending frame failed (-49) [ 432.266484][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 432.654018][ T8280] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 432.717749][ T7805] usb 12-1: new full-speed USB device number 56 using dummy_hcd [ 432.824408][ T8280] usb 5-1: Using ep0 maxpacket: 16 [ 432.827985][ T8280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.832448][ T8280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.835666][ T8280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.840782][ T8280] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.844329][ T8280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.849048][ T8280] usb 5-1: config 0 descriptor?? [ 432.891283][ T7805] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.895758][ T7805] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 432.900155][ T7805] usb 12-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 432.904031][ T7805] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.911649][ T7805] usb 12-1: config 0 descriptor?? [ 432.984937][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 433.282839][T30612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 433.286730][T30612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 433.292285][ T8280] usbhid 5-1:0.0: can't add hid device: -71 [ 433.294258][ T8280] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 433.298207][ T8280] usb 5-1: USB disconnect, device number 74 [ 433.720486][ T55] usb 12-1: USB disconnect, device number 56 [ 433.861498][T30650] tipc: Enabling of bearer rejected, already enabled [ 433.898087][T30652] tipc: Enabling of bearer rejected, already enabled [ 434.023270][T30661] syzkaller1: entered promiscuous mode [ 434.025012][T30661] syzkaller1: entered allmulticast mode [ 434.028242][T30661] FAULT_INJECTION: forcing a failure. [ 434.028242][T30661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.032290][T30661] CPU: 2 UID: 0 PID: 30661 Comm: syz.6.4621 Not tainted syzkaller #0 PREEMPT(full) [ 434.032305][T30661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.032322][T30661] Call Trace: [ 434.032328][T30661] [ 434.032333][T30661] dump_stack_lvl+0x16c/0x1f0 [ 434.032349][T30661] should_fail_ex+0x512/0x640 [ 434.032364][T30661] _copy_from_iter+0x29f/0x1720 [ 434.032382][T30661] ? __pfx__copy_from_iter+0x10/0x10 [ 434.032396][T30661] ? __lock_acquire+0xb97/0x1ce0 [ 434.032413][T30661] ? _parse_integer_limit+0x17f/0x1d0 [ 434.032426][T30661] ? _kstrtoull+0x145/0x200 [ 434.032436][T30661] ? __pfx__kstrtoull+0x10/0x10 [ 434.032448][T30661] tun_get_user+0x3d3/0x3ce0 [ 434.032471][T30661] ? __pfx_tun_get_user+0x10/0x10 [ 434.032487][T30661] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.032506][T30661] ? find_held_lock+0x2b/0x80 [ 434.032520][T30661] ? tun_get+0x191/0x370 [ 434.032537][T30661] tun_chr_write_iter+0xdc/0x210 [ 434.032554][T30661] vfs_write+0x7d0/0x11d0 [ 434.032567][T30661] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 434.032585][T30661] ? __pfx_vfs_write+0x10/0x10 [ 434.032595][T30661] ? find_held_lock+0x2b/0x80 [ 434.032617][T30661] ksys_write+0x12a/0x250 [ 434.032628][T30661] ? __pfx_ksys_write+0x10/0x10 [ 434.032644][T30661] do_syscall_64+0xcd/0x4c0 [ 434.032658][T30661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.032670][T30661] RIP: 0033:0x7fcb0058ebe9 [ 434.032680][T30661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.032691][T30661] RSP: 002b:00007fcb014d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.032702][T30661] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058ebe9 [ 434.032709][T30661] RDX: 0000000000000fce RSI: 0000200000000840 RDI: 0000000000000003 [ 434.032716][T30661] RBP: 00007fcb014d0090 R08: 0000000000000000 R09: 0000000000000000 [ 434.032722][T30661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.032729][T30661] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 434.032743][T30661] [ 434.111508][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 434.246231][ T1331] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 434.288007][T30671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 434.406689][ T1331] usb 5-1: Using ep0 maxpacket: 32 [ 434.410095][ T1331] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 434.412942][ T1331] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 434.415737][ T1331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 434.419438][ T1331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 434.423155][ T1331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 434.426293][ T1331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.430252][ T1331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 434.433830][ T1331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 434.438264][ T1331] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 434.441785][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.446715][ T1331] usb 5-1: config 0 descriptor?? [ 434.532545][T30686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4626'. [ 434.668940][ T1331] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 434.678955][ T1331] usb 5-1: USB disconnect, device number 75 [ 434.683690][ T1331] usblp0: removed [ 434.703021][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'. [ 434.706463][T30708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4630'. [ 434.709978][T30708] netlink: 'syz.2.4630': attribute type 19 has an invalid length. [ 434.742677][T30717] FAULT_INJECTION: forcing a failure. [ 434.742677][T30717] name failslab, interval 1, probability 0, space 0, times 0 [ 434.747062][T30717] CPU: 1 UID: 0 PID: 30717 Comm: syz.2.4631 Not tainted syzkaller #0 PREEMPT(full) [ 434.747079][T30717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.747087][T30717] Call Trace: [ 434.747092][T30717] [ 434.747097][T30717] dump_stack_lvl+0x16c/0x1f0 [ 434.747113][T30717] should_fail_ex+0x512/0x640 [ 434.747127][T30717] ? __kmalloc_noprof+0xbf/0x510 [ 434.747139][T30717] ? hci_alloc_dev_priv+0x1d/0x28a0 [ 434.747150][T30717] should_failslab+0xc2/0x120 [ 434.747164][T30717] __kmalloc_noprof+0xd2/0x510 [ 434.747178][T30717] hci_alloc_dev_priv+0x1d/0x28a0 [ 434.747189][T30717] hci_uart_tty_ioctl+0x38f/0xc30 [ 434.747205][T30717] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 434.747217][T30717] tty_ioctl+0x700/0x1680 [ 434.747230][T30717] ? __pfx_tty_ioctl+0x10/0x10 [ 434.747242][T30717] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 434.747266][T30717] ? hook_file_ioctl_common+0x145/0x410 [ 434.747282][T30717] ? selinux_file_ioctl+0x180/0x270 [ 434.747297][T30717] ? selinux_file_ioctl+0xb4/0x270 [ 434.747314][T30717] ? __pfx_tty_ioctl+0x10/0x10 [ 434.747326][T30717] __x64_sys_ioctl+0x18b/0x210 [ 434.747346][T30717] do_syscall_64+0xcd/0x4c0 [ 434.747360][T30717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.747372][T30717] RIP: 0033:0x7f48c498ebe9 [ 434.747381][T30717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.747393][T30717] RSP: 002b:00007f48c2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.747404][T30717] RAX: ffffffffffffffda RBX: 00007f48c4bb5fa0 RCX: 00007f48c498ebe9 [ 434.747412][T30717] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 434.747419][T30717] RBP: 00007f48c2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 434.747425][T30717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.747432][T30717] R13: 00007f48c4bb6038 R14: 00007f48c4bb5fa0 R15: 00007ffdfcc0c9d8 [ 434.747446][T30717] [ 434.747451][T30717] Bluetooth: Can't allocate HCI device [ 434.773233][T30719] program syz.7.4632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.122970][ T8196] usb 12-1: new full-speed USB device number 57 using dummy_hcd [ 435.219240][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 435.275127][T30742] FAULT_INJECTION: forcing a failure. [ 435.275127][T30742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.280686][T30742] CPU: 3 UID: 0 PID: 30742 Comm: syz.0.4638 Not tainted syzkaller #0 PREEMPT(full) [ 435.280712][T30742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.280723][T30742] Call Trace: [ 435.280730][T30742] [ 435.280738][T30742] dump_stack_lvl+0x16c/0x1f0 [ 435.280764][T30742] should_fail_ex+0x512/0x640 [ 435.280789][T30742] _copy_from_user+0x2e/0xd0 [ 435.280814][T30742] sctp_setsockopt+0x2045/0xb870 [ 435.280839][T30742] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 435.280869][T30742] ? __pfx_sctp_setsockopt+0x10/0x10 [ 435.280893][T30742] ? find_held_lock+0x2b/0x80 [ 435.280921][T30742] ? selinux_socket_setsockopt+0x6a/0x80 [ 435.280943][T30742] ? sock_common_setsockopt+0x2e/0xf0 [ 435.280966][T30742] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 435.280991][T30742] do_sock_setsockopt+0xf3/0x1d0 [ 435.281018][T30742] __sys_setsockopt+0x1a0/0x230 [ 435.281041][T30742] __x64_sys_setsockopt+0xbd/0x160 [ 435.281059][T30742] ? do_syscall_64+0x91/0x4c0 [ 435.281079][T30742] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.281098][T30742] do_syscall_64+0xcd/0x4c0 [ 435.281120][T30742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.281139][T30742] RIP: 0033:0x7f163e78ebe9 [ 435.281154][T30742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.281172][T30742] RSP: 002b:00007f163f648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.281190][T30742] RAX: ffffffffffffffda RBX: 00007f163e9b5fa0 RCX: 00007f163e78ebe9 [ 435.281202][T30742] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 435.281214][T30742] RBP: 00007f163f648090 R08: 000000000001000f R09: 0000000000000000 [ 435.281225][T30742] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 435.281236][T30742] R13: 00007f163e9b6038 R14: 00007f163e9b5fa0 R15: 00007ffcc0bb7858 [ 435.281260][T30742] [ 435.296665][ T8196] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.353860][ T8196] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.357118][ T8196] usb 12-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 435.360273][ T8196] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.364528][ T8196] usb 12-1: config 0 descriptor?? [ 435.443591][ T6050] usb 11-1: new full-speed USB device number 28 using dummy_hcd [ 435.636017][ T6050] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.639617][ T6050] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.643197][ T6050] usb 11-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 435.646161][ T6050] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.657979][ T6050] usb 11-1: config 0 descriptor?? [ 435.857003][T30759] tipc: Enabled bearer , priority 0 [ 435.863850][T30759] syzkaller0: entered promiscuous mode [ 435.865997][T30759] syzkaller0: entered allmulticast mode [ 435.875025][T30759] tipc: Resetting bearer [ 435.879822][T30758] tipc: Resetting bearer [ 435.894818][T30758] tipc: Disabling bearer [ 435.998868][ T29] usb 12-1: USB disconnect, device number 57 [ 436.320313][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 436.424324][T30775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4644'. [ 436.754332][T30796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.757727][T30796] block device autoloading is deprecated and will be removed. [ 436.822502][ T40] audit: type=1400 audit(1756152518.376:31625): avc: denied { setattr } for pid=30801 comm="syz.0.4653" name="CAN_RAW" dev="sockfs" ino=86275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.833644][ T29] usb 12-1: new high-speed USB device number 58 using dummy_hcd [ 436.876575][ T40] audit: type=1400 audit(1756152518.432:31626): avc: denied { setopt } for pid=30801 comm="syz.0.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 436.918627][ T40] audit: type=1400 audit(1756152518.460:31627): avc: denied { read } for pid=30803 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 436.927044][ T40] audit: type=1400 audit(1756152518.479:31628): avc: denied { listen } for pid=30803 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 436.992168][T30813] FAULT_INJECTION: forcing a failure. [ 436.992168][T30813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.997764][T30813] CPU: 1 UID: 0 PID: 30813 Comm: syz.0.4657 Not tainted syzkaller #0 PREEMPT(full) [ 436.997781][T30813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 436.997788][T30813] Call Trace: [ 436.997792][T30813] [ 436.997797][T30813] dump_stack_lvl+0x16c/0x1f0 [ 436.997814][T30813] should_fail_ex+0x512/0x640 [ 436.997841][T30813] _copy_from_user+0x2e/0xd0 [ 436.997859][T30813] inet_ioctl+0x31c/0x3f0 [ 436.997876][T30813] ? __pfx_inet_ioctl+0x10/0x10 [ 436.997899][T30813] ? tomoyo_path_number_perm+0x18d/0x580 [ 436.997919][T30813] sock_do_ioctl+0x115/0x280 [ 436.997935][T30813] ? __pfx_sock_do_ioctl+0x10/0x10 [ 436.997953][T30813] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 436.997971][T30813] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 436.997991][T30813] sock_ioctl+0x227/0x6b0 [ 436.998012][T30813] ? __pfx_sock_ioctl+0x10/0x10 [ 436.998027][T30813] ? hook_file_ioctl_common+0x145/0x410 [ 436.998043][T30813] ? selinux_file_ioctl+0x180/0x270 [ 436.998059][T30813] ? selinux_file_ioctl+0xb4/0x270 [ 436.998075][T30813] ? __pfx_sock_ioctl+0x10/0x10 [ 436.998092][T30813] __x64_sys_ioctl+0x18b/0x210 [ 436.998110][T30813] do_syscall_64+0xcd/0x4c0 [ 436.998124][T30813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.998137][T30813] RIP: 0033:0x7f163e78ebe9 [ 436.998146][T30813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.998157][T30813] RSP: 002b:00007f163f648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.998168][T30813] RAX: ffffffffffffffda RBX: 00007f163e9b5fa0 RCX: 00007f163e78ebe9 [ 436.998176][T30813] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 436.998182][T30813] RBP: 00007f163f648090 R08: 0000000000000000 R09: 0000000000000000 [ 436.998189][T30813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.998195][T30813] R13: 00007f163e9b6038 R14: 00007f163e9b5fa0 R15: 00007ffcc0bb7858 [ 436.998209][T30813] [ 437.072156][ T29] usb 12-1: Using ep0 maxpacket: 32 [ 437.075873][ T29] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 437.078635][ T29] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 437.082131][ T29] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 437.084912][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 437.087897][ T29] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 437.091709][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.095403][ T29] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 437.098452][ T29] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 437.102762][ T29] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 437.105672][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.110066][ T29] usb 12-1: config 0 descriptor?? [ 437.241802][T30821] kvm: pic: non byte write [ 437.333080][ T29] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 437.340456][ T29] usb 12-1: USB disconnect, device number 58 [ 437.345643][ T29] usblp0: removed [ 437.354602][ T40] audit: type=1400 audit(1756152518.872:31629): avc: denied { sqpoll } for pid=30820 comm="syz.0.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 437.432210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 437.572131][ T5979] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 437.572966][ T40] audit: type=1326 audit(1756152519.087:31630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.0.4662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e78ebe9 code=0x50000 [ 437.583578][ T40] audit: type=1326 audit(1756152519.087:31631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.0.4662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e78ebe9 code=0x50000 [ 437.591111][ T40] audit: type=1326 audit(1756152519.087:31632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.0.4662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e78ebe9 code=0x50000 [ 437.598612][ T40] audit: type=1326 audit(1756152519.087:31633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.0.4662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e78ebe9 code=0x50000 [ 437.605778][ T40] audit: type=1326 audit(1756152519.087:31634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30839 comm="syz.0.4662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163e78ebe9 code=0x50000 [ 438.159283][ T55] usb 12-1: new high-speed USB device number 59 using dummy_hcd [ 438.330092][ T55] usb 12-1: Using ep0 maxpacket: 8 [ 438.334215][ T55] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 438.337632][ T55] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.341944][ T55] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.345900][ T55] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.350023][ T55] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.355422][ T55] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.359158][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.412282][ T29] usb 11-1: USB disconnect, device number 28 [ 438.554677][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 438.582192][ T55] usb 12-1: usb_control_msg returned -32 [ 438.583990][ T55] usbtmc 12-1:16.0: can't read capabilities [ 438.800532][ T29] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 438.959564][T30879] usbtmc 12-1:16.0: usb_bulk_msg returned -71 [ 438.960808][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 438.965053][ T29] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 438.967656][ T29] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.970538][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.974556][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.978101][ T29] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.982990][ T29] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.986051][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.003620][ T55] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 439.163896][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 439.167158][ T55] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 439.170647][ T55] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 439.174201][ T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 439.174876][ T6050] usb 12-1: USB disconnect, device number 59 [ 439.178204][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 439.184537][ T55] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 439.188895][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.192449][ T55] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.195562][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 439.199799][ T55] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 439.202937][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.206261][ T29] usb 11-1: usb_control_msg returned -32 [ 439.208684][ T29] usbtmc 11-1:16.0: can't read capabilities [ 439.211419][ T55] usb 5-1: config 0 descriptor?? [ 439.436051][ T55] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 439.444313][ T55] usb 5-1: USB disconnect, device number 76 [ 439.452014][ T55] usblp1: removed [ 439.582326][T30906] FAULT_INJECTION: forcing a failure. [ 439.582326][T30906] name failslab, interval 1, probability 0, space 0, times 0 [ 439.586417][T30906] CPU: 1 UID: 0 PID: 30906 Comm: syz.6.4664 Not tainted syzkaller #0 PREEMPT(full) [ 439.586434][T30906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.586441][T30906] Call Trace: [ 439.586447][T30906] [ 439.586452][T30906] dump_stack_lvl+0x16c/0x1f0 [ 439.586470][T30906] should_fail_ex+0x512/0x640 [ 439.586484][T30906] ? fs_reclaim_acquire+0xae/0x150 [ 439.586500][T30906] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 439.586518][T30906] should_failslab+0xc2/0x120 [ 439.586532][T30906] __kmalloc_noprof+0xd2/0x510 [ 439.586549][T30906] tomoyo_realpath_from_path+0xc2/0x6e0 [ 439.586569][T30906] ? tomoyo_profile+0x47/0x60 [ 439.586581][T30906] tomoyo_path_number_perm+0x245/0x580 [ 439.586596][T30906] ? tomoyo_path_number_perm+0x237/0x580 [ 439.586612][T30906] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 439.586628][T30906] ? find_held_lock+0x2b/0x80 [ 439.586656][T30906] ? find_held_lock+0x2b/0x80 [ 439.586669][T30906] ? hook_file_ioctl_common+0x145/0x410 [ 439.586685][T30906] ? __fget_files+0x20e/0x3c0 [ 439.586700][T30906] security_file_ioctl+0x9b/0x240 [ 439.586718][T30906] __x64_sys_ioctl+0xb7/0x210 [ 439.586736][T30906] do_syscall_64+0xcd/0x4c0 [ 439.586751][T30906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.586764][T30906] RIP: 0033:0x7fcb0058ebe9 [ 439.586774][T30906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.586785][T30906] RSP: 002b:00007fcb014af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.586814][T30906] RAX: ffffffffffffffda RBX: 00007fcb007b6090 RCX: 00007fcb0058ebe9 [ 439.586822][T30906] RDX: 0000000000000000 RSI: 0000000000005b04 RDI: 0000000000000004 [ 439.586829][T30906] RBP: 00007fcb014af090 R08: 0000000000000000 R09: 0000000000000000 [ 439.586836][T30906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.586842][T30906] R13: 00007fcb007b6128 R14: 00007fcb007b6090 R15: 00007ffe7d746648 [ 439.586857][T30906] [ 439.586863][T30906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 439.654577][T30906] usbtmc 11-1:16.0: usb_bulk_msg returned -71 [ 439.666513][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 439.853520][T30925] syz.7.4674 uses old SIOCAX25GETINFO [ 439.870157][ T8280] usb 11-1: USB disconnect, device number 29 [ 440.222344][ T1331] usb 12-1: new high-speed USB device number 60 using dummy_hcd [ 440.393449][ T1331] usb 12-1: Using ep0 maxpacket: 32 [ 440.397280][ T1331] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 440.400232][ T1331] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 440.403573][ T1331] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 440.406720][ T1331] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 440.409907][ T1331] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 440.412954][ T1331] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 440.417873][ T1331] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 440.421526][ T1331] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.428339][ T1331] usb 12-1: config 0 descriptor?? [ 440.443383][T30976] FAULT_INJECTION: forcing a failure. [ 440.443383][T30976] name failslab, interval 1, probability 0, space 0, times 0 [ 440.451472][T30976] CPU: 0 UID: 0 PID: 30976 Comm: syz.6.4686 Not tainted syzkaller #0 PREEMPT(full) [ 440.451495][T30976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.451505][T30976] Call Trace: [ 440.451511][T30976] [ 440.451518][T30976] dump_stack_lvl+0x16c/0x1f0 [ 440.451541][T30976] should_fail_ex+0x512/0x640 [ 440.451558][T30976] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 440.451578][T30976] should_failslab+0xc2/0x120 [ 440.451596][T30976] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 440.451611][T30976] ? __alloc_skb+0x2b2/0x380 [ 440.451630][T30976] __alloc_skb+0x2b2/0x380 [ 440.451644][T30976] ? __pfx___alloc_skb+0x10/0x10 [ 440.451668][T30976] alloc_skb_with_frags+0xe0/0x860 [ 440.451687][T30976] ? __might_fault+0xe3/0x190 [ 440.451701][T30976] ? __might_fault+0x13b/0x190 [ 440.451720][T30976] sock_alloc_send_pskb+0x7fb/0x990 [ 440.451737][T30976] ? _copy_from_iter+0x15d/0x1720 [ 440.451762][T30976] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 440.451777][T30976] ? find_held_lock+0x2b/0x80 [ 440.451798][T30976] ? dev_get_by_index+0x17c/0x380 [ 440.451821][T30976] packet_sendmsg+0x2054/0x5850 [ 440.451850][T30976] ? sock_has_perm+0x259/0x2f0 [ 440.451869][T30976] ? __pfx_sock_has_perm+0x10/0x10 [ 440.451892][T30976] ? __pfx_packet_sendmsg+0x10/0x10 [ 440.451922][T30976] __sys_sendto+0x4a3/0x520 [ 440.451939][T30976] ? __pfx___sys_sendto+0x10/0x10 [ 440.451976][T30976] ? ksys_write+0x1ac/0x250 [ 440.451995][T30976] ? __pfx_ksys_write+0x10/0x10 [ 440.452023][T30976] __x64_sys_sendto+0xe0/0x1c0 [ 440.452039][T30976] ? do_syscall_64+0x91/0x4c0 [ 440.452058][T30976] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.452077][T30976] do_syscall_64+0xcd/0x4c0 [ 440.452098][T30976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.452118][T30976] RIP: 0033:0x7fcb0058ebe9 [ 440.452132][T30976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.452149][T30976] RSP: 002b:00007fcb014d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 440.452166][T30976] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058ebe9 [ 440.452178][T30976] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000003 [ 440.452188][T30976] RBP: 00007fcb014d0090 R08: 0000200000000300 R09: 0000000000000014 [ 440.452199][T30976] R10: 0000000024000801 R11: 0000000000000246 R12: 0000000000000001 [ 440.452210][T30976] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 440.452234][T30976] [ 440.653351][ T1331] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 440.659029][ T1331] usb 12-1: USB disconnect, device number 60 [ 440.663299][ T1331] usblp0: removed [ 440.692885][ T8199] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 440.767819][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 440.874481][ T8199] usb 5-1: Using ep0 maxpacket: 32 [ 440.878153][ T8199] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 440.880973][ T8199] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 440.883713][ T8199] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 440.886553][ T8199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 440.889630][ T8199] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 440.892727][ T8199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 440.896121][ T8199] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 440.899132][ T8199] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 440.903226][ T8199] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 440.906119][ T8199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.910976][ T8199] usb 5-1: config 0 descriptor?? [ 441.132154][ T8199] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 441.138141][ T8199] usb 5-1: USB disconnect, device number 77 [ 441.142324][ T8199] usblp0: removed [ 441.518870][T31022] trusted_key: encrypted_key: insufficient parameters specified [ 441.744654][T31028] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4695'. [ 441.851391][T31034] qnx6: unable to set blocksize [ 441.879406][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 441.881784][ T5979] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 441.884730][ T5979] Bluetooth: hci0: Injecting HCI hardware error event [ 441.889208][ T5972] Bluetooth: hci0: hardware error 0x00 [ 442.575048][T31068] FAULT_INJECTION: forcing a failure. [ 442.575048][T31068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.582259][T31068] CPU: 0 UID: 0 PID: 31068 Comm: syz.7.4706 Not tainted syzkaller #0 PREEMPT(full) [ 442.582288][T31068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 442.582300][T31068] Call Trace: [ 442.582309][T31068] [ 442.582318][T31068] dump_stack_lvl+0x16c/0x1f0 [ 442.582346][T31068] should_fail_ex+0x512/0x640 [ 442.582372][T31068] _copy_from_user+0x2e/0xd0 [ 442.582399][T31068] kstrtouint_from_user+0xd6/0x1d0 [ 442.582420][T31068] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 442.582497][T31068] ? __lock_acquire+0xb97/0x1ce0 [ 442.582542][T31068] proc_fail_nth_write+0x83/0x220 [ 442.582567][T31068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.582598][T31068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 442.582620][T31068] vfs_write+0x29d/0x11d0 [ 442.582646][T31068] ? __pfx___mutex_lock+0x10/0x10 [ 442.582668][T31068] ? __pfx_vfs_write+0x10/0x10 [ 442.582697][T31068] ? __fget_files+0x20e/0x3c0 [ 442.582728][T31068] ksys_write+0x12a/0x250 [ 442.582748][T31068] ? __pfx_ksys_write+0x10/0x10 [ 442.582802][T31068] do_syscall_64+0xcd/0x4c0 [ 442.582829][T31068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.582850][T31068] RIP: 0033:0x7f8b2a38d69f [ 442.582866][T31068] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 442.582885][T31068] RSP: 002b:00007f8b2b21a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 442.582905][T31068] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b2a38d69f [ 442.582918][T31068] RDX: 0000000000000001 RSI: 00007f8b2b21a0a0 RDI: 0000000000000003 [ 442.582930][T31068] RBP: 00007f8b2b21a090 R08: 0000000000000000 R09: 0000000000000000 [ 442.582941][T31068] R10: 0000000020004840 R11: 0000000000000293 R12: 0000000000000001 [ 442.582954][T31068] R13: 00007f8b2a5b6128 R14: 00007f8b2a5b6090 R15: 00007fffc6fdc048 [ 442.582981][T31068] [ 442.959092][T31074] sch_fq: defrate 4294967295 ignored. [ 442.983610][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 442.983623][ T40] audit: type=1400 audit(1756152524.148:31821): avc: denied { append } for pid=31071 comm="syz.0.4708" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 442.995997][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 443.098852][T31079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4709'. [ 443.818365][T31093] trusted_key: encrypted_key: insufficient parameters specified [ 443.850718][ T40] audit: type=1326 audit(1756152524.952:31822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.861868][ T40] audit: type=1326 audit(1756152524.952:31823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.878439][ T40] audit: type=1326 audit(1756152524.952:31824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.885425][ T40] audit: type=1326 audit(1756152524.952:31825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.896178][ T40] audit: type=1326 audit(1756152524.952:31826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.904892][ T40] audit: type=1326 audit(1756152524.952:31827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.912175][ T40] audit: type=1326 audit(1756152524.952:31828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.919635][ T40] audit: type=1326 audit(1756152524.952:31829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 443.927328][ T40] audit: type=1326 audit(1756152524.952:31830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31073 comm="syz.2.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c498ebe9 code=0x7fc00000 [ 444.103039][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 444.105352][ T5972] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 444.808573][ T7805] usb 12-1: new full-speed USB device number 61 using dummy_hcd [ 444.982596][ T7805] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.986917][ T7805] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.990955][ T7805] usb 12-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 444.994639][ T7805] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.000401][ T7805] usb 12-1: config 0 descriptor?? [ 445.214988][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 445.369220][ T7805] usb 12-1: USB disconnect, device number 61 [ 446.326771][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 446.430694][T31145] trusted_key: encrypted_key: insufficient parameters specified [ 446.968067][ T55] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 447.149817][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 447.153758][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.157692][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.162068][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.166067][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.171618][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.175278][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.400982][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 447.402778][ T55] usbtmc 5-1:16.0: can't read capabilities [ 447.438506][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.449142][ T7805] usb 12-1: new high-speed USB device number 62 using dummy_hcd [ 447.609567][ T7805] usb 12-1: Using ep0 maxpacket: 8 [ 447.613254][ T7805] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.616571][T31150] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 447.616622][ T7805] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.622988][ T7805] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.623837][ T8199] usb 5-1: USB disconnect, device number 78 [ 447.626217][ T7805] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.633804][ T7805] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.637796][ T7805] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.857817][ T7805] usb 12-1: GET_CAPABILITIES returned 0 [ 447.859674][ T7805] usbtmc 12-1:16.0: can't read capabilities [ 448.072230][T31158] FAULT_INJECTION: forcing a failure. [ 448.072230][T31158] name failslab, interval 1, probability 0, space 0, times 0 [ 448.076710][T31158] CPU: 3 UID: 0 PID: 31158 Comm: syz.7.4726 Not tainted syzkaller #0 PREEMPT(full) [ 448.076727][T31158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 448.076735][T31158] Call Trace: [ 448.076740][T31158] [ 448.076745][T31158] dump_stack_lvl+0x16c/0x1f0 [ 448.076762][T31158] should_fail_ex+0x512/0x640 [ 448.076774][T31158] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 448.076793][T31158] should_failslab+0xc2/0x120 [ 448.076806][T31158] __kmalloc_cache_noprof+0x6a/0x3e0 [ 448.076824][T31158] ? usbtmc_read+0x130/0x13f0 [ 448.076842][T31158] usbtmc_read+0x130/0x13f0 [ 448.076860][T31158] ? __pfx_usbtmc_read+0x10/0x10 [ 448.076879][T31158] ? bpf_lsm_file_permission+0x9/0x10 [ 448.076894][T31158] ? security_file_permission+0x71/0x210 [ 448.076912][T31158] ? rw_verify_area+0xcf/0x6c0 [ 448.076930][T31158] ? __pfx_usbtmc_read+0x10/0x10 [ 448.076945][T31158] vfs_read+0x1e4/0xcf0 [ 448.076959][T31158] ? __pfx_vfs_read+0x10/0x10 [ 448.076969][T31158] ? find_held_lock+0x2b/0x80 [ 448.076984][T31158] ? __fget_files+0x204/0x3c0 [ 448.076999][T31158] ? __fget_files+0x20e/0x3c0 [ 448.077016][T31158] ksys_read+0x12a/0x250 [ 448.077027][T31158] ? __pfx_ksys_read+0x10/0x10 [ 448.077043][T31158] do_syscall_64+0xcd/0x4c0 [ 448.077057][T31158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.077069][T31158] RIP: 0033:0x7f8b2a38ebe9 [ 448.077078][T31158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.077091][T31158] RSP: 002b:00007f8b2b23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.077102][T31158] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38ebe9 [ 448.077109][T31158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 448.077116][T31158] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000000 [ 448.077122][T31158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.077129][T31158] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 448.077143][T31158] [ 448.078177][ T7805] usb 12-1: USB disconnect, device number 62 [ 448.496839][ T8196] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 448.550393][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 448.642260][T31203] overlayfs: failed to resolve './file0': -2 [ 448.657214][ T8196] usb 5-1: Using ep0 maxpacket: 32 [ 448.660695][ T8196] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 448.663395][ T8196] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 448.666054][ T8196] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 448.669200][ T8196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.672223][ T8196] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 448.675211][ T8196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.678246][ T8196] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 448.681899][ T8196] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 448.685926][ T8196] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 448.688829][ T8196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.693041][ T8196] usb 5-1: config 0 descriptor?? [ 448.908152][T31221] trusted_key: encrypted_key: insufficient parameters specified [ 448.919515][ T8196] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 448.928510][ T8196] usb 5-1: USB disconnect, device number 79 [ 448.932364][ T8196] usblp0: removed [ 449.662266][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 449.747646][ T7805] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 449.778871][T31247] FAULT_INJECTION: forcing a failure. [ 449.778871][T31247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.783150][T31247] CPU: 3 UID: 0 PID: 31247 Comm: syz.7.4739 Not tainted syzkaller #0 PREEMPT(full) [ 449.783166][T31247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.783174][T31247] Call Trace: [ 449.783178][T31247] [ 449.783182][T31247] dump_stack_lvl+0x16c/0x1f0 [ 449.783199][T31247] should_fail_ex+0x512/0x640 [ 449.783215][T31247] _copy_from_iter+0x29f/0x1720 [ 449.783231][T31247] ? __alloc_skb+0x200/0x380 [ 449.783243][T31247] ? __pfx__copy_from_iter+0x10/0x10 [ 449.783259][T31247] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 449.783277][T31247] netlink_sendmsg+0x829/0xdd0 [ 449.783293][T31247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.783311][T31247] ____sys_sendmsg+0xa95/0xc70 [ 449.783327][T31247] ? copy_msghdr_from_user+0x10a/0x160 [ 449.783340][T31247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.783362][T31247] ___sys_sendmsg+0x134/0x1d0 [ 449.783375][T31247] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.783403][T31247] __sys_sendmsg+0x16d/0x220 [ 449.783415][T31247] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.783436][T31247] do_syscall_64+0xcd/0x4c0 [ 449.783450][T31247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.783462][T31247] RIP: 0033:0x7f8b2a38ebe9 [ 449.783472][T31247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.783484][T31247] RSP: 002b:00007f8b2b23b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.783495][T31247] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38ebe9 [ 449.783502][T31247] RDX: 00000000240448e0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 449.783509][T31247] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000000 [ 449.783516][T31247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.783522][T31247] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 449.783536][T31247] [ 449.933726][ T7805] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 449.936396][ T7805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.940510][ T7805] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 449.943393][ T7805] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 449.946045][ T7805] usb 5-1: Manufacturer: syz [ 449.949805][ T7805] usb 5-1: config 0 descriptor?? [ 450.015384][ T7805] rc_core: IR keymap rc-hauppauge not found [ 450.017339][ T7805] Registered IR keymap rc-empty [ 450.019734][ T7805] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 450.024260][ T7805] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 450.070720][T31280] tipc: Enabled bearer , priority 0 [ 450.073767][T31280] syzkaller0: entered promiscuous mode [ 450.075533][T31280] syzkaller0: entered allmulticast mode [ 450.081524][T31280] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 450.095167][T31280] tipc: Resetting bearer [ 450.098328][T31279] tipc: Resetting bearer [ 450.117242][T31279] tipc: Disabling bearer [ 450.170349][ C3] igorplugusb 5-1:0.0: Error: urb status = -32 [ 450.173588][ T7805] usb 5-1: USB disconnect, device number 80 [ 450.281943][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 450.281955][ T40] audit: type=1400 audit(1756152530.967:31890): avc: denied { connect } for pid=31307 comm="syz.7.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 450.408437][T31314] FAULT_INJECTION: forcing a failure. [ 450.408437][T31314] name failslab, interval 1, probability 0, space 0, times 0 [ 450.414064][T31314] CPU: 2 UID: 0 PID: 31314 Comm: syz.7.4752 Not tainted syzkaller #0 PREEMPT(full) [ 450.414087][T31314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 450.414097][T31314] Call Trace: [ 450.414104][T31314] [ 450.414111][T31314] dump_stack_lvl+0x16c/0x1f0 [ 450.414141][T31314] should_fail_ex+0x512/0x640 [ 450.414161][T31314] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 450.414182][T31314] should_failslab+0xc2/0x120 [ 450.414201][T31314] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 450.414218][T31314] ? d_instantiate+0x77/0x90 [ 450.414238][T31314] ? alloc_empty_file+0x55/0x1e0 [ 450.414265][T31314] alloc_empty_file+0x55/0x1e0 [ 450.414288][T31314] alloc_file_pseudo+0x13a/0x230 [ 450.414313][T31314] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 450.414343][T31314] sock_alloc_file+0x50/0x210 [ 450.414363][T31314] do_accept+0x240/0x530 [ 450.414387][T31314] ? do_raw_spin_lock+0x12c/0x2b0 [ 450.414408][T31314] ? __pfx_do_accept+0x10/0x10 [ 450.414449][T31314] __sys_accept4+0x100/0x1c0 [ 450.414474][T31314] ? __pfx___sys_accept4+0x10/0x10 [ 450.414499][T31314] ? __pfx_ksys_write+0x10/0x10 [ 450.414521][T31314] __x64_sys_accept4+0x96/0x100 [ 450.414546][T31314] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.414563][T31314] do_syscall_64+0xcd/0x4c0 [ 450.414583][T31314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.414601][T31314] RIP: 0033:0x7f8b2a38ebe9 [ 450.414615][T31314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.414631][T31314] RSP: 002b:00007f8b2b23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 450.414649][T31314] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38ebe9 [ 450.414659][T31314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 450.414670][T31314] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000000 [ 450.414680][T31314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.414714][T31314] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 450.414738][T31314] [ 450.499932][ T8199] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 450.505305][ T40] audit: type=1400 audit(1756152531.172:31891): avc: denied { setopt } for pid=31318 comm="syz.2.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 450.513278][ T40] audit: type=1400 audit(1756152531.172:31892): avc: denied { write } for pid=31318 comm="syz.2.4753" path="socket:[85942]" dev="sockfs" ino=85942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 450.534855][T31322] tipc: Enabled bearer , priority 0 [ 450.538336][T31322] syzkaller0: entered promiscuous mode [ 450.542484][T31322] syzkaller0: entered allmulticast mode [ 450.547929][T31322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 450.562724][T31322] tipc: Resetting bearer [ 450.567162][T31320] tipc: Resetting bearer [ 450.579784][T31320] tipc: Disabling bearer [ 450.658163][ T8199] usb 11-1: Using ep0 maxpacket: 32 [ 450.661613][ T8199] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 450.664312][ T8199] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 450.667834][ T8199] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 450.671041][ T8199] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 450.674157][ T8199] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 450.677254][ T8199] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 450.681575][ T8199] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 450.683756][T31333] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4757'. [ 450.684416][ T8199] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.692427][ T8199] usb 11-1: config 0 descriptor?? [ 450.766190][T31339] FAULT_INJECTION: forcing a failure. [ 450.766190][T31339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.770730][T31339] CPU: 3 UID: 0 PID: 31339 Comm: syz.0.4759 Not tainted syzkaller #0 PREEMPT(full) [ 450.770749][T31339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 450.770756][T31339] Call Trace: [ 450.770761][T31339] [ 450.770766][T31339] dump_stack_lvl+0x16c/0x1f0 [ 450.770783][T31339] should_fail_ex+0x512/0x640 [ 450.770799][T31339] _copy_to_user+0x32/0xd0 [ 450.770815][T31339] simple_read_from_buffer+0xcb/0x170 [ 450.770829][T31339] proc_fail_nth_read+0x197/0x240 [ 450.770843][T31339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.770857][T31339] ? rw_verify_area+0xcf/0x6c0 [ 450.770875][T31339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.770890][T31339] vfs_read+0x1e4/0xcf0 [ 450.770903][T31339] ? __pfx___mutex_lock+0x10/0x10 [ 450.770916][T31339] ? __pfx_vfs_read+0x10/0x10 [ 450.770931][T31339] ? __fget_files+0x20e/0x3c0 [ 450.770948][T31339] ksys_read+0x12a/0x250 [ 450.770959][T31339] ? __pfx_ksys_read+0x10/0x10 [ 450.770971][T31339] ? fput+0x9b/0xd0 [ 450.770988][T31339] do_syscall_64+0xcd/0x4c0 [ 450.771002][T31339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.771014][T31339] RIP: 0033:0x7f163e78d5fc [ 450.771025][T31339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.771036][T31339] RSP: 002b:00007f163f648030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.771051][T31339] RAX: ffffffffffffffda RBX: 00007f163e9b5fa0 RCX: 00007f163e78d5fc [ 450.771061][T31339] RDX: 000000000000000f RSI: 00007f163f6480a0 RDI: 0000000000000004 [ 450.771070][T31339] RBP: 00007f163f648090 R08: 0000000000000000 R09: 0000000000000000 [ 450.771080][T31339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.771089][T31339] R13: 00007f163e9b6038 R14: 00007f163e9b5fa0 R15: 00007ffcc0bb7858 [ 450.771114][T31339] [ 450.774106][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.783798][ T5972] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 450.914074][ T8199] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 450.969489][ T40] audit: type=1400 audit(1756152531.612:31893): avc: denied { map } for pid=31352 comm="syz.7.4762" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 451.062596][ T1331] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 451.063042][T31359] tipc: Enabled bearer , priority 0 [ 451.068773][T31359] syzkaller0: entered promiscuous mode [ 451.070865][T31359] syzkaller0: entered allmulticast mode [ 451.076270][T31359] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.089207][T31359] tipc: Resetting bearer [ 451.093088][T31358] tipc: Resetting bearer [ 451.105000][T31358] tipc: Disabling bearer [ 451.207113][T31369] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4766'. [ 451.225061][ T1331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.226226][ T55] usb 11-1: USB disconnect, device number 30 [ 451.228151][ T1331] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.228200][ T1331] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 451.234424][ T55] usblp0: removed [ 451.236025][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.241239][ T1331] usb 5-1: config 0 descriptor?? [ 451.387538][T31390] FAULT_INJECTION: forcing a failure. [ 451.387538][T31390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.391750][T31390] CPU: 3 UID: 0 PID: 31390 Comm: syz.7.4770 Not tainted syzkaller #0 PREEMPT(full) [ 451.391769][T31390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.391779][T31390] Call Trace: [ 451.391786][T31390] [ 451.391793][T31390] dump_stack_lvl+0x16c/0x1f0 [ 451.391819][T31390] should_fail_ex+0x512/0x640 [ 451.391844][T31390] _copy_to_user+0x32/0xd0 [ 451.391864][T31390] comedi_unlocked_ioctl+0x26e2/0x2f00 [ 451.391893][T31390] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 451.391930][T31390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 451.391953][T31390] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 451.391981][T31390] ? hook_file_ioctl_common+0x145/0x410 [ 451.392001][T31390] ? selinux_file_ioctl+0x180/0x270 [ 451.392019][T31390] ? selinux_file_ioctl+0xb4/0x270 [ 451.392040][T31390] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 451.392062][T31390] __x64_sys_ioctl+0x18b/0x210 [ 451.392085][T31390] do_syscall_64+0xcd/0x4c0 [ 451.392102][T31390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.392116][T31390] RIP: 0033:0x7f8b2a38ebe9 [ 451.392128][T31390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.392142][T31390] RSP: 002b:00007f8b2b23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.392156][T31390] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38ebe9 [ 451.392165][T31390] RDX: 00002000000000c0 RSI: 000000008050640a RDI: 0000000000000003 [ 451.392174][T31390] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000000 [ 451.392182][T31390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.392191][T31390] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 451.392209][T31390] [ 451.608491][ T1331] usb 5-1: USB disconnect, device number 81 [ 451.806985][T31411] tipc: Enabled bearer , priority 0 [ 451.810611][T31411] syzkaller0: entered promiscuous mode [ 451.812547][T31411] syzkaller0: entered allmulticast mode [ 451.816805][T31411] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 451.827983][ T7805] usb 12-1: new full-speed USB device number 63 using dummy_hcd [ 451.831896][T31411] tipc: Resetting bearer [ 451.838191][T31410] tipc: Resetting bearer [ 451.853167][T31410] tipc: Disabling bearer [ 451.885883][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 451.953945][T31417] FAULT_INJECTION: forcing a failure. [ 451.953945][T31417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.958710][T31417] CPU: 1 UID: 0 PID: 31417 Comm: syz.6.4775 Not tainted syzkaller #0 PREEMPT(full) [ 451.958732][T31417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.958739][T31417] Call Trace: [ 451.958744][T31417] [ 451.958749][T31417] dump_stack_lvl+0x16c/0x1f0 [ 451.958766][T31417] should_fail_ex+0x512/0x640 [ 451.958782][T31417] _copy_from_iter+0x29f/0x1720 [ 451.958799][T31417] ? __alloc_skb+0x200/0x380 [ 451.958811][T31417] ? __pfx__copy_from_iter+0x10/0x10 [ 451.958827][T31417] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 451.958845][T31417] netlink_sendmsg+0x829/0xdd0 [ 451.958861][T31417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.958879][T31417] ____sys_sendmsg+0xa95/0xc70 [ 451.958895][T31417] ? copy_msghdr_from_user+0x10a/0x160 [ 451.958908][T31417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.958929][T31417] ___sys_sendmsg+0x134/0x1d0 [ 451.958943][T31417] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.958981][T31417] __sys_sendmsg+0x16d/0x220 [ 451.958993][T31417] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.959028][T31417] do_syscall_64+0xcd/0x4c0 [ 451.959043][T31417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.959055][T31417] RIP: 0033:0x7fcb0058ebe9 [ 451.959065][T31417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.959077][T31417] RSP: 002b:00007fcb014d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.959088][T31417] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058ebe9 [ 451.959095][T31417] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 451.959103][T31417] RBP: 00007fcb014d0090 R08: 0000000000000000 R09: 0000000000000000 [ 451.959109][T31417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.959116][T31417] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 451.959130][T31417] [ 452.015192][ T7805] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.023366][ T7805] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.035397][ T7805] usb 12-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 452.039144][ T7805] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.043686][ T7805] usb 12-1: config 0 descriptor?? [ 452.044522][T31419] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4776'. [ 452.178986][T31429] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 452.262351][ T7805] usb 12-1: USB disconnect, device number 63 [ 452.537173][ T40] audit: type=1400 audit(1756152533.071:31894): avc: denied { map } for pid=31444 comm="syz.0.4783" path="socket:[89110]" dev="sockfs" ino=89110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 452.539154][T31445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4783'. [ 452.597693][T31449] FAULT_INJECTION: forcing a failure. [ 452.597693][T31449] name failslab, interval 1, probability 0, space 0, times 0 [ 452.601670][T31449] CPU: 3 UID: 0 PID: 31449 Comm: syz.0.4784 Not tainted syzkaller #0 PREEMPT(full) [ 452.601686][T31449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.601693][T31449] Call Trace: [ 452.601698][T31449] [ 452.601703][T31449] dump_stack_lvl+0x16c/0x1f0 [ 452.601720][T31449] should_fail_ex+0x512/0x640 [ 452.601733][T31449] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 452.601748][T31449] should_failslab+0xc2/0x120 [ 452.601762][T31449] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 452.601774][T31449] ? __alloc_skb+0x2b2/0x380 [ 452.601787][T31449] __alloc_skb+0x2b2/0x380 [ 452.601798][T31449] ? __pfx___alloc_skb+0x10/0x10 [ 452.601810][T31449] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 452.601827][T31449] netlink_alloc_large_skb+0x69/0x130 [ 452.601842][T31449] netlink_sendmsg+0x6a1/0xdd0 [ 452.601857][T31449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.601882][T31449] ____sys_sendmsg+0xa95/0xc70 [ 452.601911][T31449] ? copy_msghdr_from_user+0x10a/0x160 [ 452.601924][T31449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.601946][T31449] ___sys_sendmsg+0x134/0x1d0 [ 452.601959][T31449] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.601989][T31449] __sys_sendmsg+0x16d/0x220 [ 452.602001][T31449] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.602022][T31449] do_syscall_64+0xcd/0x4c0 [ 452.602036][T31449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.602048][T31449] RIP: 0033:0x7f163e78ebe9 [ 452.602058][T31449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.602069][T31449] RSP: 002b:00007f163f648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.602080][T31449] RAX: ffffffffffffffda RBX: 00007f163e9b5fa0 RCX: 00007f163e78ebe9 [ 452.602087][T31449] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 452.602094][T31449] RBP: 00007f163f648090 R08: 0000000000000000 R09: 0000000000000000 [ 452.602100][T31449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.602107][T31449] R13: 00007f163e9b6038 R14: 00007f163e9b5fa0 R15: 00007ffcc0bb7858 [ 452.602121][T31449] [ 452.692570][T31451] FAULT_INJECTION: forcing a failure. [ 452.692570][T31451] name failslab, interval 1, probability 0, space 0, times 0 [ 452.696551][T31451] CPU: 3 UID: 0 PID: 31451 Comm: syz.0.4785 Not tainted syzkaller #0 PREEMPT(full) [ 452.696567][T31451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.696574][T31451] Call Trace: [ 452.696578][T31451] [ 452.696583][T31451] dump_stack_lvl+0x16c/0x1f0 [ 452.696599][T31451] should_fail_ex+0x512/0x640 [ 452.696613][T31451] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 452.696627][T31451] should_failslab+0xc2/0x120 [ 452.696640][T31451] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 452.696652][T31451] ? __alloc_skb+0x2b2/0x380 [ 452.696666][T31451] __alloc_skb+0x2b2/0x380 [ 452.696677][T31451] ? __pfx___alloc_skb+0x10/0x10 [ 452.696692][T31451] alloc_skb_with_frags+0xe0/0x860 [ 452.696706][T31451] ? __might_fault+0xe3/0x190 [ 452.696729][T31451] ? __might_fault+0x13b/0x190 [ 452.696744][T31451] sock_alloc_send_pskb+0x7fb/0x990 [ 452.696755][T31451] ? _copy_from_iter+0x15d/0x1720 [ 452.696773][T31451] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 452.696784][T31451] ? find_held_lock+0x2b/0x80 [ 452.696799][T31451] ? dev_get_by_index+0x17c/0x380 [ 452.696815][T31451] packet_sendmsg+0x2054/0x5850 [ 452.696835][T31451] ? sock_has_perm+0x259/0x2f0 [ 452.696851][T31451] ? __pfx_sock_has_perm+0x10/0x10 [ 452.696866][T31451] ? __pfx_packet_sendmsg+0x10/0x10 [ 452.696885][T31451] __sys_sendto+0x4a3/0x520 [ 452.696897][T31451] ? __pfx___sys_sendto+0x10/0x10 [ 452.696920][T31451] ? ksys_write+0x1ac/0x250 [ 452.696932][T31451] ? __pfx_ksys_write+0x10/0x10 [ 452.696945][T31451] __x64_sys_sendto+0xe0/0x1c0 [ 452.696955][T31451] ? do_syscall_64+0x91/0x4c0 [ 452.696968][T31451] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.696980][T31451] do_syscall_64+0xcd/0x4c0 [ 452.696993][T31451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.697006][T31451] RIP: 0033:0x7f163e78ebe9 [ 452.697015][T31451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.697026][T31451] RSP: 002b:00007f163f648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 452.697038][T31451] RAX: ffffffffffffffda RBX: 00007f163e9b5fa0 RCX: 00007f163e78ebe9 [ 452.697045][T31451] RDX: 000000000000002a RSI: 0000200000000140 RDI: 0000000000000003 [ 452.697052][T31451] RBP: 00007f163f648090 R08: 0000200000000080 R09: 0000000000000014 [ 452.697059][T31451] R10: 000000000400c010 R11: 0000000000000246 R12: 0000000000000001 [ 452.697065][T31451] R13: 00007f163e9b6038 R14: 00007f163e9b5fa0 R15: 00007ffcc0bb7858 [ 452.697080][T31451] [ 452.997647][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 453.072659][ T55] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 453.234755][ T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.238424][ T55] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.241990][ T55] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 453.245285][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.249810][ T55] usb 5-1: config 0 descriptor?? [ 453.440804][T31501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.446835][T31501] FAULT_INJECTION: forcing a failure. [ 453.446835][T31501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.450919][T31501] CPU: 2 UID: 0 PID: 31501 Comm: syz.6.4800 Not tainted syzkaller #0 PREEMPT(full) [ 453.450935][T31501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 453.450945][T31501] Call Trace: [ 453.450950][T31501] [ 453.450955][T31501] dump_stack_lvl+0x16c/0x1f0 [ 453.450972][T31501] should_fail_ex+0x512/0x640 [ 453.450988][T31501] _copy_from_iter+0x29f/0x1720 [ 453.451005][T31501] ? __alloc_skb+0x200/0x380 [ 453.451017][T31501] ? __pfx__copy_from_iter+0x10/0x10 [ 453.451033][T31501] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 453.451051][T31501] netlink_sendmsg+0x829/0xdd0 [ 453.451067][T31501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.451085][T31501] ____sys_sendmsg+0xa95/0xc70 [ 453.451101][T31501] ? copy_msghdr_from_user+0x10a/0x160 [ 453.451113][T31501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.451135][T31501] ___sys_sendmsg+0x134/0x1d0 [ 453.451148][T31501] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.451177][T31501] __sys_sendmsg+0x16d/0x220 [ 453.451190][T31501] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.451207][T31501] ? fput+0x9b/0xd0 [ 453.451224][T31501] do_syscall_64+0xcd/0x4c0 [ 453.451238][T31501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.451251][T31501] RIP: 0033:0x7fcb0058ebe9 [ 453.451261][T31501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.451272][T31501] RSP: 002b:00007fcb014d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.451284][T31501] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058ebe9 [ 453.451291][T31501] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 453.451298][T31501] RBP: 00007fcb014d0090 R08: 0000000000000000 R09: 0000000000000000 [ 453.451304][T31501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.451311][T31501] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 453.451325][T31501] [ 453.478644][T31409] usb 12-1: new full-speed USB device number 64 using dummy_hcd [ 453.637074][ T8199] usb 5-1: USB disconnect, device number 82 [ 453.693810][T31409] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.697230][T31409] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.700374][T31409] usb 12-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 453.704224][T31409] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.708555][T31409] usb 12-1: config 0 descriptor?? [ 453.926493][ T6050] usb 12-1: USB disconnect, device number 64 [ 454.109575][ C2] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 454.202102][T31520] binder_alloc: binder_alloc_mmap_handler: 31519 200000ff9000-200000ffd000 already mapped failed -16 [ 454.233605][T31523] FAULT_INJECTION: forcing a failure. [ 454.233605][T31523] name failslab, interval 1, probability 0, space 0, times 0 [ 454.237982][T31523] CPU: 0 UID: 0 PID: 31523 Comm: syz.0.4803 Not tainted syzkaller #0 PREEMPT(full) [ 454.238006][T31523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.238017][T31523] Call Trace: [ 454.238023][T31523] [ 454.238031][T31523] dump_stack_lvl+0x16c/0x1f0 [ 454.238057][T31523] should_fail_ex+0x512/0x640 [ 454.238077][T31523] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 454.238100][T31523] should_failslab+0xc2/0x120 [ 454.238120][T31523] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 454.238139][T31523] ? __alloc_skb+0x2b2/0x380 [ 454.238162][T31523] __alloc_skb+0x2b2/0x380 [ 454.238180][T31523] ? __pfx___alloc_skb+0x10/0x10 [ 454.238200][T31523] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 454.238233][T31523] netlink_alloc_large_skb+0x69/0x130 [ 454.238255][T31523] netlink_sendmsg+0x6a1/0xdd0 [ 454.238281][T31523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.238311][T31523] ____sys_sendmsg+0xa95/0xc70 [ 454.238338][T31523] ? copy_msghdr_from_user+0x10a/0x160 [ 454.238357][T31523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.238392][T31523] ___sys_sendmsg+0x134/0x1d0 [ 454.238411][T31523] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.238474][T31523] __sys_sendmsg+0x16d/0x220 [ 454.238495][T31523] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.238524][T31523] ? fput+0x9b/0xd0 [ 454.238551][T31523] do_syscall_64+0xcd/0x4c0 [ 454.238573][T31523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.238591][T31523] RIP: 0033:0x7f163e78ebe9 [ 454.238606][T31523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.238623][T31523] RSP: 002b:00007f163f648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.238641][T31523] RAX: ffffffffffffffda RBX: 00007f163e9b5fa0 RCX: 00007f163e78ebe9 [ 454.238653][T31523] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 454.238687][T31523] RBP: 00007f163f648090 R08: 0000000000000000 R09: 0000000000000000 [ 454.238698][T31523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.238710][T31523] R13: 00007f163e9b6038 R14: 00007f163e9b5fa0 R15: 00007ffcc0bb7858 [ 454.238738][T31523] [ 454.490224][ T40] audit: type=1400 audit(1756152534.905:31895): avc: denied { name_bind } for pid=31531 comm="syz.6.4808" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 454.496157][T31532] netlink: 'syz.7.4807': attribute type 1 has an invalid length. [ 454.500913][T31532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31532 comm=syz.7.4807 [ 454.508295][T31532] vlan2: entered allmulticast mode [ 454.510032][T31532] veth1: entered allmulticast mode [ 454.613278][T31550] trusted_key: encrypted_key: insufficient parameters specified [ 454.662025][ T40] audit: type=1400 audit(1756152535.064:31896): avc: denied { read append } for pid=31553 comm="syz.7.4812" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.669592][ T40] audit: type=1400 audit(1756152535.064:31897): avc: denied { open } for pid=31553 comm="syz.7.4812" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.677014][ T40] audit: type=1400 audit(1756152535.064:31898): avc: denied { map } for pid=31553 comm="syz.7.4812" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.684391][ T40] audit: type=1400 audit(1756152535.064:31899): avc: denied { write execute } for pid=31553 comm="syz.7.4812" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.712183][T31554] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4812'. [ 454.745928][T31554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4812'. [ 454.804571][ T55] usb 11-1: new full-speed USB device number 31 using dummy_hcd [ 454.811710][T31624] uprobe: syz.2.4813:31624 failed to unregister, leaking uprobe [ 454.977269][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.980543][ T55] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.983475][ T55] usb 11-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 454.986419][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.990787][ T55] usb 11-1: config 0 descriptor?? [ 455.176109][T31653] FAULT_INJECTION: forcing a failure. [ 455.176109][T31653] name failslab, interval 1, probability 0, space 0, times 0 [ 455.182068][T31653] CPU: 0 UID: 0 PID: 31653 Comm: syz.7.4821 Not tainted syzkaller #0 PREEMPT(full) [ 455.182086][T31653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.182093][T31653] Call Trace: [ 455.182097][T31653] [ 455.182102][T31653] dump_stack_lvl+0x16c/0x1f0 [ 455.182119][T31653] should_fail_ex+0x512/0x640 [ 455.182134][T31653] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 455.182147][T31653] should_failslab+0xc2/0x120 [ 455.182161][T31653] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 455.182173][T31653] ? security_file_alloc+0x34/0x2b0 [ 455.182192][T31653] security_file_alloc+0x34/0x2b0 [ 455.182210][T31653] init_file+0x93/0x4c0 [ 455.182226][T31653] alloc_empty_file+0x73/0x1e0 [ 455.182242][T31653] path_openat+0xda/0x2cb0 [ 455.182254][T31653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.182271][T31653] ? __pfx_path_openat+0x10/0x10 [ 455.182284][T31653] ? __lock_acquire+0xb97/0x1ce0 [ 455.182303][T31653] do_filp_open+0x20b/0x470 [ 455.182316][T31653] ? __pfx_do_filp_open+0x10/0x10 [ 455.182339][T31653] ? _raw_spin_unlock+0x28/0x50 [ 455.182349][T31653] ? alloc_fd+0x471/0x7d0 [ 455.182365][T31653] do_sys_openat2+0x11b/0x1d0 [ 455.182382][T31653] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.182398][T31653] ? __fget_files+0x20e/0x3c0 [ 455.182414][T31653] __x64_sys_creat+0xcc/0x120 [ 455.182430][T31653] ? __pfx___x64_sys_creat+0x10/0x10 [ 455.182445][T31653] ? __pfx_ksys_write+0x10/0x10 [ 455.182459][T31653] ? rcu_is_watching+0x12/0xc0 [ 455.182473][T31653] ? do_syscall_64+0x91/0x4c0 [ 455.182486][T31653] do_syscall_64+0xcd/0x4c0 [ 455.182499][T31653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.182511][T31653] RIP: 0033:0x7f8b2a38ebe9 [ 455.182520][T31653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.182531][T31653] RSP: 002b:00007f8b2b23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 455.182542][T31653] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38ebe9 [ 455.182549][T31653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 455.182556][T31653] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000000 [ 455.182563][T31653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.182569][T31653] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 455.182583][T31653] [ 455.272132][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 455.870061][T31684] trusted_key: encrypted_key: insufficient parameters specified [ 456.312836][T31694] tipc: Enabled bearer , priority 0 [ 456.315543][T31694] syzkaller0: entered promiscuous mode [ 456.317299][T31694] syzkaller0: entered allmulticast mode [ 456.321372][T31694] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 456.334333][T31694] tipc: Resetting bearer [ 456.338076][T31693] tipc: Resetting bearer [ 456.348313][T31693] tipc: Disabling bearer [ 456.419414][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 456.697505][T31707] FAULT_INJECTION: forcing a failure. [ 456.697505][T31707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.702744][T31707] CPU: 0 UID: 0 PID: 31707 Comm: syz.0.4836 Not tainted syzkaller #0 PREEMPT(full) [ 456.702770][T31707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.702780][T31707] Call Trace: [ 456.702790][T31707] [ 456.702799][T31707] dump_stack_lvl+0x16c/0x1f0 [ 456.702826][T31707] should_fail_ex+0x512/0x640 [ 456.702852][T31707] _copy_from_user+0x2e/0xd0 [ 456.702878][T31707] kstrtouint_from_user+0xd6/0x1d0 [ 456.702893][T31707] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 456.702910][T31707] ? __lock_acquire+0xb97/0x1ce0 [ 456.702950][T31707] proc_fail_nth_write+0x83/0x220 [ 456.702974][T31707] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.703002][T31707] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.703024][T31707] vfs_write+0x29d/0x11d0 [ 456.703048][T31707] ? __pfx___mutex_lock+0x10/0x10 [ 456.703069][T31707] ? __pfx_vfs_write+0x10/0x10 [ 456.703096][T31707] ? __fget_files+0x20e/0x3c0 [ 456.703124][T31707] ksys_write+0x12a/0x250 [ 456.703144][T31707] ? __pfx_ksys_write+0x10/0x10 [ 456.703176][T31707] do_syscall_64+0xcd/0x4c0 [ 456.703201][T31707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.703220][T31707] RIP: 0033:0x7f163e78d69f [ 456.703235][T31707] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 456.703253][T31707] RSP: 002b:00007f163f627030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 456.703271][T31707] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f163e78d69f [ 456.703281][T31707] RDX: 0000000000000001 RSI: 00007f163f6270a0 RDI: 0000000000000003 [ 456.703292][T31707] RBP: 00007f163f627090 R08: 0000000000000000 R09: 0000000000000000 [ 456.703304][T31707] R10: 0000000000000050 R11: 0000000000000293 R12: 0000000000000001 [ 456.703316][T31707] R13: 00007f163e9b6128 R14: 00007f163e9b6090 R15: 00007ffcc0bb7858 [ 456.703341][T31707] [ 456.951625][T30317] bond0: (slave syz_tun): Releasing backup interface [ 456.961116][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.965307][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.968500][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.972107][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.977162][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.003689][T31713] vxcan1 speed is unknown, defaulting to 1000 [ 457.148657][ T9219] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.249520][ T9219] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.265156][T31713] chnl_net:caif_netlink_parms(): no params data found [ 457.338116][ T9219] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.368981][T31713] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.372766][T31713] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.375116][T31713] bridge_slave_0: entered allmulticast mode [ 457.378502][T31713] bridge_slave_0: entered promiscuous mode [ 457.382398][T31713] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.385345][T31713] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.388417][T31713] bridge_slave_1: entered allmulticast mode [ 457.393373][T31713] bridge_slave_1: entered promiscuous mode [ 457.437437][ T9219] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.473487][T31713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.479846][T31713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.525301][T31713] team0: Port device team_slave_0 added [ 457.530575][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 457.531487][T31713] team0: Port device team_slave_1 added [ 457.579160][T31713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.582062][T31713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.591742][T31713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.598250][T31713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.600459][T31713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.609049][T31713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.696817][T31713] hsr_slave_0: entered promiscuous mode [ 457.699409][T31713] hsr_slave_1: entered promiscuous mode [ 457.702997][T31713] debugfs: 'hsr0' already exists in 'hsr' [ 457.704806][T31713] Cannot create hsr debugfs directory [ 457.707027][ T9219] bridge_slave_1: left allmulticast mode [ 457.708872][ T9219] bridge_slave_1: left promiscuous mode [ 457.710850][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.718351][ T9219] bridge_slave_0: left allmulticast mode [ 457.720330][ T9219] bridge_slave_0: left promiscuous mode [ 457.722212][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.735064][ T9219] tipc: Resetting bearer [ 457.737694][ T9219] tipc: Resetting bearer [ 457.769060][ T55] usb 11-1: USB disconnect, device number 31 [ 457.910094][ T9219] tipc: Disabling bearer [ 458.248549][ T9219] tipc: Disabling bearer [ 458.363590][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 458.363603][ T40] audit: type=1400 audit(1756152538.525:31901): avc: denied { getopt } for pid=32532 comm="syz.2.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 458.478933][ T9219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.482375][ T9219] bond_slave_0: left promiscuous mode [ 458.485860][ T9219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.489062][ T9219] bond_slave_1: left promiscuous mode [ 458.491850][ T9219] bond0 (unregistering): Released all slaves [ 458.528935][T32541] tipc: Enabled bearer , priority 0 [ 458.531576][T32543] syzkaller0: entered promiscuous mode [ 458.533391][T32543] syzkaller0: entered allmulticast mode [ 458.588293][ T9219] tipc: Left network mode [ 458.594608][T32537] tipc: Resetting bearer [ 458.623025][T32536] tipc: Resetting bearer [ 458.634863][T32536] tipc: Disabling bearer [ 458.645579][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.670669][T32685] FAULT_INJECTION: forcing a failure. [ 458.670669][T32685] name failslab, interval 1, probability 0, space 0, times 0 [ 458.675038][T32685] CPU: 0 UID: 0 PID: 32685 Comm: syz.2.4844 Not tainted syzkaller #0 PREEMPT(full) [ 458.675053][T32685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 458.675061][T32685] Call Trace: [ 458.675065][T32685] [ 458.675069][T32685] dump_stack_lvl+0x16c/0x1f0 [ 458.675086][T32685] should_fail_ex+0x512/0x640 [ 458.675098][T32685] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 458.675113][T32685] should_failslab+0xc2/0x120 [ 458.675126][T32685] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 458.675138][T32685] ? copy_process+0x4b6/0x7690 [ 458.675154][T32685] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.675167][T32685] copy_process+0x4b6/0x7690 [ 458.675188][T32685] ? __pfx_copy_process+0x10/0x10 [ 458.675206][T32685] ? lockdep_init_map_type+0x5c/0x280 [ 458.675219][T32685] ? lockdep_init_map_type+0x5c/0x280 [ 458.675231][T32685] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 458.675249][T32685] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 458.675268][T32685] vhost_task_create+0x1d2/0x2e0 [ 458.675280][T32685] ? __pfx_vhost_task_create+0x10/0x10 [ 458.675296][T32685] ? __pfx_vhost_task_fn+0x10/0x10 [ 458.675314][T32685] kvm_mmu_post_init_vm+0x1b7/0x380 [ 458.675329][T32685] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 458.675345][T32685] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 458.675364][T32685] kvm_vcpu_ioctl+0x5eb/0x1690 [ 458.675380][T32685] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 458.675395][T32685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.675410][T32685] ? do_vfs_ioctl+0x128/0x14f0 [ 458.675427][T32685] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 458.675444][T32685] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 458.675467][T32685] ? hook_file_ioctl_common+0x145/0x410 [ 458.675483][T32685] ? selinux_file_ioctl+0x180/0x270 [ 458.675506][T32685] ? selinux_file_ioctl+0xb4/0x270 [ 458.675533][T32685] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 458.675554][T32685] __x64_sys_ioctl+0x18b/0x210 [ 458.675581][T32685] do_syscall_64+0xcd/0x4c0 [ 458.675602][T32685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.675619][T32685] RIP: 0033:0x7f48c498ebe9 [ 458.675635][T32685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.675651][T32685] RSP: 002b:00007f48c2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.675664][T32685] RAX: ffffffffffffffda RBX: 00007f48c4bb5fa0 RCX: 00007f48c498ebe9 [ 458.675671][T32685] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 458.675678][T32685] RBP: 00007f48c2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 458.675685][T32685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.675692][T32685] R13: 00007f48c4bb6038 R14: 00007f48c4bb5fa0 R15: 00007ffdfcc0c9d8 [ 458.675706][T32685] [ 459.084915][ T9219] hsr_slave_0: left promiscuous mode [ 459.087082][ T9219] hsr_slave_1: left promiscuous mode [ 459.089066][ T9219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.092092][ T9219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.095230][ T9219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.097533][ T9219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.131024][ T9219] veth1_macvtap: left promiscuous mode [ 459.132788][ T9219] veth0_macvtap: left promiscuous mode [ 459.136363][ T9219] veth1_vlan: left promiscuous mode [ 459.138482][ T9219] veth0_vlan: left promiscuous mode [ 459.155490][ T5972] Bluetooth: hci0: command tx timeout [ 459.754178][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 459.928595][ T9219] team0 (unregistering): Port device team_slave_1 removed [ 460.036225][ T9219] team0 (unregistering): Port device team_slave_0 removed [ 460.724733][ T337] tipc: Enabled bearer , priority 10 [ 460.866225][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 461.048034][ T6282] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 461.218820][ T6282] usb 11-1: Using ep0 maxpacket: 8 [ 461.222266][ T6282] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 461.224845][ T6282] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.227980][ T6282] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.231947][ T6282] usb 11-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.236257][ T6282] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.241925][ T6282] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.244763][ T6282] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.252408][ T6282] usbtmc 11-1:16.0: bulk endpoints not found [ 461.379064][ T5972] Bluetooth: hci0: command tx timeout [ 461.978720][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 462.130316][T31713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.131699][ T389] Bluetooth: MGMT ver 1.23 [ 462.138727][T31713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.145164][T31713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.151249][T31713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.166950][ T396] FAULT_INJECTION: forcing a failure. [ 462.166950][ T396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.173280][ T396] CPU: 3 UID: 0 PID: 396 Comm: syz.7.4853 Not tainted syzkaller #0 PREEMPT(full) [ 462.173301][ T396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.173313][ T396] Call Trace: [ 462.173320][ T396] [ 462.173327][ T396] dump_stack_lvl+0x16c/0x1f0 [ 462.173351][ T396] should_fail_ex+0x512/0x640 [ 462.173373][ T396] _copy_to_user+0x32/0xd0 [ 462.173395][ T396] simple_read_from_buffer+0xcb/0x170 [ 462.173413][ T396] proc_fail_nth_read+0x197/0x240 [ 462.173434][ T396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.173455][ T396] ? rw_verify_area+0xcf/0x6c0 [ 462.173478][ T396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.173491][ T396] vfs_read+0x1e4/0xcf0 [ 462.173504][ T396] ? __pfx___mutex_lock+0x10/0x10 [ 462.173518][ T396] ? __pfx_vfs_read+0x10/0x10 [ 462.173533][ T396] ? __fget_files+0x20e/0x3c0 [ 462.173550][ T396] ksys_read+0x12a/0x250 [ 462.173561][ T396] ? __pfx_ksys_read+0x10/0x10 [ 462.173576][ T396] do_syscall_64+0xcd/0x4c0 [ 462.173591][ T396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.173604][ T396] RIP: 0033:0x7f8b2a38d5fc [ 462.173614][ T396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 462.173625][ T396] RSP: 002b:00007f8b2b23b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.173636][ T396] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38d5fc [ 462.173644][ T396] RDX: 000000000000000f RSI: 00007f8b2b23b0a0 RDI: 0000000000000006 [ 462.173651][ T396] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000014 [ 462.173657][ T396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.173664][ T396] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 462.173678][ T396] [ 462.183870][ T402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4854'. [ 462.268587][ T406] syzkaller1: entered promiscuous mode [ 462.270463][ T406] syzkaller1: entered allmulticast mode [ 462.286500][ T5972] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 462.290557][ T406] kvm: pic: level sensitive irq not supported [ 462.290944][ T406] kvm: pic: non byte read [ 462.294816][T31713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.295683][ T406] kvm: pic: non byte read [ 462.301346][ T406] kvm: pic: non byte read [ 462.304491][ T406] kvm: pic: level sensitive irq not supported [ 462.304738][ T406] kvm: pic: non byte read [ 462.307339][T31713] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.310726][ T406] kvm: pic: level sensitive irq not supported [ 462.310976][ T406] kvm: pic: non byte read [ 462.312209][ T406] kvm: pic: non byte read [ 462.316073][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.317233][ T406] kvm: pic: non byte read [ 462.318376][ T9235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.321692][ T406] kvm: pic: non byte read [ 462.324970][ T406] kvm: pic: non byte read [ 462.328216][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.330627][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.457715][T31713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.493719][T31713] veth0_vlan: entered promiscuous mode [ 462.504230][T31713] veth1_vlan: entered promiscuous mode [ 462.526515][T31713] veth0_macvtap: entered promiscuous mode [ 462.532304][T31713] veth1_macvtap: entered promiscuous mode [ 462.547189][T31713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.557816][T31713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.566541][ T9235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.569264][ T9235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.572403][ T9235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.575172][ T9235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.637086][ T9235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.640248][ T9235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.657761][ T9235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.661156][ T9235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.713152][ T457] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 462.785790][ T460] tipc: Failed to obtain node identity [ 462.787729][ T460] tipc: Enabling of bearer rejected, failed to enable media [ 462.820847][ T461] trusted_key: encrypted_key: insufficient parameters specified [ 462.941193][ T467] tipc: Started in network mode [ 462.943102][ T467] tipc: Node identity e2e41153326, cluster identity 4711 [ 462.946020][ T467] tipc: Enabled bearer , priority 0 [ 462.950117][ T466] tipc: Resetting bearer [ 463.089967][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 463.602756][ T5972] Bluetooth: hci0: command tx timeout [ 463.638628][ T478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4862'. [ 463.999039][ T6012] usb 11-1: USB disconnect, device number 32 [ 464.019635][ T8196] tipc: Node number set to 3498316115 [ 464.212082][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 464.345166][ T466] tipc: Disabling bearer [ 464.353201][ T478] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 464.421176][ T499] tipc: Enabling of bearer rejected, already enabled [ 464.648601][ T519] trusted_key: encrypted_key: insufficient parameters specified [ 465.313738][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 465.731238][ T546] tipc: Enabled bearer , priority 0 [ 465.734008][ T545] tipc: Resetting bearer [ 465.839188][ T5972] Bluetooth: hci0: command tx timeout [ 466.348786][ T40] audit: type=1400 audit(1756152545.998:31902): avc: denied { compute_member } for pid=553 comm="syz.6.4877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 466.425092][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 466.582636][ T564] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4880'. [ 467.087786][ T545] tipc: Disabling bearer [ 467.212514][ T573] netlink: 'syz.7.4881': attribute type 6 has an invalid length. [ 467.251850][ T575] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4882'. [ 467.539010][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 467.575267][ T591] FAULT_INJECTION: forcing a failure. [ 467.575267][ T591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.580279][ T6248] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 467.580312][ T591] CPU: 3 UID: 0 PID: 591 Comm: syz.7.4887 Not tainted syzkaller #0 PREEMPT(full) [ 467.580328][ T591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.580336][ T591] Call Trace: [ 467.580340][ T591] [ 467.580345][ T591] dump_stack_lvl+0x16c/0x1f0 [ 467.580361][ T591] should_fail_ex+0x512/0x640 [ 467.580377][ T591] _copy_from_iter+0x29f/0x1720 [ 467.580393][ T591] ? __alloc_skb+0x200/0x380 [ 467.580405][ T591] ? __pfx__copy_from_iter+0x10/0x10 [ 467.580421][ T591] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 467.580439][ T591] netlink_sendmsg+0x829/0xdd0 [ 467.580455][ T591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.580474][ T591] ____sys_sendmsg+0xa95/0xc70 [ 467.580489][ T591] ? copy_msghdr_from_user+0x10a/0x160 [ 467.580502][ T591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.580519][ T591] ? __pfx__kstrtoull+0x10/0x10 [ 467.580532][ T591] ___sys_sendmsg+0x134/0x1d0 [ 467.580545][ T591] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.580564][ T591] ? find_held_lock+0x2b/0x80 [ 467.580587][ T591] __sys_sendmmsg+0x200/0x420 [ 467.580601][ T591] ? __pfx___sys_sendmmsg+0x10/0x10 [ 467.580618][ T591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.580637][ T591] ? fput+0x9b/0xd0 [ 467.580652][ T591] ? ksys_write+0x1ac/0x250 [ 467.580664][ T591] ? __pfx_ksys_write+0x10/0x10 [ 467.580677][ T591] __x64_sys_sendmmsg+0x9c/0x100 [ 467.580690][ T591] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.580702][ T591] do_syscall_64+0xcd/0x4c0 [ 467.580715][ T591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.580728][ T591] RIP: 0033:0x7f8b2a38ebe9 [ 467.580742][ T591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.580758][ T591] RSP: 002b:00007f8b2b23b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 467.580777][ T591] RAX: ffffffffffffffda RBX: 00007f8b2a5b5fa0 RCX: 00007f8b2a38ebe9 [ 467.580788][ T591] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 467.580801][ T591] RBP: 00007f8b2b23b090 R08: 0000000000000000 R09: 0000000000000000 [ 467.580812][ T591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.580822][ T591] R13: 00007f8b2a5b6038 R14: 00007f8b2a5b5fa0 R15: 00007fffc6fdc048 [ 467.580846][ T591] [ 467.826649][ T6248] usb 11-1: Using ep0 maxpacket: 32 [ 467.830173][ T6248] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 467.832697][ T6248] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 467.835461][ T6248] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 467.838446][ T6248] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.841413][ T6248] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.844395][ T6248] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.848550][ T6248] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.851433][ T6248] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.855665][ T6248] usb 11-1: config 0 descriptor?? [ 468.072121][ T34] usb 12-1: new high-speed USB device number 65 using dummy_hcd [ 468.085204][ T6248] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.090638][ T6248] usb 11-1: USB disconnect, device number 33 [ 468.094773][ T6248] usblp0: removed [ 468.210327][ T34] usb 12-1: device descriptor read/64, error -71 [ 468.435327][ T632] vlan2: entered allmulticast mode [ 468.437549][ T632] veth1: entered allmulticast mode [ 468.488651][ T34] usb 12-1: new high-speed USB device number 66 using dummy_hcd [ 468.627244][ T34] usb 12-1: device descriptor read/64, error -71 [ 468.648782][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 468.715714][ T648] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4901'. [ 468.745190][ T34] usb usb12-port1: attempt power cycle [ 468.754798][ T650] netlink: 'syz.6.4902': attribute type 3 has an invalid length. [ 468.793798][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.797900][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.802363][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.805847][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.809060][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.812081][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.815773][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.818717][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.822471][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 468.862594][ T6282] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 469.022799][ T6282] usb 5-1: Using ep0 maxpacket: 16 [ 469.026573][ T6282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.031017][ T6282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.035606][ T6282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.040883][ T6282] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.045205][ T6282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.050984][ T6282] usb 5-1: config 0 descriptor?? [ 469.119017][ T34] usb 12-1: new high-speed USB device number 67 using dummy_hcd [ 469.140822][ T34] usb 12-1: device descriptor read/8, error -71 [ 469.146769][ T690] trusted_key: encrypted_key: insufficient parameters specified [ 469.407766][ T34] usb 12-1: new high-speed USB device number 68 using dummy_hcd [ 469.440198][ T34] usb 12-1: device descriptor read/8, error -71 [ 469.487682][ T6282] usbhid 5-1:0.0: can't add hid device: -71 [ 469.489729][ T6282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 469.493420][ T6282] usb 5-1: USB disconnect, device number 83 [ 469.557704][ T34] usb usb12-port1: unable to enumerate USB device [ 469.750619][ T40] audit: type=1400 audit(1756152549.179:31903): avc: denied { link } for pid=703 comm="syz.2.4905" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 469.761138][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 470.346337][ T743] IPVS: length: 184 != 3384 [ 470.353590][ T40] audit: type=1400 audit(1756152549.749:31904): avc: denied { map } for pid=742 comm="syz.0.4919" path="/proc/45/task/46/numa_maps" dev="proc" ino=90612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 470.494033][ T748] FAULT_INJECTION: forcing a failure. [ 470.494033][ T748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.499613][ T748] CPU: 3 UID: 0 PID: 748 Comm: syz.0.4921 Not tainted syzkaller #0 PREEMPT(full) [ 470.499638][ T748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.499649][ T748] Call Trace: [ 470.499657][ T748] [ 470.499664][ T748] dump_stack_lvl+0x16c/0x1f0 [ 470.499691][ T748] should_fail_ex+0x512/0x640 [ 470.499716][ T748] _copy_from_user+0x2e/0xd0 [ 470.499742][ T748] copy_msghdr_from_user+0x98/0x160 [ 470.499764][ T748] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 470.499788][ T748] ? kfree+0x24f/0x4d0 [ 470.499813][ T748] ? __lock_acquire+0x62e/0x1ce0 [ 470.499846][ T748] ___sys_recvmsg+0xdb/0x1a0 [ 470.499867][ T748] ? __pfx____sys_recvmsg+0x10/0x10 [ 470.499900][ T748] ? __pfx___might_resched+0x10/0x10 [ 470.499929][ T748] do_recvmmsg+0x2fe/0x750 [ 470.499952][ T748] ? __pfx_do_recvmmsg+0x10/0x10 [ 470.499977][ T748] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 470.500007][ T748] ? __fget_files+0x20e/0x3c0 [ 470.500034][ T748] __x64_sys_recvmmsg+0x22a/0x280 [ 470.500061][ T748] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 470.500090][ T748] do_syscall_64+0xcd/0x4c0 [ 470.500113][ T748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.500131][ T748] RIP: 0033:0x7efc9b58ebe9 [ 470.500147][ T748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.500166][ T748] RSP: 002b:00007efc9c336038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 470.500185][ T748] RAX: ffffffffffffffda RBX: 00007efc9b7b6090 RCX: 00007efc9b58ebe9 [ 470.500198][ T748] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000003 [ 470.500209][ T748] RBP: 00007efc9c336090 R08: 0000000000000000 R09: 0000000000000000 [ 470.500219][ T748] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 470.500231][ T748] R13: 00007efc9b7b6128 R14: 00007efc9b7b6090 R15: 00007ffe4e8c9cd8 [ 470.500256][ T748] [ 470.883023][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 471.195432][ T772] netlink: 'syz.2.4929': attribute type 1 has an invalid length. [ 471.209819][ T772] bond1: entered promiscuous mode [ 471.212121][ T772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.227785][ T772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.231062][ T772] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 471.235388][ T772] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 471.242600][ T772] bond1: (slave ip6gre1): making interface the new active one [ 471.245826][ T772] ip6gre1: entered promiscuous mode [ 471.249877][ T772] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 471.258430][ T772] tipc: Enabled bearer , priority 0 [ 471.307872][ T772] tipc: Resetting bearer [ 471.323479][ T771] tipc: Disabling bearer [ 471.441166][ T6282] usb 12-1: new high-speed USB device number 69 using dummy_hcd [ 471.599467][ T6282] usb 12-1: Using ep0 maxpacket: 16 [ 471.603406][ T6282] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.608068][ T6282] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.612301][ T6282] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.617650][ T6282] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 471.621358][ T6282] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.626088][ T6282] usb 12-1: config 0 descriptor?? [ 471.741388][ T824] tipc: Enabled bearer , priority 0 [ 471.744574][ T824] syzkaller0: entered promiscuous mode [ 471.746997][ T824] syzkaller0: entered allmulticast mode [ 471.764370][ T824] FAULT_INJECTION: forcing a failure. [ 471.764370][ T824] name failslab, interval 1, probability 0, space 0, times 0 [ 471.769694][ T824] CPU: 1 UID: 0 PID: 824 Comm: syz.0.4931 Not tainted syzkaller #0 PREEMPT(full) [ 471.769719][ T824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.769730][ T824] Call Trace: [ 471.769737][ T824] [ 471.769745][ T824] dump_stack_lvl+0x16c/0x1f0 [ 471.769771][ T824] should_fail_ex+0x512/0x640 [ 471.769804][ T824] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 471.769830][ T824] should_failslab+0xc2/0x120 [ 471.769851][ T824] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 471.769871][ T824] ? __alloc_skb+0x2b2/0x380 [ 471.769893][ T824] __alloc_skb+0x2b2/0x380 [ 471.769911][ T824] ? __pfx___alloc_skb+0x10/0x10 [ 471.769934][ T824] ? if_nlmsg_size+0x475/0xaf0 [ 471.769958][ T824] rtmsg_ifinfo_build_skb+0x81/0x280 [ 471.769991][ T824] rtnetlink_event+0xf3/0x1f0 [ 471.770017][ T824] notifier_call_chain+0xbc/0x410 [ 471.770044][ T824] ? __pfx_rtnetlink_event+0x10/0x10 [ 471.770072][ T824] call_netdevice_notifiers_info+0xbe/0x140 [ 471.770098][ T824] netif_set_mtu_ext+0x590/0x7d0 [ 471.770121][ T824] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 471.770138][ T824] ? __lock_acquire+0xb97/0x1ce0 [ 471.770179][ T824] netif_set_mtu+0x98/0x140 [ 471.770198][ T824] ? __pfx_netif_set_mtu+0x10/0x10 [ 471.770228][ T824] ? full_name_hash+0xbc/0x110 [ 471.770257][ T824] dev_set_mtu+0xb2/0x260 [ 471.770280][ T824] dev_ifsioc+0xd28/0x1f70 [ 471.770303][ T824] ? __pfx_dev_ifsioc+0x10/0x10 [ 471.770321][ T824] ? __pfx___mutex_lock+0x10/0x10 [ 471.770352][ T824] ? dev_load+0x8e/0x240 [ 471.770376][ T824] dev_ioctl+0x223/0x10e0 [ 471.770397][ T824] sock_do_ioctl+0x19d/0x280 [ 471.770423][ T824] ? __pfx_sock_do_ioctl+0x10/0x10 [ 471.770453][ T824] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 471.770481][ T824] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 471.770533][ T824] sock_ioctl+0x227/0x6b0 [ 471.770559][ T824] ? __pfx_sock_ioctl+0x10/0x10 [ 471.770582][ T824] ? hook_file_ioctl_common+0x145/0x410 [ 471.770609][ T824] ? selinux_file_ioctl+0x180/0x270 [ 471.770633][ T824] ? selinux_file_ioctl+0xb4/0x270 [ 471.770660][ T824] ? __pfx_sock_ioctl+0x10/0x10 [ 471.770686][ T824] __x64_sys_ioctl+0x18b/0x210 [ 471.770715][ T824] do_syscall_64+0xcd/0x4c0 [ 471.770738][ T824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.770758][ T824] RIP: 0033:0x7efc9b58ebe9 [ 471.770774][ T824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.770791][ T824] RSP: 002b:00007efc9c357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.770809][ T824] RAX: ffffffffffffffda RBX: 00007efc9b7b5fa0 RCX: 00007efc9b58ebe9 [ 471.770822][ T824] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 471.770834][ T824] RBP: 00007efc9c357090 R08: 0000000000000000 R09: 0000000000000000 [ 471.770845][ T824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.770855][ T824] R13: 00007efc9b7b6038 R14: 00007efc9b7b5fa0 R15: 00007ffe4e8c9cd8 [ 471.770881][ T824] [ 471.852252][ T830] FAULT_INJECTION: forcing a failure. [ 471.852252][ T830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.862949][ T824] tipc: Resetting bearer [ 471.865305][ T830] CPU: 0 UID: 0 PID: 830 Comm: syz.6.4933 Not tainted syzkaller #0 PREEMPT(full) [ 471.865328][ T830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.865339][ T830] Call Trace: [ 471.865345][ T830] [ 471.865352][ T830] dump_stack_lvl+0x16c/0x1f0 [ 471.865376][ T830] should_fail_ex+0x512/0x640 [ 471.865399][ T830] _copy_from_user+0x2e/0xd0 [ 471.865422][ T830] wext_handle_ioctl+0xc2/0x2a0 [ 471.865442][ T830] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 471.865463][ T830] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 471.865490][ T830] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 471.865520][ T830] sock_ioctl+0x3a1/0x6b0 [ 471.865545][ T830] ? __pfx_sock_ioctl+0x10/0x10 [ 471.865567][ T830] ? hook_file_ioctl_common+0x145/0x410 [ 471.865591][ T830] ? selinux_file_ioctl+0x180/0x270 [ 471.865614][ T830] ? selinux_file_ioctl+0xb4/0x270 [ 471.865638][ T830] ? __pfx_sock_ioctl+0x10/0x10 [ 471.865662][ T830] __x64_sys_ioctl+0x18b/0x210 [ 471.865689][ T830] do_syscall_64+0xcd/0x4c0 [ 471.865711][ T830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.865728][ T830] RIP: 0033:0x7fcb0058ebe9 [ 471.865742][ T830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.865763][ T830] RSP: 002b:00007fcb014d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.865780][ T830] RAX: ffffffffffffffda RBX: 00007fcb007b5fa0 RCX: 00007fcb0058ebe9 [ 471.865791][ T830] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 471.865802][ T830] RBP: 00007fcb014d0090 R08: 0000000000000000 R09: 0000000000000000 [ 471.865812][ T830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.865822][ T830] R13: 00007fcb007b6038 R14: 00007fcb007b5fa0 R15: 00007ffe7d746648 [ 471.865845][ T830] [ 471.992674][ T822] tipc: Resetting bearer [ 471.995665][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 472.011426][ T822] tipc: Disabling bearer [ 472.077914][ T6282] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 472.081930][ T6282] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 472.084929][ T6282] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 472.087980][ T6282] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 472.090840][ T6282] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 472.098849][ T6282] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 472.143856][ T6282] shield 0003:0955:7214.0016: Registered Thunderstrike controller [ 472.147281][ T6282] shield 0003:0955:7214.0016: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 472.149097][ T40] audit: type=1400 audit(1756152551.414:31905): avc: denied { mount } for pid=843 comm="syz.0.4935" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 472.160751][ T40] audit: type=1400 audit(1756152551.424:31906): avc: denied { append } for pid=843 comm="syz.0.4935" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 472.181899][ T40] audit: type=1400 audit(1756152551.452:31907): avc: denied { unmount } for pid=31713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 472.287428][ T40] audit: type=1400 audit(1756152551.555:31908): avc: denied { read } for pid=762 comm="syz.7.4926" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 472.287649][ T763] random: crng reseeded on system resumption [ 472.306609][ T40] audit: type=1400 audit(1756152551.555:31909): avc: denied { ioctl } for pid=762 comm="syz.7.4926" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 472.326684][ T55] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 472.326794][ T6248] usb 12-1: USB disconnect, device number 69 [ 472.330558][ T55] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.335850][ T55] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.340204][ T55] shield 0003:0955:7214.0016: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.345566][ T6248] ------------[ cut here ]------------ [ 472.347392][ T6248] workqueue: work disable count underflowed [ 472.349402][ T6248] WARNING: CPU: 2 PID: 6248 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 472.352200][ T6248] Modules linked in: [ 472.353959][ T6248] CPU: 2 UID: 0 PID: 6248 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 472.359310][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.362701][ T6248] Workqueue: usb_hub_wq hub_event [ 472.364313][ T6248] RIP: 0010:enable_work+0x2f8/0x340 [ 472.366248][ T6248] Code: 89 ee e8 8b 4f 38 00 45 84 ed 0f 85 29 fe ff ff e8 9d 54 38 00 c6 05 2a 64 10 0f 01 90 48 c7 c7 a0 02 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 07 b1 9e 00 e9 aa fe ff ff [ 472.372772][ T6248] RSP: 0018:ffffc90004d1f3c0 EFLAGS: 00010086 [ 472.375004][ T6248] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 472.377700][ T6248] RDX: ffff888026c90000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 472.380212][ T6248] RBP: ffff88802cccc738 R08: 0000000000000001 R09: 0000000000000000 [ 472.382747][ T6248] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920009a3e79 [ 472.385218][ T6248] R13: 0000000000000000 R14: ffff88802cccc698 R15: ffff88802cccc730 [ 472.387749][ T6248] FS: 0000000000000000(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 472.390560][ T6248] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.392622][ T6248] CR2: 00007efc9b5b6980 CR3: 0000000032680000 CR4: 0000000000352ef0 [ 472.395107][ T6248] DR0: 0000000000000006 DR1: 0000000000000004 DR2: 0000000000006d33 [ 472.397587][ T6248] DR3: 0000000000000404 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 472.400070][ T6248] Call Trace: [ 472.401150][ T6248] [ 472.402095][ T6248] ? __pfx_enable_work+0x10/0x10 [ 472.403664][ T6248] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 472.405494][ T6248] __cancel_work_sync+0xe7/0x130 [ 472.407082][ T6248] thermal_zone_device_unregister+0x28e/0x4d0 [ 472.408985][ T6248] ? __pfx_shield_remove+0x10/0x10 [ 472.410613][ T6248] power_supply_unregister+0x10a/0x150 [ 472.412316][ T6248] shield_remove+0x75/0x130 [ 472.413753][ T6248] ? __pfx_shield_remove+0x10/0x10 [ 472.415372][ T6248] hid_device_remove+0xd1/0x260 [ 472.416910][ T6248] ? __pfx_hid_device_remove+0x10/0x10 [ 472.418615][ T6248] device_remove+0xc8/0x170 [ 472.420045][ T6248] device_release_driver_internal+0x44b/0x620 [ 472.421952][ T6248] bus_remove_device+0x22f/0x420 [ 472.423518][ T6248] device_del+0x396/0x9f0 [ 472.424878][ T6248] ? __pfx_device_del+0x10/0x10 [ 472.426432][ T6248] ? do_raw_spin_lock+0x12c/0x2b0 [ 472.428040][ T6248] hid_destroy_device+0x19c/0x240 [ 472.429748][ T6248] usbhid_disconnect+0xa0/0xe0 [ 472.431341][ T6248] usb_unbind_interface+0x1dd/0x9e0 [ 472.433015][ T6248] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 472.434835][ T6248] ? __pfx_usb_unbind_interface+0x10/0x10 [ 472.436664][ T6248] device_remove+0x125/0x170 [ 472.438143][ T6248] device_release_driver_internal+0x44b/0x620 [ 472.440069][ T6248] bus_remove_device+0x22f/0x420 [ 472.441649][ T6248] device_del+0x396/0x9f0 [ 472.443056][ T6248] ? __pfx_device_del+0x10/0x10 [ 472.444613][ T6248] ? kobject_put+0x210/0x5a0 [ 472.446097][ T6248] usb_disable_device+0x355/0x7d0 [ 472.447746][ T6248] usb_disconnect+0x2e1/0x9c0 [ 472.449249][ T6248] hub_event+0x1c81/0x4fe0 [ 472.450725][ T6248] ? __lock_acquire+0xb97/0x1ce0 [ 472.452288][ T6248] ? __pfx_hub_event+0x10/0x10 [ 472.453774][ T6248] ? __pfx___iowrite64_lo_hi+0x10/0x10 [ 472.455509][ T6248] ? rcu_is_watching+0x12/0xc0 [ 472.457058][ T6248] process_one_work+0x9cf/0x1b70 [ 472.458789][ T6248] ? __pfx_process_one_work+0x10/0x10 [ 472.460524][ T6248] ? assign_work+0x1a0/0x250 [ 472.461965][ T6248] worker_thread+0x6c8/0xf10 [ 472.463439][ T6248] ? __kthread_parkme+0x19e/0x250 [ 472.465030][ T6248] ? __pfx_worker_thread+0x10/0x10 [ 472.466675][ T6248] kthread+0x3c5/0x780 [ 472.467979][ T6248] ? __pfx_kthread+0x10/0x10 [ 472.469447][ T6248] ? rcu_is_watching+0x12/0xc0 [ 472.470992][ T6248] ? __pfx_kthread+0x10/0x10 [ 472.472459][ T6248] ret_from_fork+0x5d7/0x6f0 [ 472.473914][ T6248] ? __pfx_kthread+0x10/0x10 [ 472.475375][ T6248] ret_from_fork_asm+0x1a/0x30 [ 472.476911][ T6248] [ 472.477898][ T6248] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.480170][ T6248] CPU: 2 UID: 0 PID: 6248 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 472.483111][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.486436][ T6248] Workqueue: usb_hub_wq hub_event [ 472.488038][ T6248] Call Trace: [ 472.489075][ T6248] [ 472.489980][ T6248] dump_stack_lvl+0x3d/0x1f0 [ 472.491409][ T6248] vpanic+0x6e8/0x7a0 [ 472.492659][ T6248] ? __pfx_vpanic+0x10/0x10 [ 472.494056][ T6248] ? enable_work+0x2f8/0x340 [ 472.495669][ T6248] panic+0xca/0xd0 [ 472.496924][ T6248] ? __pfx_panic+0x10/0x10 [ 472.498310][ T6248] ? check_panic_on_warn+0x1f/0xb0 [ 472.499870][ T6248] check_panic_on_warn+0xab/0xb0 [ 472.501535][ T6248] __warn+0xf6/0x3c0 [ 472.502812][ T6248] ? __pfx_vprintk_emit+0x10/0x10 [ 472.504408][ T6248] ? enable_work+0x2f8/0x340 [ 472.505843][ T6248] report_bug+0x3c3/0x580 [ 472.507234][ T6248] ? enable_work+0x2f8/0x340 [ 472.508720][ T6248] handle_bug+0x184/0x210 [ 472.510106][ T6248] exc_invalid_op+0x17/0x50 [ 472.511599][ T6248] asm_exc_invalid_op+0x1a/0x20 [ 472.513140][ T6248] RIP: 0010:enable_work+0x2f8/0x340 [ 472.514819][ T6248] Code: 89 ee e8 8b 4f 38 00 45 84 ed 0f 85 29 fe ff ff e8 9d 54 38 00 c6 05 2a 64 10 0f 01 90 48 c7 c7 a0 02 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 07 b1 9e 00 e9 aa fe ff ff [ 472.520893][ T6248] RSP: 0018:ffffc90004d1f3c0 EFLAGS: 00010086 [ 472.522912][ T6248] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 472.525350][ T6248] RDX: ffff888026c90000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 472.527890][ T6248] RBP: ffff88802cccc738 R08: 0000000000000001 R09: 0000000000000000 [ 472.530393][ T6248] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920009a3e79 [ 472.532862][ T6248] R13: 0000000000000000 R14: ffff88802cccc698 R15: ffff88802cccc730 [ 472.535328][ T6248] ? __warn_printk+0x198/0x350 [ 472.536868][ T6248] ? __warn_printk+0x1a5/0x350 [ 472.538391][ T6248] ? __pfx_enable_work+0x10/0x10 [ 472.539963][ T6248] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 472.541811][ T6248] __cancel_work_sync+0xe7/0x130 [ 472.543380][ T6248] thermal_zone_device_unregister+0x28e/0x4d0 [ 472.545288][ T6248] ? __pfx_shield_remove+0x10/0x10 [ 472.546941][ T6248] power_supply_unregister+0x10a/0x150 [ 472.548662][ T6248] shield_remove+0x75/0x130 [ 472.550129][ T6248] ? __pfx_shield_remove+0x10/0x10 [ 472.551766][ T6248] hid_device_remove+0xd1/0x260 [ 472.553277][ T6248] ? __pfx_hid_device_remove+0x10/0x10 [ 472.554924][ T6248] device_remove+0xc8/0x170 [ 472.556331][ T6248] device_release_driver_internal+0x44b/0x620 [ 472.558181][ T6248] bus_remove_device+0x22f/0x420 [ 472.559749][ T6248] device_del+0x396/0x9f0 [ 472.561129][ T6248] ? __pfx_device_del+0x10/0x10 [ 472.562624][ T6248] ? do_raw_spin_lock+0x12c/0x2b0 [ 472.564169][ T6248] hid_destroy_device+0x19c/0x240 [ 472.565722][ T6248] usbhid_disconnect+0xa0/0xe0 [ 472.567229][ T6248] usb_unbind_interface+0x1dd/0x9e0 [ 472.568843][ T6248] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 472.570578][ T6248] ? __pfx_usb_unbind_interface+0x10/0x10 [ 472.572499][ T6248] device_remove+0x125/0x170 [ 472.574054][ T6248] device_release_driver_internal+0x44b/0x620 [ 472.575943][ T6248] bus_remove_device+0x22f/0x420 [ 472.577583][ T6248] device_del+0x396/0x9f0 [ 472.578950][ T6248] ? __pfx_device_del+0x10/0x10 [ 472.580470][ T6248] ? kobject_put+0x210/0x5a0 [ 472.581930][ T6248] usb_disable_device+0x355/0x7d0 [ 472.583562][ T6248] usb_disconnect+0x2e1/0x9c0 [ 472.585007][ T6248] hub_event+0x1c81/0x4fe0 [ 472.586410][ T6248] ? __lock_acquire+0xb97/0x1ce0 [ 472.587945][ T6248] ? __pfx_hub_event+0x10/0x10 [ 472.589399][ T6248] ? __pfx___iowrite64_lo_hi+0x10/0x10 [ 472.591109][ T6248] ? rcu_is_watching+0x12/0xc0 [ 472.592684][ T6248] process_one_work+0x9cf/0x1b70 [ 472.594354][ T6248] ? __pfx_process_one_work+0x10/0x10 [ 472.596047][ T6248] ? assign_work+0x1a0/0x250 [ 472.597531][ T6248] worker_thread+0x6c8/0xf10 [ 472.599148][ T6248] ? __kthread_parkme+0x19e/0x250 [ 472.600745][ T6248] ? __pfx_worker_thread+0x10/0x10 [ 472.602629][ T6248] kthread+0x3c5/0x780 [ 472.603914][ T6248] ? __pfx_kthread+0x10/0x10 [ 472.605356][ T6248] ? rcu_is_watching+0x12/0xc0 [ 472.606887][ T6248] ? __pfx_kthread+0x10/0x10 [ 472.608342][ T6248] ret_from_fork+0x5d7/0x6f0 [ 472.609883][ T6248] ? __pfx_kthread+0x10/0x10 [ 472.611373][ T6248] ret_from_fork_asm+0x1a/0x30 [ 472.612868][ T6248] [ 472.614528][ T6248] Kernel Offset: disabled [ 472.615873][ T6248] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:09:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a63fe80 RCX=ffffffff81af8c71 RDX=ffff888046e1a440 RSI=ffffffff81af8c4b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000ca0f870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4c7fd1 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81af8c52 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003c898000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e8ca060 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e8ca1e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e8ca1e6 00007ffe4e8ca1ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc9b612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc9b612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc9b612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc9b612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc9b612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efc9b612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a641ea0 RCX=ffffffff81af8c71 RDX=ffff8880249cc880 RSI=ffffffff81af8c4b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005b1f888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4c83d5 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81af8c4d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000ffe000 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6fdc556 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6fdc556 00007fffc6fdc55c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a5874a8 00007f8b2a5874a0 00007f8b2a587498 00007f8b2a587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2b0ed100 00007f8b2a587460 00007f8b2a580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a5874b8 00007f8b2a5874b0 00007f8b2a5874a8 00007f8b2a5874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90004d1ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc9b5b6980 CR3=0000000032680000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000004 DR2=0000000000006d33 DR3=0000000000000404 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2b238f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6fdc556 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6fdc556 00007fffc6fdc55c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b2a412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000372e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc900251b6b68 RCX=ffffffff8b924235 RDX=1ffff92004a36d6e RSI=ffffffff8b92265f RDI=ffffc900251b6b58 RBP=0000000000000001 RSP=ffffc900251b69b0 R8 =0000000000000007 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000000 R12=ffff8880278282c0 R13=ffffc900251b6b58 R14=ffffc900251b6b58 R15=ffffc900251b6b58 RIP=ffffffff8b9226b8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc9c2e56c0 CR3=000000004aac5000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000004 DR2=0000000000006d33 DR3=0000000000000404 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 60a3c1389515b933 4d1da4df468b9fb5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b29fbeefcde3accd 499cd95837a21d54 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86bb7ea3bc311947 bcf8d613eafa9829 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f97d1cec37d420e9 3cc4b4ce143eaa29 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000185f1b70 23046420235aef9a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000680000011f 000000000000011f ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000068f13b48dd d7186c48d71869b5 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2461848a001429b3 0000011f00000006 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 95c2110ee726d5f0 066181e157fea4d3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b75bc6dfac47a90 7e2f49afd0aafd91 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000