last executing test programs: 4.633518371s ago: executing program 3 (id=1525): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015102020000102505a1a440000102030109023b0001010a600f230400060302060000052406000005240008000d240f01090000000100010077090582022000050200090503022000030000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) set_mempolicy(0x8000, &(0x7f0000000500)=0xfffffffffffffffd, 0x2) (async) set_mempolicy(0x8000, &(0x7f0000000500)=0xfffffffffffffffd, 0x2) syz_clone3(&(0x7f0000000400)={0x10000000, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), {0x13}, &(0x7f0000000580), 0x0, &(0x7f0000000280)=""/25, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) (async) syz_clone3(&(0x7f0000000400)={0x10000000, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x13}, &(0x7f0000000580), 0x0, &(0x7f0000000280)=""/25, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) inotify_init1(0x0) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x60004ce) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x20000000000006) (async) sendfile(r4, r5, 0x0, 0x20000000000006) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x30, 0xfa00, {0x0, &(0x7f0000000580), 0x106, 0xa}}, 0xfd40) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000004c0)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="17285f3c", 0x4}], 0x1, 0x0) (async) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="17285f3c", 0x4}], 0x1, 0x0) syz_open_procfs(r2, &(0x7f0000000240)='net/udplite6\x00') (async) r8 = syz_open_procfs(r2, &(0x7f0000000240)='net/udplite6\x00') pread64(r8, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) timer_create(0x0, &(0x7f0000000200)={0x0, 0x1e, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5}) timer_settime(r9, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) (async) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 962.005167ms ago: executing program 3 (id=1564): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffeffffff7, 0x440002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000036f1af9ba901cbb51a1cd2b6714fdb446429f7a453d843d9b584be5b6433cfd45b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000004c0)=0xffffff81) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000280)="e381f4db5c6d8ea1278b3163a8de121595ba63bbda606b9146c630191ccc9146a62490be73f5f00486b08a76d896362f92e656cc9c3e61dd695a2e839599d0757360abf16d72b8f32725386a50137e1f989526167b6e3d1e914579ef42b7ba34f8b6c449cd08b5b0a318", 0x6a}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000180), 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, "7eacf9", "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"}}, 0x110) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x1, 0x2}) 949.931125ms ago: executing program 3 (id=1568): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x3ff, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0xfffffff8) 881.235877ms ago: executing program 3 (id=1569): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000400)={0xb0, 0xfffffffffffffff5, 0x3, [{{0x5, 0x1, 0x5, 0x5, 0x2, 0xdf7, {0x3, 0x6, 0x28, 0x0, 0x2b26f94500000000, 0xca, 0x8, 0xff, 0x7, 0x1000, 0x3, 0x0, r1, 0xe5, 0x6}}, {0x0, 0xd70b, 0x1, 0x1, '-'}}]}, 0xb0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x401}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2800000000000000290000003900000000020201"], 0x28}, 0x0) 880.325599ms ago: executing program 1 (id=1570): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000340)={0x1, 0x1, 0x6, r2, 0x7}, 0xc) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x240000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000013c0)={0x20, 0x3, &(0x7f00000003c0)="7f5352411fb420e9785a23b096b7ecefaf39d4322eaa784e109855275f600ba9f9bdff5fdfab7d390e31de2dae31e2afa2e848e4131db4e54e0a6d303a5b85c73acbc5d4286fa4f64b89bc851dce971461171543c642179c4e2af4904772ad102b53b960740c61ce41880e845cece38b7d00e90867e006c6862941a58fd24c14c58dcd72cb36402ed1a4e1386eea4f6bf4e780beb7ef8a2bbec4ee8a90499fd9bd1bc3019549621cc99a660706ed6c260f78da3bdaea7b2398e668ecc92c72e030f330b6883aba4d3ff4f96f3c7a114d648ea63fa3bf44827e2d337e5e076479996df1b2b8261c725a54903d703c460635b8110458edd18d121813b9d7d8db9bbf35502d2b9ff9d5a888a95b2d6711f3716fd9015cbc3fd6f88513832a69b09b13b573d88779c4ffa9dbb0933462d59dcfb952156c538f0b43805de9c3dd7809e3b36bc1a780bd8292a43e8b141407cf54689752c5bda3334f49156563d9e7cc8573cd255ce7dd1d13beb3bb910e3f935ba59872a337205e4d6a13d98d7017a00c52faf32589f6db704b93901c631b0f2113f82c962224d64e800c1438b3f0a698149dd4a02c6b13885de7863eec9d7e973534bd6fb4f2adf5b7a3b97b406f5ea14dbb542f6b61f834a89e899c554b0ec97849880bb435f3a19e541801f9e58fd9b989c2bceb0efe47f980cc985c683309aa01c7930454cf63bfeaa435884fbe4731f986da06c341807c49c303bf73bfb455eca3e8f4e5904197e156774f93b13d15c343a7fdaa6e9ffa46cb3a582e94f6b34e50f4fc975a24e56794a5d10bf7b5deae676e67cb6481420264f2069107cd02bb5dba6eafecaef8c3072d2c7c8623a6aab707e5a71b8d73f9ac1c50c996065aa5fcd0d436eeb668e5131c9cb838505a04771d21712f902b98c20b6f20ba8955360e11d96f44e6dd7bcdeba12b55dbe7e8219b3a19705f0a062ae3d0c751bead576316b7c9ba3e7ded2ef9ebfdc9d25195a9c9d0833335043bffa55fccec5e8b5522343532e721764e2d5be869109c97eb14bf4ce2069782d7c3025064d9765a7740b14617ccc3368410163736254eccac9710f6201e69cac7f191a1ae5e36216cd370552a5c28e86813ef769fa3b3e50c74dda24224853a071ed0899cf740e4556702ec7f289bd378a4d29fd2c701e7650676106ff2afb523d8d0ebd740b0c7e206553ff5dd7c94fbd93dcea2513c1e2fe6fcb44457745753f06e3e1fedf6fca8067346bb9fa1a1f72315cdebdd4c79332d7695d3dfca66fc1975f13987f2a27071cbac2db4b0ed155b9f8378046df416de8fcf5b01e9246890e2f2717fbe7239adde3e6e68b9746f6903cb9c4dc48bd3b34af3d5dd78f1397e3d387e586e6ac339e1ea2ed09e49ddc870bd00d93e597e7aab2b10a232b5066a9177f88b2494c38136e3223087a3970f77f2f7fded132e176c1c5aa029aabcc3fcb3b6cd5a83891b4b03a315d50c834332000050abf2769b3fd24d5e04c67204683b85691cfc6d18281396e3c2da520817b51876b0c9a6115311ebc7221c9f10003bd2db7103aff90acbdfd2b19a5959601faa1e72aa4dbc0d19817559c558ff98b08e57a728c217dbe24585ef56aecb4001f05d03b9404f041db45b99e86c317b4362e1909ac9272a0eeff8c531faa1eb80e9ef66a009ded89611aef6b2520862318a46062852d14c3ebc09faad2c96bc5e799525682a4193855afcdcb2218cb9cd61a2a86a87a48880e18b465e04551af571ceb372e2e05b5219befc360be8389177892e756890541b70f780ae83f20cbccdd3730cb55fbc4f54823b8dcd7adf3f44b5ab457744cf36d7981d16d9b6aef97c891ff02c53ebce37d81a100c29a2ffed5fdb0114abd071ba6fd553f4ceedd24c210007102d650b192d65999e55597c8f8fd0280958586addaefea72cb648376021a71e9ac0ef2be9489d798cebfb0e7de140de7ebe123775a95ec2d948753854413cb39ca0ba1d06cac0f6747f54dcf930425921433c8446502e128c3fd04e0a64c9f6a1403799009fade90acb8cc2c19ab749a75f1ece748d43f18c8fd70483c765360f4f85919630614d9e9ad4dc4b6f92ce6f9d874f25fc9ed3d5365aa5aaae1bdb97fe395c60abf142777947547d647123e4ad8d8806c9ac1292ab6cb195e57e4553f75faf1c591ce93f65e47e3c8b46acba949d2ab80df7abf7d1457c8d08417ef8c138a413508a569516ee2c52eaf3e22a0d3d1a9fd621f7d97de6a2d82cb95a7bc0d6e113ec24dbbe8645e65d70b5c4894711873ca1d1fca9154850797ca3ff407675b30a0759bb6a2969ff04baa53039e6c39341bf5520bcbeecfb5f29d3b67abd915f967a70d0c74183faa1703daaccc5b35100c9a413ff8c356d53aaf9e96b7454274b696cce238d7aa3297c6778f0ab0b166bb23907436aea37e133440505b478a044ce539bf12440655c2af0274eea31ca1685871018de9cc53a4f29d21e73ba3caabee40b045179bc863a48e502c10c295426ddece463fa3044e3047b02bd449e36fd7cfe1af4ddf7f79c0ed017a0361bb91606487ffcc45e1362f470ee4d1af82794bf1837b09ea71e3572c92381421a2f59ae8eacaf0c60fb055dd6c3855f56d99b0c2de0110e5e2b07a121eacfdb46d8949ba7cdca4312bad07d6b234597650a772e9f7689558c0624c21a430fac4c4c281d33711923e68823abd18325b5fb6c5bcf62495ebed95b3a2ae7614b2e4bcf6bcd659eb513cf1ca2784ed831d0cd7f666343685809c4fc24d20341c3df31d64a1099846bc4dbc5d09a0238e0d7f55f092bc5f23e7968182212c3c318ecee4aa2902ce3665c94a799de8dc809073795d77cfc8f6dbb95f57ca84b155af7018dd8d0704ad59f84205031e925395a0cc80110e7b87025bbcbfb2cabda218bb82c7aef088ef2f961be5dd21d1f9c31cc4c1b64a4e254d80fcda530630e759c3ff4c568954e925648553a100ac75ddda3c6219c2608f30489c46c294284500d662085ae9fd94dc2a443aa4df5194a7ff79ff47dda0db2487f9d017d3700c0704f7301232670bc05e29547a3badc7cb3c09cd67fb3495f4575d17c06d5dfc13f54d18d53a9df300196061495a6a7382c4238f3478cebe49b7140d2660295e9b90d6e50620c59b1a983419f23137ab677ea382f057bc2ed6ac9966a01d4e8fc7318b4b529e784df3ad892ebd88c8055788268bb73576e6761fe04e543aa527b5a08013aea7c88c4da0e3fef6513bf6981436afaa6f3fec579c90088c821953150c6be02085352a2a807ef1000326052c1cf868015e02dce57558bae85210851674852d32b7d837f19125ff7784ed7c9b247fdd8d06de7c84edc839e2013ccd38632c9a40e80890224486cc9e72bffc8ef44639c84c993b644ba41527a64964f66390ea63dfdd7d1105ce192726b851ab898e432195bd70e6324170810c73c1e96e31a4a652c6256c0417b2e52c95b3f1718f0debb33bbee8e2c9ea7368076827e05d7d39b15562ef65641bd3d89482c4fc3859defd996ae3dafa703ba67222603c31256627694e6d3f3ed413c85f99df7df738417734642b99513bcd23ad8afa047ee3620110c81367da07d331bdb2348d96e647d53d59188d73212f3a6d79e9b578d7b932a5fc3a03e999a8a01016c27afcfeac7fb92cb0bc02901d3c44a4c400b7217adf9478962ffee6a3b4d2a1089fd1fcfd0baea3e140f8e07428ea8ceca3f1fce491b42874c6f2db487464d27e04f33da8cc6f1afbef0439974c14c8b811cbe53a512bb8d170217146f9a01c81cb254724b1f51afe1de0211f580e12259ad5d4dc868ed2d56b85f2812d82419c15c04b6716d1f67df84ada471d61a69a5389e9e7d94807d93d2d7eb9d4fcaf67a1efa54aea8c89fae9457bff53d4ab87cc2c4a8c35f969b90d3f74bbe96e3d6e79f999209acd6da5ba46ff3171c4638f1c96dc62df7a347d9bfaaa8637a7204f1d83a36c20cf6a8f2774f077fc9059430b629d171d6047e15ca7656256d5c4e88d48792f75618ca8c36a99b6f73fd7485db65f9d24cdacca39dab028e5319c2cfa9c6e56e1b60a88867e432158ec884188a370a4b587fc44c54fff41a02f72a12353ac6c247e1bc504cf7f5d51d789ded9f513c2dde6999b6ad0043cbd5140e5b079dd433d2e113e2a3b19c3577ec68106f867fefce9f6bc240d67b5fcd49936957852ebab0303b0ad956803cdeacab4b8b001236fa7044af4c4d94d0719e09ae09d42267114bc538d524524f339f312f88c53752857ad9fc8f26c92b7a57035161f5de039a6df9c0a8db0812fab47ab901eaffbe6c02961bd7d3c1bc725b5d51e2a728fae9e632747767e029d9fcf00ac9acd64b193becfe34348d91c7f65458b65419ab0784422ebccd30bd489460129b2bea088c3cecbd7a78e6206810f553f9607c6d188f9462b75a7e3c6602b909bddfe7f77b9d972629e5184ef0b1105d87eeb55d21ea089c7f67f29af2a193829fb0cdf1220b82faeae782f7d68a9f4dbd891938c0a97459e0afd3071621551ace1f4ace7a5c4412d10eecea5f877565303f563ada0db37a51481909079b14d38925ce4afc387cab378edec689058cfa7f658cd928a92e34f3e5c2561dfc20266d5d7935229e63c750e994ec50fcbce384fb1057a3355bb8fea01c4a0c9cb1b0afaebd46f0c7c4b21fd1ede0371376d6beb75b6cded4e21bc97b4598d6db0196ef8024bc7b677a044b630430f3d0760f051d5b7f13b8e98156f42acbdb8072161c5e177841a2151526088bc6a01e7bffac2d3497de6698912c6e8f0266a102bec1c08e74116068530c60bdf8ae6bf49144f3a2f3ed23900f763064e15485e2c787585f8b619fffd212d58c5ff7402a670932a82309ec98b9a48556f5f44b0f7bb2b75b66128c4d1105e23e2620d8f0fee1b38d662e23e4abf604237bb2e3a0ff9d3a8bafb99f5a087945631b0131ae490d4fe8162bb988c9a32c63fc3e26f32b4cbc936b42c160dc3436b1986b2b5828c341904c1735800678ed1e0bd8b90d2b6a04ebdff60ef89c8e7a00e993a0050835dd696e762cd19e099f0dcc8ce25f01d7d1ee56dd22832e685d4cb637e08a0b6a12e83608409f4f299db338cf24ffffd43d70e1f9edb578a71f1fa423dfd1d40bfa62b1e63b62bef02e1b867b1bd87ceaabeba19a75826f64ee2b025ec4f3e465e9ba775b43d5e0baed8996f59f76bd3e1b3fbb2eda21c54403c22cd7a8dd981ba0046710a3cebca04393d4f35753c592f43b3460f6aa12318aa5bf06ea9f09db2f2474f5a6ef046b841ea429dae2aedec8ab0904c64a0d900f52142cc34127ee5298ac9ac23bd96f6bdf55bc94b34efadb410a21adb473b125243a86de74b1b566f45314b71b408c083ec7b9c04526470e100ba85b48521565d77e934e1f3d6ac13fc5ecaa8949e4a7830785a7748f2e042766a6f3d7092ce76697d219dddf6764aa16ff0c5777142bb469b35707f768e4480bd46b08f038bd8a04358b0884fbe595131755a5b419c4692c40d4908083c9415279abed8290de0f5399f2f197344618ca757c904bebaa8601de5f5ae3658aa636ded5482144bf1d7c676caf7bdb999a5374185b78b96ecf9dad4abffaf73319450926b9f4c52b0a33f36e57fff3c78c1a9af887d780c18d0c6009a960c969a435d55efafc65297dcd101e6c27a280bc982c94d5c03ef5f1a6990f8ac9804edef94b9a944daffccbd796e6fbbd80a2ff4bf7ba6658f8071b18869659266811cc06e062c82022ca2f", 0x5}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001500)={0x2, 0xf9, &(0x7f0000001400)="6546b3028e47c3843933f182df161a531f2ebc7a3690e4a5bdc6452a9bfacfedd75fe98caec5c31f950b7fca39f9305f41557280dd57c963bd42b77388e7c58c220ff1332e19aefdcd46ddc55eec37b77f4b49f6229eab9c35f9f4c968229cf5ecf9aaf9a93760bde2686bc5f54ec0ae767e2471bff7f8eda1666b84b94b7b93402a910397d912f27d7e1fcaf559e500806ce5a923e1b1864ecceb41aadf69268f1c68ecc5abc3ebd053ee0e4983e1ff79aa3eb5e9eec0726d86dcaa42e13ceb724e5919c40021c94f77a7a66984b5ee9d1a56349142d1be2ee9ac8eb2bcd65f41a2cc98e39ec72203259f35568d86c2adcf6734a5416f5839"}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x40000, 0x0) r5 = fsmount(r4, 0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001580)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001680)=0xe8) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000016c0), 0x2) readv(r7, &(0x7f00000038c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/216, 0xd8}, {&(0x7f0000003800)=""/167, 0xa7}], 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000003900)={{0xa, 0x4e23, 0x5b, @mcast2, 0x10001}, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}, 0x10000}, 0xffffffffffffffff, {[0x1000, 0x101, 0x100, 0x5e3b, 0x7, 0xac, 0x16f, 0x5]}}, 0x5c) bind$inet6(r0, &(0x7f0000003980)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0xfffffffa}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f00000039c0)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000003a00)={r6, 0x1, 0x6, @multicast}, 0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000003a40), &(0x7f0000003a80)=0xe) sendmsg$can_raw(r4, &(0x7f0000003b80)={&(0x7f0000003ac0), 0x10, &(0x7f0000003b40)={&(0x7f0000003b00)=@can={{0x2}, 0x4, 0x1, 0x0, 0x0, "a5c012f8eaade61d"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000003bc0)={r4, 0x3ff, 0x5, 0x9}) tee(r10, r0, 0x6, 0x2) ioctl$RTC_PIE_OFF(r5, 0x7006) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c40), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000003d80)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x44, r11, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x40000094) sendmsg$nl_route(r0, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd27, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x3, 0x7, 0x0, 0x0, 0x5, 0x4}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000003ec0)={0x3, 0x9, 0x8, {0x6, 0x80}, {0x1, 0x4}, @ramp={0x3, 0x2, {0xb, 0x101, 0x2, 0x2}}}) 880.051756ms ago: executing program 3 (id=1571): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x60, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "21872b20c62a66b8"}}, 0x48}}, 0x81) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48}}, 0x40884) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) (async) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000001000/0x3000)=nil) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) (async) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) 879.759447ms ago: executing program 1 (id=1572): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b74aa158346f92c9d770d07374528026b7858d9d0455b79e8fbc6527710101d8c11922bde50974f37e000000000000", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r1, r3, 0x2f, 0x18, 0x4, @void, @value=r1}, 0x20) ioctl$TIOCEXCL(r0, 0x540c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl(r4, 0x8b01, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mctp_key_release\x00', r3, 0x0, 0x2a7}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range(r5, r0, 0x0) 799.103913ms ago: executing program 1 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000010}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0xfff, 0xc, 0x1, 0x3, 0x0, 0xf, 0x6, 0x8d, 0x4, 0x9, 0xb, 0x7, 0x2}, {0x7, 0x1, 0x7, 0x7, 0xb, 0xfb, 0x92, 0x4, 0x3, 0x28, 0xf, 0xf0, 0x2}, {0x7, 0x7ff, 0x4, 0xd, 0x3, 0x6, 0x8, 0x6a, 0x3, 0xe0, 0x7, 0x4, 0x5}], 0x7}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r6 = epoll_create1(0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000007) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r7, 0x406, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000080)={0x90000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000580)={0xa0002008}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x94, &(0x7f0000000440)=ANY=[@ANYBLOB="9403131ac31a840f6731b9879bdd46da744bb2c37fd60ea754877a340ea5a51a504abfb84fe82ecd4b4d4bcb4637be9375a7230c9ff956a19b9c28393778c154172db496fdb6e1c098d3c93083d3e9fd1a00000000b0bf0974583f2214304343707d79c7f0b62507a0e479fdbf5b708888e402e5f98f65a224f354c926d2fc3230f9aaf77da3740400"/148]}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000040, 0xb96b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 792.696077ms ago: executing program 3 (id=1575): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100002, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2d0000001a00010029bd7000000000a9e4220ecdae512f9b064766b922001d004e220000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040014) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @private=0xa010100}, 0x4}}, 0x2e) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e1e, @rand_addr=0x64010101}, 0x10) connect$inet(r9, &(0x7f0000000280)={0x2, 0x1005, @multicast1}, 0x10) sendmmsg$inet(r9, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0xfffffffffffffce0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000e80)="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", 0x100}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0xffff, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="00c7662fcf1f6e36", 0x8}, {&(0x7f0000000200)="bc3a96675c480de28541f3fd43", 0xd}, {&(0x7f0000000d80)="15c8a822f3ae4653f54c1c0a66b0d413238c0d9926c0b38ae3c01ce6e941360cb8db64b556a46eb3ef5642b390ec2411d25d8db0e0dba07a6c3d0211ff669dc6f1121e7c5bdb5721190047b1c4bd5be869401a24057906471c6422d7991b67dca21d8eaed480e556cf9b60f8de973ddfa9333da40415706c55ef19bcaff31c64f2d50f369a885b7c0ceb21348b309f18ceb2c439b4c4fd657c3bf54fe03e0e9efdade51717f6790476cdd986a222de6e", 0xb0}, {&(0x7f0000000180)="41a62dc6d4898213fa9f35d2758ef9b18eb719b8e43f48d2ad49fee85cdb96b767cddc08ed5e4086595d3ab8afe16e76fbe9a08d04feea7e", 0x38}], 0x4}, 0x48005) readv(r4, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) r10 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 651.225498ms ago: executing program 0 (id=1578): r0 = syz_open_dev$I2C(&(0x7f0000001000), 0x0, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYBLOB='3']) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0xfffffff8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0xa04, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x6, 0x2800, 0x2, 0x2, 0xba2, 0x2c, 0x30, {0x8}, 0xd0, 0x9}}) 651.089216ms ago: executing program 0 (id=1579): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd09000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a0050000000000000000000024000000000000000000000007000000940400008610880000000000000000000000000000110000110000000000"], 0x98}, 0x810) 650.883992ms ago: executing program 2 (id=1580): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x224000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000080)=[{}], 0x1) 579.675643ms ago: executing program 2 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mincore(&(0x7f00001bf000/0x2000)=nil, 0x2000, &(0x7f0000000380)=""/203) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000500)={0x1, 0x0, [{0x80a0000, 0xf5, &(0x7f0000000000)=""/245}]}) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f00000003c0)={0x1}) ioctl$KVM_SET_NESTED_STATE(r8, 0x4048aecb, &(0x7f0000000440)={{0x1, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03f090fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b89abae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) ioctl$VIDIOC_G_STD(r10, 0x80085617, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000100)={{0xc7, 0x1}, 'port1\x00', 0x2d, 0x1000, 0x100, 0x5036, 0x1, 0x9, 0x3, 0x0, 0x0, 0x7f}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340030558200ae1ed0daa5946fb6aebfc4f9d5b73c0b1e1015202437524e71b9fdcf72ae7a183a", @ANYRES16=r12, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000000000000000800090005000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) 480.717866ms ago: executing program 0 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x1) clock_settime(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x9, 0x100, 0x100000000004, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, 0x0) mlockall(0x5) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_open_dev$vcsn(0x0, 0x40, 0xe41d7b4c034e51ed) r5 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, r4}, &(0x7f0000000000)=0x0, 0x0) mlockall(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRESDEC=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x24040011) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0xfffffffd, 0x10}) io_uring_enter(r5, 0x2d3e, 0x0, 0x4, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)={0x18, 0x16, 0xa01, 0x80000000, 0x25dfdbfe, {0x15}, [@generic='!']}, 0x18}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 369.048536ms ago: executing program 2 (id=1583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) recvmsg$can_j1939(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/133, 0x85}], 0x2}, 0x140) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000000)={0x1}) 368.813886ms ago: executing program 2 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x541}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1ae9618bae781acf}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000080}, 0x4000) 271.104084ms ago: executing program 2 (id=1585): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_MRU={0x0, 0x1d, 0x3}, @L2TP_ATTR_CONN_ID={0x3, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffd}, @L2TP_ATTR_L2SPEC_LEN={0x0, 0x6, 0x2}, @L2TP_ATTR_DATA_SEQ={0x0, 0x4, 0x40}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0xb4) 270.879999ms ago: executing program 2 (id=1586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x94, &(0x7f0000000440)=@string={0x94, 0x3, "131ac31a840f6731b9879bdd46da744bb2c37fd60ea754877a340ea5a51a504abfb84fe82ecd4b4d4bcb4637be9375a7230c9ff956a19b9c2839370c91da73802d8dfdbda0a78d0b78c154172db496fdb6e1c098d3c930834a4422b9d51c1517b0bf0974583f2214304343707d79c7f0b62507a0e479fdbf5b708888e402e5f98f65a224f354c926d2fc3230f9aaf77da374"}}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000040, 0xb96b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 19) 60.744309ms ago: executing program 1 (id=1587): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x8bc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140)="8713bb207ac27906d034f4fd410d71bfb4ed85aef17aee1c189d4ed0082dbb2bbcda8daecbeecf5696c533a5f4acb21746d753d1fed105c7fa9fdd77739496bd8e1c272ba2535d229141c01dc8adb61e9b1ccbb661f725f6d401ff7e87ffe835e4f70e42e9d31f682d36df2400d8ce94b53f5720a7805abf4c2ce975479b559c08582b6ff66ac05d885581bdb08da623f7115e2fec9dd9d58de747ff3991736d43d3fd3c4db0dcfd5d8e122b0ef91162f2eac7d5541ab8d66a388c", &(0x7f0000000200)=""/4096}, 0x20) r1 = syz_open_dev$vbi(&(0x7f0000001200), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x8bc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140)="8713bb207ac27906d034f4fd410d71bfb4ed85aef17aee1c189d4ed0082dbb2bbcda8daecbeecf5696c533a5f4acb21746d753d1fed105c7fa9fdd77739496bd8e1c272ba2535d229141c01dc8adb61e9b1ccbb661f725f6d401ff7e87ffe835e4f70e42e9d31f682d36df2400d8ce94b53f5720a7805abf4c2ce975479b559c08582b6ff66ac05d885581bdb08da623f7115e2fec9dd9d58de747ff3991736d43d3fd3c4db0dcfd5d8e122b0ef91162f2eac7d5541ab8d66a388c", &(0x7f0000000200)=""/4096}, 0x20) (async) syz_open_dev$vbi(&(0x7f0000001200), 0x2, 0x2) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) (async) 60.509236ms ago: executing program 1 (id=1588): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006, 0x41d0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 59.656226ms ago: executing program 0 (id=1589): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000dc0)={{@host}, {@my=0x0, 0x2}, 0x400, "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"}, 0x418, 0x10000011}) 1.035409ms ago: executing program 0 (id=1590): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc4c85512, 0x0) read$FUSE(r0, &(0x7f000000e400)={0x2020}, 0x204a) 529.755µs ago: executing program 1 (id=1591): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x700000000000000) 0s ago: executing program 0 (id=1592): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = getpid() sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}], 0x20}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xe}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1e8f}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}]}, 0x3c}}, 0x80) 0s ago: executing program 1 (id=1594): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_emit_ethernet(0xda, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xa4, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x3b, 0x0, 0x3}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "ad659a87ce8d6c4642e7b756fdd99c8a003016d9b0740e1e5222cc00ccb1137d", "91492c9f8a93ab7cbdc2fcd39ddfcb1f049555996610eb1bb8e54a1c3f5624fe1401051de2ce367aadedefa5e434abf7", "0a4dee37c85aecbf21c869478c62f84ba03ff89b863366c0128e76d8", {"51650242e877a758a21f80764984be21", "ef5d907f201d99a4eff0c7b450cf0a15"}}}}}}}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x1, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', 0x3}, 0x18) kernel console output (not intermixed with test programs): 3][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 87.478667][ T7945] do_syscall_64+0xcd/0x4c0 [ 87.478683][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.478699][ T7945] RIP: 0033:0x7f6c23d8ebe9 [ 87.478712][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.478729][ T7945] RSP: 002b:00007f6c24c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.478746][ T7945] RAX: ffffffffffffffda RBX: 00007f6c23fc5fa0 RCX: 00007f6c23d8ebe9 [ 87.478758][ T7945] RDX: 000000000000007a RSI: 0000200000004780 RDI: 0000000000000003 [ 87.478767][ T7945] RBP: 00007f6c24c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 87.478775][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.478780][ T7945] R13: 00007f6c23fc6038 R14: 00007f6c23fc5fa0 R15: 00007ffdcb500ce8 [ 87.478795][ T7945] [ 87.639400][ T7951] netlink: 'syz.1.635': attribute type 13 has an invalid length. [ 87.656781][ T7951] gretap0: refused to change device tx_queue_len [ 87.658930][ T7951] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 87.714178][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 87.770778][ T7963] 9pnet_fd: Insufficient options for proto=fd [ 87.888300][ T7976] netlink: 168 bytes leftover after parsing attributes in process `syz.3.643'. [ 87.894056][ T7976] ptrace attach of "/syz-executor exec"[5969] was attempted by "   NL |U\x0a   &`   @ |\x5cao q4n 8@U>Cz\x07E k΀L.P0Xpʊ\x09 \x22|us\x0dh?ZN۵zP%ʞ 6\x0d&/=@VgQ!\x5c㻚\x09΁\x0b*]\x0dO۩=E*KC"[7976] [ 87.935208][ T7963] kvm_intel: kvm [7962]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x69 [ 88.200848][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 88.200858][ T40] audit: type=1400 audit(1757378784.509:610): avc: denied { append } for pid=7990 comm="syz.0.646" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.338025][ T7995] FAULT_INJECTION: forcing a failure. [ 88.338025][ T7995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.342843][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.1.647 Not tainted syzkaller #0 PREEMPT(full) [ 88.342864][ T7995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.342874][ T7995] Call Trace: [ 88.342880][ T7995] [ 88.342886][ T7995] dump_stack_lvl+0x16c/0x1f0 [ 88.342908][ T7995] should_fail_ex+0x512/0x640 [ 88.342930][ T7995] _copy_to_user+0x32/0xd0 [ 88.342953][ T7995] simple_read_from_buffer+0xcb/0x170 [ 88.342972][ T7995] proc_fail_nth_read+0x197/0x240 [ 88.342993][ T7995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.343011][ T7995] ? rw_verify_area+0xcf/0x6c0 [ 88.343035][ T7995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.343053][ T7995] vfs_read+0x1e1/0xcf0 [ 88.343073][ T7995] ? __pfx___mutex_lock+0x10/0x10 [ 88.343092][ T7995] ? __pfx_vfs_read+0x10/0x10 [ 88.343144][ T7995] ? __fget_files+0x20e/0x3c0 [ 88.343170][ T7995] ksys_read+0x12a/0x250 [ 88.343185][ T7995] ? __pfx_ksys_read+0x10/0x10 [ 88.343207][ T7995] do_syscall_64+0xcd/0x4c0 [ 88.343228][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.343245][ T7995] RIP: 0033:0x7fbf8518d5fc [ 88.343258][ T7995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.343273][ T7995] RSP: 002b:00007fbf86097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.343287][ T7995] RAX: ffffffffffffffda RBX: 00007fbf853c5fa0 RCX: 00007fbf8518d5fc [ 88.343297][ T7995] RDX: 000000000000000f RSI: 00007fbf860970a0 RDI: 0000000000000005 [ 88.343307][ T7995] RBP: 00007fbf86097090 R08: 0000000000000000 R09: 0000000000000000 [ 88.343316][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.343324][ T7995] R13: 00007fbf853c6038 R14: 00007fbf853c5fa0 R15: 00007ffce8694498 [ 88.343344][ T7995] [ 88.416122][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.538872][ T40] audit: type=1400 audit(1757378784.845:611): avc: denied { connect } for pid=7996 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.703835][ T8004] mmap: syz.2.651 (8004) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.835365][ T40] audit: type=1400 audit(1757378785.132:612): avc: denied { getopt } for pid=8011 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.877293][ T6771] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 89.014941][ T40] audit: type=1400 audit(1757378785.311:613): avc: denied { bind } for pid=8021 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.027687][ T40] audit: type=1400 audit(1757378785.321:614): avc: denied { write } for pid=8021 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.039286][ T6771] usb 6-1: Using ep0 maxpacket: 16 [ 89.043425][ T6771] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.045987][ T6771] usb 6-1: config 0 has no interface number 0 [ 89.049252][ T6771] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.052641][ T6771] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.060671][ T6771] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 89.068485][ T6771] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 89.072019][ T6771] usb 6-1: Product: syz [ 89.073316][ T6771] usb 6-1: SerialNumber: syz [ 89.088022][ T6771] usb 6-1: config 0 descriptor?? [ 89.094615][ T6771] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 89.099450][ T6771] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input9 [ 89.099970][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'. [ 89.278912][ T5984] udevd[5984]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 89.304561][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 89.307275][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'. [ 89.311444][ T40] audit: type=1400 audit(1757378785.598:615): avc: denied { write } for pid=8001 comm="syz.1.650" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.322871][ T40] audit: type=1400 audit(1757378785.608:616): avc: denied { call } for pid=8001 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 89.323895][ T8042] misc userio: No port type given on /dev/userio [ 89.384524][ T5971] usb 6-1: USB disconnect, device number 8 [ 89.387177][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.389964][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 89.396519][ T5971] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 89.499786][ T40] audit: type=1400 audit(1757378785.796:617): avc: denied { ioctl } for pid=8060 comm="syz.0.670" path="socket:[19768]" dev="sockfs" ino=19768 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.507011][ T8062] hfs: can't find a HFS filesystem on dev sr0 [ 89.546220][ T8068] veth1_to_batadv: entered promiscuous mode [ 89.590545][ T40] audit: type=1400 audit(1757378785.886:618): avc: denied { map } for pid=8070 comm="syz.0.672" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.592188][ T8072] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.599378][ T40] audit: type=1400 audit(1757378785.886:619): avc: denied { execute } for pid=8070 comm="syz.0.672" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.621012][ T8073] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.886178][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.047806][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 90.053655][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.057971][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.063132][ T34] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.065889][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.068537][ T34] usb 5-1: Product: ࠬ [ 90.069900][ T34] usb 5-1: Manufacturer: 䐊 [ 90.071506][ T34] usb 5-1: SerialNumber: ఌ [ 90.215278][ T8094] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.679'. [ 90.285046][ T34] usb 5-1: 0:2 : does not exist [ 90.297091][ T34] usb 5-1: USB disconnect, device number 7 [ 90.299945][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 90.320122][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.355136][ T8102] overlayfs: failed to resolve 'verity=require': -2 [ 90.605045][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 90.609639][ T8116] overlayfs: missing 'lowerdir' [ 90.758277][ T8129] netlink: 76 bytes leftover after parsing attributes in process `syz.2.692'. [ 90.821068][ T8132] syz.0.693 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.283874][ T8170] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.289008][ T8170] block device autoloading is deprecated and will be removed. [ 91.331263][ T8179] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 91.712239][ T8208] kvm: MWAIT instruction emulated as NOP! [ 92.266522][ T8222] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.270220][ T8222] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.274984][ T8222] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.278766][ T8222] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 92.315681][ T8231] netlink: 'syz.3.721': attribute type 3 has an invalid length. [ 92.318895][ T8231] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 92.322079][ T8231] __nla_validate_parse: 2 callbacks suppressed [ 92.322091][ T8231] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.721'. [ 92.354750][ T8239] program syz.3.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.083961][ T8309] binder: 8308:8309 ioctl 80087601 200000000000 returned -22 [ 93.288983][ T8334] netlink: 196 bytes leftover after parsing attributes in process `syz.1.761'. [ 93.294301][ T8335] netlink: 196 bytes leftover after parsing attributes in process `syz.1.761'. [ 93.316289][ T8334] vivid-000: ================= START STATUS ================= [ 93.320154][ T8334] vivid-000: Test Pattern: 100% Blue [ 93.322780][ T8334] vivid-000: Fill Percentage of Frame: 100 [ 93.326019][ T8334] vivid-000: Horizontal Movement: No Movement [ 93.328425][ T8334] vivid-000: Vertical Movement: No Movement [ 93.330868][ T8334] vivid-000: OSD Text Mode: All [ 93.332908][ T8334] vivid-000: Show Border: false [ 93.335459][ T8334] vivid-000: Show Square: false [ 93.337469][ T8334] vivid-000: Sensor Flipped Horizontally: false [ 93.339824][ T8334] vivid-000: Sensor Flipped Vertically: false [ 93.342196][ T8334] vivid-000: Insert SAV Code in Image: false [ 93.345529][ T8334] vivid-000: Insert EAV Code in Image: false [ 93.347822][ T8334] vivid-000: Insert Video Guard Band: false [ 93.350181][ T8334] vivid-000: Reduced Framerate: true [ 93.352538][ T8334] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 93.356353][ T8334] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 93.357407][ T8346] QAT: Device 2 not found [ 93.359625][ T8334] vivid-000: Enable Capture Cropping: true [ 93.363829][ T8334] vivid-000: Enable Capture Composing: true [ 93.365924][ T8334] vivid-000: Enable Capture Scaler: true [ 93.369816][ T8334] vivid-000: Timestamp Source: End of Frame [ 93.372335][ T8334] vivid-000: Colorspace: sRGB [ 93.375995][ T8334] vivid-000: Transfer Function: Default [ 93.378221][ T8334] vivid-000: Y'CbCr Encoding: Default [ 93.380266][ T8334] vivid-000: HSV Encoding: Hue 0-179 [ 93.382320][ T8334] vivid-000: Quantization: Default [ 93.385468][ T8334] vivid-000: Apply Alpha To Red Only: false [ 93.387821][ T8334] vivid-000: Standard Aspect Ratio: 4x3 [ 93.390093][ T8334] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 93.393259][ T8334] vivid-000: DV Timings: 640x480p59 inactive [ 93.397186][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 93.397198][ T40] audit: type=1400 audit(1757378789.665:633): avc: denied { read } for pid=8345 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.397753][ T8334] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 93.410738][ T8334] vivid-000: Maximum EDID Blocks: 2 [ 93.412906][ T8334] vivid-000: Limited RGB Range (16-235): false [ 93.415613][ T8334] vivid-000: Rx RGB Quantization Range: Automatic [ 93.418370][ T8334] vivid-000: Power Present: 0x00000001 [ 93.420712][ T8334] tpg source WxH: 320x180 (R'G'B) [ 93.422948][ T8334] tpg field: 1 [ 93.424842][ T8334] tpg crop: (0,0)/320x180 [ 93.427206][ T8334] tpg compose: (0,0)/320x180 [ 93.429040][ T8334] tpg colorspace: 8 [ 93.430445][ T8334] tpg transfer function: 0/2 [ 93.432395][ T8334] tpg quantization: 0/2 [ 93.434764][ T8334] tpg RGB range: 0/2 [ 93.436583][ T8334] vivid-000: ================== END STATUS ================== [ 93.550762][ T8365] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 93.552506][ T8367] sg_write: process 556 (syz.0.770) changed security contexts after opening file descriptor, this is not allowed. [ 93.725837][ T6123] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 93.755827][ T40] audit: type=1800 audit(1757378790.013:634): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.769" name="/" dev="fuse" ino=9 res=0 errno=0 [ 93.881032][ T6123] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 93.881060][ T6123] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.881072][ T6123] usb 7-1: config 0 interface 0 has no altsetting 0 [ 93.882705][ T6123] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.882720][ T6123] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.882732][ T6123] usb 7-1: Product: syz [ 93.882739][ T6123] usb 7-1: Manufacturer: syz [ 93.882747][ T6123] usb 7-1: SerialNumber: syz [ 93.886340][ T6123] usb 7-1: config 0 descriptor?? [ 93.907188][ T6123] hub 7-1:0.0: bad descriptor, ignoring hub [ 93.907210][ T6123] hub 7-1:0.0: probe with driver hub failed with error -5 [ 93.908626][ T6123] usb 7-1: selecting invalid altsetting 0 [ 94.145761][ T40] audit: type=1400 audit(1757378790.400:635): avc: denied { lock } for pid=8387 comm="syz.1.778" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.188670][ T8398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.781'. [ 94.231207][ T40] audit: type=1400 audit(1757378790.490:636): avc: denied { getopt } for pid=8400 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.502960][ T8412] netlink: 88 bytes leftover after parsing attributes in process `syz.3.784'. [ 94.653671][ T40] audit: type=1400 audit(1757378790.917:637): avc: denied { read } for pid=8424 comm="syz.0.788" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.661277][ T40] audit: type=1400 audit(1757378790.917:638): avc: denied { open } for pid=8424 comm="syz.0.788" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.668890][ T40] audit: type=1400 audit(1757378790.917:639): avc: denied { ioctl } for pid=8424 comm="syz.0.788" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.719348][ T40] audit: type=1400 audit(1757378790.976:640): avc: denied { checkpoint_restore } for pid=8427 comm="syz.0.789" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.743154][ T6771] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 94.748066][ T8433] netlink: 'syz.0.790': attribute type 21 has an invalid length. [ 94.751470][ T8433] netlink: 128 bytes leftover after parsing attributes in process `syz.0.790'. [ 94.756296][ T8433] netlink: 'syz.0.790': attribute type 6 has an invalid length. [ 94.758989][ T8433] netlink: 3 bytes leftover after parsing attributes in process `syz.0.790'. [ 94.787506][ T40] audit: type=1400 audit(1757378791.046:641): avc: denied { append } for pid=8434 comm="syz.0.791" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.787772][ T8435] random: crng reseeded on system resumption [ 94.794462][ T40] audit: type=1400 audit(1757378791.046:642): avc: denied { open } for pid=8434 comm="syz.0.791" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.819947][ T8435] FAT-fs (nullb0): bogus number of reserved sectors [ 94.823985][ T8435] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 94.843376][ T8357] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 94.893669][ T6771] usb 8-1: Using ep0 maxpacket: 8 [ 94.898787][ T6771] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 94.901828][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.908994][ T6771] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.913136][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.917152][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.921479][ T6771] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 94.923991][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.927575][ T6771] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.931503][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.935280][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.940971][ T6771] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 94.943430][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.947372][ T6771] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.950931][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.954591][ T6771] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.960559][ T6771] usb 8-1: string descriptor 0 read error: -22 [ 94.962602][ T6771] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.965779][ T6771] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.974317][ T6771] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.176863][ T8412] block nbd3: NBD_DISCONNECT [ 95.181045][ T6123] usb 8-1: USB disconnect, device number 5 [ 95.221235][ T8357] usb 7-1: failed to restore interface 0 altsetting 251 (error=-71) [ 95.226111][ T10] usb 7-1: USB disconnect, device number 8 [ 95.265971][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 95.416759][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 95.419744][ T34] usb 6-1: config 2 interface 0 has no altsetting 0 [ 95.423399][ T34] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 95.426287][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.428911][ T34] usb 6-1: Product: syz [ 95.430287][ T34] usb 6-1: Manufacturer: syz [ 95.431766][ T34] usb 6-1: SerialNumber: syz [ 95.644096][ T34] usb 6-1: USB disconnect, device number 9 [ 95.717741][ T8448] netlink: 'syz.3.796': attribute type 4 has an invalid length. [ 95.732145][ T6771] lo speed is unknown, defaulting to 1000 [ 95.734570][ T6771] sz1: Port: 1 Link DOWN [ 95.736841][ T6771] lo speed is unknown, defaulting to 1000 [ 95.815636][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 95.900836][ T8453] tmpfs: Bad value for 'mode' [ 96.206885][ T8472] comedi: valid board names for 8255 driver are: [ 96.209025][ T8472] 8255 [ 96.209910][ T8472] comedi: valid board names for vmk80xx driver are: [ 96.213265][ T8472] vmk80xx [ 96.214266][ T8472] comedi: valid board names for usbduxsigma driver are: [ 96.216431][ T8472] usbduxsigma [ 96.217558][ T8472] comedi: valid board names for usbduxfast driver are: [ 96.219720][ T8472] usbduxfast [ 96.220785][ T8472] comedi: valid board names for usbdux driver are: [ 96.222931][ T8472] usbdux [ 96.224318][ T8472] comedi: valid board names for ni6501 driver are: [ 96.227711][ T8472] ni6501 [ 96.229085][ T8472] comedi: valid board names for dt9812 driver are: [ 96.231959][ T8472] dt9812 [ 96.233227][ T8472] comedi: valid board names for ni_labpc_cs driver are: [ 96.235972][ T8472] ni_labpc_cs [ 96.237407][ T8472] comedi: valid board names for ni_daq_700 driver are: [ 96.240440][ T8472] ni_daq_700 [ 96.244053][ T8472] comedi: valid board names for labpc_pci driver are: [ 96.246553][ T8472] labpc_pci [ 96.247884][ T8472] comedi: valid board names for adl_pci9118 driver are: [ 96.250904][ T8472] pci9118dg [ 96.252419][ T8472] pci9118hg [ 96.253841][ T8472] pci9118hr [ 96.255291][ T8472] comedi: valid board names for 8255_pci driver are: [ 96.258091][ T8472] 8255_pci [ 96.259502][ T8472] comedi: valid board names for s526 driver are: [ 96.264531][ T8472] s526 [ 96.265672][ T8472] comedi: valid board names for multiq3 driver are: [ 96.268280][ T8472] multiq3 [ 96.269592][ T8472] comedi: valid board names for pcmuio driver are: [ 96.273540][ T8472] pcmuio48 [ 96.275070][ T8472] pcmuio96 [ 96.276251][ T8472] comedi: valid board names for pcmmio driver are: [ 96.278996][ T8472] pcmmio [ 96.280280][ T8472] comedi: valid board names for pcmda12 driver are: [ 96.283674][ T8472] pcmda12 [ 96.284886][ T8472] comedi: valid board names for pcmad driver are: [ 96.287496][ T8472] pcmad12 [ 96.288848][ T8472] pcmad16 [ 96.290186][ T8472] comedi: valid board names for ni_labpc driver are: [ 96.298425][ T8472] lab-pc-1200 [ 96.299598][ T8472] lab-pc-1200ai [ 96.300739][ T8472] lab-pc+ [ 96.301734][ T8472] comedi: valid board names for atmio16 driver are: [ 96.304014][ T8472] atmio16 [ 96.305012][ T8472] atmio16d [ 96.306032][ T8472] comedi: valid board names for ni_at_ao driver are: [ 96.308172][ T8472] at-ao-6 [ 96.309335][ T8472] at-ao-10 [ 96.310364][ T8472] comedi: valid board names for ni_at_a2150 driver are: [ 96.313105][ T8472] ni_at_a2150 [ 96.314206][ T8472] comedi: valid board names for adq12b driver are: [ 96.316246][ T8472] adq12b [ 96.317203][ T8472] comedi: valid board names for mpc624 driver are: [ 96.319317][ T8472] mpc624 [ 96.320312][ T8472] comedi: valid board names for c6xdigio driver are: [ 96.322686][ T8472] c6xdigio [ 96.323730][ T8472] comedi: valid board names for aio_iiro_16 driver are: [ 96.325867][ T8472] aio_iiro_16 [ 96.326984][ T8472] comedi: valid board names for aio_aio12_8 driver are: [ 96.329160][ T8472] aio_aio12_8 [ 96.330224][ T8472] aio_ai12_8 [ 96.331273][ T8472] aio_ao12_4 [ 96.333309][ T8472] comedi: valid board names for fl512 driver are: [ 96.336172][ T8472] fl512 [ 96.337578][ T8472] comedi: valid board names for dmm32at driver are: [ 96.340439][ T8472] dmm32at [ 96.341877][ T8472] comedi: valid board names for dt282x driver are: [ 96.345102][ T8472] dt2821 [ 96.346434][ T8472] dt2821-f [ 96.347836][ T8472] dt2821-g [ 96.349388][ T8472] dt2823 [ 96.350813][ T8472] dt2824-pgh [ 96.352397][ T8472] dt2824-pgl [ 96.353927][ T8472] dt2825 [ 96.355280][ T8472] dt2827 [ 96.356288][ T8472] dt2828 [ 96.357632][ T8472] dt2829 [ 96.359004][ T8472] dt21-ez [ 96.360350][ T8472] dt23-ez [ 96.361671][ T8472] dt24-ez [ 96.363332][ T8472] dt24-ez-pgl [ 96.364880][ T8472] comedi: valid board names for dt2817 driver are: [ 96.367565][ T8472] dt2817 [ 96.368852][ T8472] comedi: valid board names for dt2815 driver are: [ 96.371614][ T8472] dt2815 [ 96.373513][ T8472] comedi: valid board names for dt2814 driver are: [ 96.376030][ T8472] dt2814 [ 96.377006][ T8472] comedi: valid board names for dt2811 driver are: [ 96.379901][ T8472] dt2811-pgh [ 96.381405][ T8472] dt2811-pgl [ 96.382985][ T8472] comedi: valid board names for dt2801 driver are: [ 96.385740][ T8472] dt2801 [ 96.386973][ T8472] comedi: valid board names for das6402 driver are: [ 96.389579][ T8472] das6402-12 [ 96.391160][ T8472] das6402-16 [ 96.392804][ T8472] comedi: valid board names for das1800 driver are: [ 96.395418][ T8472] das-1701st [ 96.396555][ T8472] das-1701st-da [ 96.397997][ T8472] das-1702st [ 96.399344][ T8472] das-1702st-da [ 96.400855][ T8472] das-1702hr [ 96.402337][ T8472] das-1702hr-da [ 96.404071][ T8472] das-1701ao [ 96.405435][ T8472] das-1702ao [ 96.405957][ T8479] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.805'. [ 96.406805][ T8472] das-1801st [ 96.411183][ T8472] das-1801st-da [ 96.412304][ T8472] das-1802st [ 96.413527][ T8472] das-1802st-da [ 96.414655][ T8472] das-1802hr [ 96.415742][ T8472] das-1802hr-da [ 96.416848][ T8472] das-1801hc [ 96.417901][ T8472] das-1802hc [ 96.418965][ T8472] das-1801ao [ 96.420022][ T8472] das-1802ao [ 96.421083][ T8472] comedi: valid board names for das800 driver are: [ 96.423378][ T8472] das-800 [ 96.424468][ T8472] cio-das800 [ 96.425518][ T8472] das-801 [ 96.426814][ T8472] cio-das801 [ 96.428486][ T8472] das-802 [ 96.429735][ T8472] cio-das802 [ 96.430859][ T8472] cio-das802/16 [ 96.432124][ T8472] comedi: valid board names for isa-das08 driver are: [ 96.435774][ T8472] isa-das08 [ 96.436899][ T8472] das08-pgm [ 96.437931][ T8472] das08-pgh [ 96.438969][ T8472] das08-pgl [ 96.440017][ T8472] das08-aoh [ 96.441055][ T8472] das08-aol [ 96.442092][ T8472] das08-aom [ 96.443415][ T8472] das08/jr-ao [ 96.444916][ T8472] das08jr-16-ao [ 96.446406][ T8472] pc104-das08 [ 96.447919][ T8472] das08jr/16 [ 96.449318][ T8472] comedi: valid board names for das16m1 driver are: [ 96.451822][ T8472] das16m1 [ 96.452791][ T8472] comedi: valid board names for dac02 driver are: [ 96.455460][ T8472] dac02 [ 96.456487][ T8472] comedi: valid board names for rti802 driver are: [ 96.458550][ T8472] rti802 [ 96.459511][ T8472] comedi: valid board names for rti800 driver are: [ 96.461592][ T8472] rti800 [ 96.462527][ T8472] rti815 [ 96.463561][ T8472] comedi: valid board names for pcm3724 driver are: [ 96.465773][ T8472] pcm3724 [ 96.466754][ T8472] comedi: valid board names for pcl818 driver are: [ 96.468758][ T8472] pcl818l [ 96.469744][ T8472] pcl818h [ 96.470714][ T8472] pcl818hd [ 96.471706][ T8472] pcl818hg [ 96.472680][ T8472] pcl818 [ 96.473778][ T8472] pcl718 [ 96.474735][ T8472] pcm3718 [ 96.475671][ T8472] comedi: valid board names for pcl816 driver are: [ 96.478002][ T8472] pcl816 [ 96.479013][ T8472] pcl814b [ 96.480015][ T8472] comedi: valid board names for pcl812 driver are: [ 96.481988][ T8472] pcl812 [ 96.482943][ T8472] pcl812pg [ 96.484016][ T8472] acl8112pg [ 96.485016][ T8472] acl8112dg [ 96.486094][ T8472] acl8112hg [ 96.487137][ T8472] a821pgl [ 96.488181][ T8472] a821pglnda [ 96.489223][ T8472] a821pgh [ 96.490248][ T8472] a822pgl [ 96.491248][ T8472] a822pgh [ 96.492208][ T8472] a823pgl [ 96.493269][ T8472] a823pgh [ 96.494236][ T8472] pcl813 [ 96.495152][ T8472] pcl813b [ 96.496088][ T8472] acl8113 [ 96.497050][ T8472] iso813 [ 96.497987][ T8472] acl8216 [ 96.499086][ T8472] a826pg [ 96.500000][ T8472] comedi: valid board names for pcl730 driver are: [ 96.501956][ T8472] pcl730 [ 96.502909][ T8472] iso730 [ 96.503935][ T8472] acl7130 [ 96.504907][ T8472] pcm3730 [ 96.505829][ T8472] pcl725 [ 96.506717][ T8472] p8r8dio [ 96.507694][ T8472] acl7225b [ 96.508679][ T8472] p16r16dio [ 96.509861][ T8472] pcl733 [ 96.510796][ T8472] pcl734 [ 96.511722][ T8472] opmm-1616-xt [ 96.512813][ T8472] pearl-mm-p [ 96.513937][ T8472] ir104-pbf [ 96.514974][ T8472] comedi: valid board names for pcl726 driver are: [ 96.517012][ T8472] pcl726 [ 96.517971][ T8472] pcl727 [ 96.518930][ T8472] pcl728 [ 96.519878][ T8472] acl6126 [ 96.520938][ T8472] acl6128 [ 96.521940][ T8472] comedi: valid board names for pcl724 driver are: [ 96.524025][ T8472] pcl724 [ 96.524953][ T8472] pcl722 [ 96.525884][ T8472] pcl731 [ 96.526833][ T8472] acl7122 [ 96.527842][ T8472] acl7124 [ 96.528829][ T8472] pet48dio [ 96.529832][ T8472] pcmio48 [ 96.530816][ T8472] onyx-mm-dio [ 96.532093][ T8472] comedi: valid board names for pcl711 driver are: [ 96.534208][ T8472] pcl711 [ 96.535283][ T8472] pcl711b [ 96.536270][ T8472] acl8112hg [ 96.537324][ T8472] acl8112dg [ 96.538374][ T8472] comedi: valid board names for amplc_pc263 driver are: [ 96.540543][ T8472] pc263 [ 96.541481][ T8472] comedi: valid board names for amplc_pc236 driver are: [ 96.543752][ T8472] pc36at [ 96.544703][ T8472] comedi: valid board names for amplc_dio200 driver are: [ 96.546872][ T8472] pc212e [ 96.547832][ T8472] pc214e [ 96.548782][ T8472] pc215e [ 96.549727][ T8472] pc218e [ 96.550673][ T8472] pc272e [ 96.551628][ T8472] comedi: valid board names for comedi_parport driver are: [ 96.554003][ T8472] comedi_parport [ 96.555184][ T8472] comedi: valid board names for comedi_test driver are: [ 96.557350][ T8472] comedi_test [ 96.558451][ T8472] comedi: valid board names for comedi_bond driver are: [ 96.560500][ T8472] comedi_bond [ 96.749146][ T8486] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 96.752032][ T8486] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 96.757346][ T8486] vhci_hcd vhci_hcd.0: Device attached [ 96.760782][ T8487] vhci_hcd: connection closed [ 96.761688][ T1182] vhci_hcd: stop threads [ 96.765757][ T1182] vhci_hcd: release socket [ 96.767555][ T1182] vhci_hcd: disconnect device [ 96.798525][ T8490] No control pipe specified [ 97.122093][ T8506] tmpfs: Bad value for 'mpol' [ 97.181973][ T8509] netlink: 'syz.3.814': attribute type 21 has an invalid length. [ 97.250090][ T8511] netlink: 'syz.2.815': attribute type 10 has an invalid length. [ 97.256929][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.260345][ T8511] team0: Port device bond0 added [ 97.637221][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.834'. [ 97.642080][ T8556] vlan0: entered promiscuous mode [ 97.649986][ T8556] team0: Port device vlan0 added [ 97.651404][ T8558] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 97.656426][ T8558] cramfs: wrong magic [ 97.662772][ T8558] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 97.742110][ T8570] netlink: 'syz.0.838': attribute type 5 has an invalid length. [ 97.914122][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 98.007268][ T8587] netlink: 'syz.2.844': attribute type 2 has an invalid length. [ 98.015544][ T8587] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 98.018618][ T8587] SELinux: failed to load policy [ 98.031602][ T5971] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.195189][ T5971] usb 5-1: Using ep0 maxpacket: 8 [ 98.199041][ T5971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.202264][ T5971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.203462][ T8597] binder: 8596:8597 ioctl 40046205 0 returned -22 [ 98.206494][ T5971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.209099][ T8597] binder: 8596:8597 ioctl c0306201 2000000013c0 returned -11 [ 98.211712][ T5971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.219995][ T5971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.223568][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.432595][ T5971] usb 5-1: GET_CAPABILITIES returned 0 [ 98.434684][ T5971] usbtmc 5-1:16.0: can't read capabilities [ 98.506242][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 98.506260][ T40] audit: type=1400 audit(1757378794.745:727): avc: denied { setattr } for pid=8626 comm="syz.3.856" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.653774][ T8642] netlink: 'syz.3.861': attribute type 10 has an invalid length. [ 98.661147][ T8642] .: (slave batadv0): Error -22 calling dev_set_mtu [ 98.701816][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.707055][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.235601][ T40] audit: type=1400 audit(1757378795.461:728): avc: denied { write } for pid=8662 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.387933][ T40] audit: type=1400 audit(1757378795.610:729): avc: denied { mount } for pid=8673 comm="syz.2.871" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 99.639620][ T6771] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 99.800405][ T6771] usb 7-1: Using ep0 maxpacket: 32 [ 99.805400][ T6771] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.808173][ T6771] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.812735][ T6771] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.816055][ T6771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.819035][ T6771] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.822578][ T6771] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.827387][ T6771] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.830730][ T6771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.835627][ T6771] usb 7-1: config 0 descriptor?? [ 99.872176][ T40] audit: type=1400 audit(1757378796.098:730): avc: denied { create } for pid=8677 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.918618][ T40] audit: type=1400 audit(1757378796.138:731): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 100.045959][ T6771] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.058092][ T6771] usb 7-1: USB disconnect, device number 9 [ 100.065003][ T6771] usblp1: removed [ 100.146636][ T8690] netlink: 'syz.3.876': attribute type 10 has an invalid length. [ 100.146673][ T8690] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 100.403193][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 100.483488][ T6771] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 100.600498][ T40] audit: type=1400 audit(1757378796.825:732): avc: denied { map } for pid=8695 comm="syz.3.878" path="socket:[23899]" dev="sockfs" ino=23899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.609268][ T40] audit: type=1400 audit(1757378796.825:733): avc: denied { read accept } for pid=8695 comm="syz.3.878" path="socket:[23899]" dev="sockfs" ino=23899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.625920][ T8701] Failed to initialize the IGMP autojoin socket (err -2) [ 100.639455][ T8703] cgroup: fork rejected by pids controller in /syz3 [ 100.647613][ T6771] usb 7-1: Using ep0 maxpacket: 32 [ 100.650521][ T6771] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.653186][ T6771] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.656874][ T6771] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.659958][ T6771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.663080][ T6771] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.666330][ T6771] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.670964][ T6771] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.674965][ T6771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.682036][ T6771] usb 7-1: config 0 descriptor?? [ 100.764201][ T8899] program syz.3.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.771101][ T40] audit: type=1400 audit(1757378796.994:734): avc: denied { write } for pid=8898 comm="syz.3.881" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.771138][ T8899] random: crng reseeded on system resumption [ 100.790932][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 100.790937][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 100.790958][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'. [ 100.794028][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'. [ 100.818644][ T10] usb 5-1: USB disconnect, device number 8 [ 100.879300][ T40] audit: type=1400 audit(1757378797.104:735): avc: denied { lock } for pid=8903 comm="syz.0.882" path="socket:[23251]" dev="sockfs" ino=23251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 100.893409][ T6771] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.942851][ T8911] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.039478][ T8916] No control pipe specified [ 101.064724][ T40] audit: type=1400 audit(1757378797.283:736): avc: denied { getopt } for pid=8917 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.109375][ T6771] usb 7-1: USB disconnect, device number 10 [ 101.114598][ T6771] usblp0: removed [ 101.512128][ T8940] openvswitch: netlink: EtherType 0 is less than min 600 [ 101.651461][ T8951] binder: 8949:8951 ioctl c0046686 2000000014c0 returned -22 [ 101.793629][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'. [ 101.797130][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 102.256691][ T8988] 8021q: VLANs not supported on ip6_vti0 [ 102.611835][ T9019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.925'. [ 102.737010][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'. [ 102.740822][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.929'. [ 102.785788][ T9045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.935'. [ 102.808115][ T9039] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.869168][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 102.899325][ T9050] tmpfs: User quota block hardlimit too large. [ 102.970526][ T9063] binder_alloc: binder_alloc_mmap_handler: 9055 200000ffe000-200000fff000 already mapped failed -16 [ 102.978361][ T9064] overlayfs: missing 'lowerdir' [ 103.046020][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 103.099761][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 103.102572][ T9072] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 103.548715][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.956'. [ 103.585571][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 103.585587][ T40] audit: type=1400 audit(1757378799.793:748): avc: denied { setopt } for pid=9115 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.600592][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'. [ 103.605801][ T9119] fuse: Unknown parameter 'group_)D' [ 103.696266][ T40] audit: type=1400 audit(1757378799.902:749): avc: denied { write } for pid=9128 comm="syz.2.964" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.769627][ T9131] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.778016][ T40] audit: type=1400 audit(1757378799.992:750): avc: denied { mounton } for pid=9137 comm="syz.3.968" path="/253/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 103.784936][ T40] audit: type=1400 audit(1757378799.992:751): avc: denied { override_creds } for pid=9139 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.826518][ T40] audit: type=1400 audit(1757378800.032:752): avc: denied { accept } for pid=9142 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.831036][ T9145] overlayfs: conflicting lowerdir path [ 103.884414][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.886546][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.889369][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.894232][ T9150] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.900226][ T9150] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 103.911580][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.914388][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.918593][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.921169][ T9150] wlan1 speed is unknown, defaulting to 1000 [ 103.975166][ T40] audit: type=1400 audit(1757378800.181:753): avc: denied { create } for pid=9153 comm="syz.2.975" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.098853][ T40] audit: type=1400 audit(1757378800.301:754): avc: denied { unlink } for pid=5972 comm="syz-executor" name="file0" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.373115][ T9171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.980'. [ 104.484426][ T9199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.487478][ T9199] batadv_slave_0: entered promiscuous mode [ 104.519503][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 104.545548][ T9201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.669527][ T9217] netlink: zone id is out of range [ 104.673626][ T9217] netlink: zone id is out of range [ 104.675936][ T9217] netlink: zone id is out of range [ 104.678207][ T9217] netlink: zone id is out of range [ 104.682333][ T9217] netlink: zone id is out of range [ 104.684743][ T9217] netlink: zone id is out of range [ 104.687082][ T9217] netlink: zone id is out of range [ 104.689409][ T9217] netlink: zone id is out of range [ 104.974479][ T40] audit: type=1400 audit(1757378801.178:755): avc: denied { ioctl } for pid=9234 comm="syz.1.1004" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.277326][ T9259] FAULT_INJECTION: forcing a failure. [ 105.277326][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 105.282642][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.2.1015 Not tainted syzkaller #0 PREEMPT(full) [ 105.282661][ T9259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.282676][ T9259] Call Trace: [ 105.282682][ T9259] [ 105.282688][ T9259] dump_stack_lvl+0x16c/0x1f0 [ 105.282730][ T9259] should_fail_ex+0x512/0x640 [ 105.282754][ T9259] ? fs_reclaim_acquire+0xae/0x150 [ 105.282777][ T9259] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 105.282801][ T9259] should_failslab+0xc2/0x120 [ 105.282820][ T9259] __kmalloc_noprof+0xd2/0x510 [ 105.282843][ T9259] tomoyo_realpath_from_path+0xc2/0x6e0 [ 105.282869][ T9259] ? tomoyo_profile+0x47/0x60 [ 105.282888][ T9259] tomoyo_path_number_perm+0x245/0x580 [ 105.282908][ T9259] ? tomoyo_path_number_perm+0x237/0x580 [ 105.282931][ T9259] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 105.282976][ T9259] ? find_held_lock+0x2b/0x80 [ 105.283032][ T9259] ? find_held_lock+0x2b/0x80 [ 105.283052][ T9259] ? hook_file_ioctl_common+0x145/0x410 [ 105.283071][ T9259] ? __fget_files+0x20e/0x3c0 [ 105.283086][ T9259] security_file_ioctl+0x9b/0x240 [ 105.283103][ T9259] __x64_sys_ioctl+0xb7/0x210 [ 105.283120][ T9259] do_syscall_64+0xcd/0x4c0 [ 105.283151][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.283163][ T9259] RIP: 0033:0x7f873318ebe9 [ 105.283172][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.283182][ T9259] RSP: 002b:00007f8733fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.283192][ T9259] RAX: ffffffffffffffda RBX: 00007f87333c5fa0 RCX: 00007f873318ebe9 [ 105.283198][ T9259] RDX: 0000200000000100 RSI: 00000000c00864c0 RDI: 0000000000000003 [ 105.283204][ T9259] RBP: 00007f8733fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 105.283210][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.283216][ T9259] R13: 00007f87333c6038 R14: 00007f87333c5fa0 R15: 00007ffde2652d88 [ 105.283229][ T9259] [ 105.283325][ T9259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.462745][ T9272] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.994489][ T40] audit: type=1400 audit(1757378802.205:756): avc: denied { create } for pid=9305 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 106.025948][ T9309] net_ratelimit: 123 callbacks suppressed [ 106.025960][ T9309] openvswitch: netlink: Key type 179 is out of range max 32 [ 106.061457][ T9311] tmpfs: Bad value for 'huge' [ 106.311008][ T9332] trusted_key: syz.0.1040 sent an empty control message without MSG_MORE. [ 106.385532][ T40] audit: type=1400 audit(1757378802.593:757): avc: denied { getopt } for pid=9339 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.501047][ T9354] FAULT_INJECTION: forcing a failure. [ 106.501047][ T9354] name failslab, interval 1, probability 0, space 0, times 0 [ 106.504957][ T9354] CPU: 0 UID: 0 PID: 9354 Comm: syz.1.1048 Not tainted syzkaller #0 PREEMPT(full) [ 106.504971][ T9354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.504977][ T9354] Call Trace: [ 106.504981][ T9354] [ 106.504985][ T9354] dump_stack_lvl+0x16c/0x1f0 [ 106.505000][ T9354] should_fail_ex+0x512/0x640 [ 106.505013][ T9354] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 106.505025][ T9354] should_failslab+0xc2/0x120 [ 106.505038][ T9354] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 106.505048][ T9354] ? alloc_empty_file+0x55/0x1e0 [ 106.505064][ T9354] alloc_empty_file+0x55/0x1e0 [ 106.505079][ T9354] path_openat+0xda/0x2cb0 [ 106.505089][ T9354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.505105][ T9354] ? __pfx_path_openat+0x10/0x10 [ 106.505120][ T9354] do_filp_open+0x20b/0x470 [ 106.505133][ T9354] ? __pfx_do_filp_open+0x10/0x10 [ 106.505154][ T9354] ? alloc_fd+0x471/0x7d0 [ 106.505169][ T9354] do_sys_openat2+0x11b/0x1d0 [ 106.505184][ T9354] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.505199][ T9354] ? __fget_files+0x20e/0x3c0 [ 106.505213][ T9354] __x64_sys_openat+0x174/0x210 [ 106.505227][ T9354] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.505241][ T9354] ? ksys_write+0x1ac/0x250 [ 106.505256][ T9354] do_syscall_64+0xcd/0x4c0 [ 106.505269][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.505279][ T9354] RIP: 0033:0x7fbf8518ebe9 [ 106.505287][ T9354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.505298][ T9354] RSP: 002b:00007fbf86097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.505308][ T9354] RAX: ffffffffffffffda RBX: 00007fbf853c5fa0 RCX: 00007fbf8518ebe9 [ 106.505315][ T9354] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 106.505322][ T9354] RBP: 00007fbf86097090 R08: 0000000000000000 R09: 0000000000000000 [ 106.505328][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.505333][ T9354] R13: 00007fbf853c6038 R14: 00007fbf853c5fa0 R15: 00007ffce8694498 [ 106.505346][ T9354] [ 106.581835][ T9366] No source specified [ 106.609627][ T9368] SELinux: ebitmap: empty map [ 106.613531][ T9368] SELinux: failed to load policy [ 106.704143][ T9384] FAULT_INJECTION: forcing a failure. [ 106.704143][ T9384] name failslab, interval 1, probability 0, space 0, times 0 [ 106.708812][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.1.1059 Not tainted syzkaller #0 PREEMPT(full) [ 106.708835][ T9384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.708846][ T9384] Call Trace: [ 106.708852][ T9384] [ 106.708859][ T9384] dump_stack_lvl+0x16c/0x1f0 [ 106.708883][ T9384] should_fail_ex+0x512/0x640 [ 106.708902][ T9384] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 106.708924][ T9384] should_failslab+0xc2/0x120 [ 106.708944][ T9384] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 106.708962][ T9384] ? security_file_alloc+0x34/0x2b0 [ 106.708990][ T9384] security_file_alloc+0x34/0x2b0 [ 106.709016][ T9384] init_file+0x93/0x4c0 [ 106.709038][ T9384] alloc_empty_file+0x73/0x1e0 [ 106.709056][ T9384] path_openat+0xda/0x2cb0 [ 106.709067][ T9384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.709082][ T9384] ? __pfx_path_openat+0x10/0x10 [ 106.709097][ T9384] do_filp_open+0x20b/0x470 [ 106.709109][ T9384] ? __pfx_do_filp_open+0x10/0x10 [ 106.709129][ T9384] ? alloc_fd+0x471/0x7d0 [ 106.709144][ T9384] do_sys_openat2+0x11b/0x1d0 [ 106.709159][ T9384] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.709174][ T9384] ? __fget_files+0x20e/0x3c0 [ 106.709188][ T9384] __x64_sys_openat+0x174/0x210 [ 106.709202][ T9384] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.709215][ T9384] ? ksys_write+0x1ac/0x250 [ 106.709230][ T9384] do_syscall_64+0xcd/0x4c0 [ 106.709243][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.709253][ T9384] RIP: 0033:0x7fbf8518ebe9 [ 106.709262][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.709272][ T9384] RSP: 002b:00007fbf86097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.709282][ T9384] RAX: ffffffffffffffda RBX: 00007fbf853c5fa0 RCX: 00007fbf8518ebe9 [ 106.709289][ T9384] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 106.709295][ T9384] RBP: 00007fbf86097090 R08: 0000000000000000 R09: 0000000000000000 [ 106.709301][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.709307][ T9384] R13: 00007fbf853c6038 R14: 00007fbf853c5fa0 R15: 00007ffce8694498 [ 106.709320][ T9384] [ 106.772013][ T9368] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 106.808455][ T9389] tipc: Started in network mode [ 106.810381][ T9389] tipc: Node identity 7aa141b19ce4, cluster identity 4711 [ 106.813423][ T9389] tipc: Enabled bearer , priority 0 [ 106.822308][ T9388] tipc: Resetting bearer [ 106.839575][ T9387] tipc: Disabling bearer [ 107.330268][ T9437] CIFS mount error: No usable UNC path provided in device string! [ 107.330268][ T9437] [ 107.330283][ T9437] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.330440][ T9438] CIFS mount error: No usable UNC path provided in device string! [ 107.330440][ T9438] [ 107.330448][ T9438] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.505530][ T9459] netlink: 'syz.1.1086': attribute type 6 has an invalid length. [ 107.508245][ T9458] batman_adv: batadv0: Adding interface: dummy0 [ 107.508263][ T9458] batman_adv: batadv0: Interface activated: dummy0 [ 107.526527][ T9458] batadv0: mtu less than device minimum [ 107.527099][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.533906][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.534402][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.541618][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.542122][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.542624][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.543137][ T9458] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 107.599343][ T9459] IPv6: syztnl2: Disabled Multicast RS [ 107.656021][ T9471] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 107.663643][ T9471] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 107.663673][ T9471] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 107.673523][ T9473] hfs: can't find a HFS filesystem on dev sr0 [ 107.720837][ T9481] fuse: Invalid rootmode [ 107.865876][ T9489] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.875018][ T9505] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 108.126999][ T9527] __nla_validate_parse: 12 callbacks suppressed [ 108.127016][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1108'. [ 108.227770][ T9536] kvm: pic: non byte write [ 108.250692][ T6771] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.396555][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1113'. [ 108.404179][ T6771] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.407908][ T6771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.411671][ T6771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.414779][ T6771] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.419058][ T6771] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.423116][ T6771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.427836][ T6771] usb 5-1: config 0 descriptor?? [ 108.634860][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.638386][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.753596][ T9574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9574 comm=syz.2.1123 [ 108.853780][ T6771] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.891976][ T9587] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 109.106548][ T10] usb 5-1: USB disconnect, device number 9 [ 109.120264][ T9605] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.403873][ T9615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1137'. [ 109.435255][ T9617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1138'. [ 109.448277][ T9618] binder: BINDER_SET_CONTEXT_MGR already set [ 109.450765][ T9618] binder: 9616:9618 ioctl 4018620d 200000000100 returned -16 [ 109.567955][ T9620] evm: overlay not supported [ 109.572734][ T9620] vivid-002: ================= START STATUS ================= [ 109.576156][ T9620] vivid-002: Radio HW Seek Mode: Bounded [ 109.578730][ T9620] vivid-002: Radio Programmable HW Seek: false [ 109.581937][ T9620] vivid-002: RDS Rx I/O Mode: Block I/O [ 109.584435][ T9620] vivid-002: Generate RBDS Instead of RDS: false [ 109.588094][ T9620] vivid-002: RDS Reception: true [ 109.590488][ T9620] vivid-002: RDS Program Type: 0 inactive [ 109.592962][ T9620] vivid-002: RDS PS Name: inactive [ 109.595310][ T9620] vivid-002: RDS Radio Text: inactive [ 109.597676][ T9620] vivid-002: RDS Traffic Announcement: false inactive [ 109.600526][ T9620] vivid-002: RDS Traffic Program: false inactive [ 109.603239][ T9620] vivid-002: RDS Music: false inactive [ 109.606242][ T9620] vivid-002: ================== END STATUS ================== [ 109.885225][ T9632] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 109.887376][ T9632] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.890648][ T9632] vhci_hcd vhci_hcd.0: Device attached [ 109.894410][ T9633] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 109.898174][ T8858] vhci_hcd: stop threads [ 109.899728][ T8858] vhci_hcd: release socket [ 109.901173][ T8858] vhci_hcd: disconnect device [ 109.988629][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1146'. [ 110.511135][ T9649] fuse: Bad value for 'group_id' [ 110.512799][ T9649] fuse: Bad value for 'group_id' [ 110.644638][ T9663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1155'. [ 110.769914][ T9676] loop2: detected capacity change from 0 to 7 [ 110.776085][ T5984] loop2: p1 [ 110.777806][ T5984] loop2: partition table partially beyond EOD, truncated [ 110.780877][ T5984] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 110.792087][ T9676] loop2: p1 [ 110.793253][ T9676] loop2: partition table partially beyond EOD, truncated [ 110.795772][ T9676] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 110.837910][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 110.851261][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 110.865806][ T9691] : renamed from bridge_slave_1 (while UP) [ 110.865812][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 110.865821][ T40] audit: type=1400 audit(1757378807.052:766): avc: denied { ioctl } for pid=9690 comm="syz.1.1165" path="socket:[28056]" dev="sockfs" ino=28056 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.930538][ T9704] bridge_slave_0: left allmulticast mode [ 110.932398][ T9704] bridge_slave_0: left promiscuous mode [ 110.934252][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.942495][ T9704] bridge_slave_1: left allmulticast mode [ 110.944280][ T9704] bridge_slave_1: left promiscuous mode [ 110.946165][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.958356][ T9704] bond0: (slave bond_slave_0): Releasing backup interface [ 110.964638][ T9704] bond0: (slave .4@0): Releasing backup interface [ 110.970149][ T40] audit: type=1400 audit(1757378807.161:767): avc: denied { map } for pid=9705 comm="syz.1.1171" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 110.980162][ T40] audit: type=1400 audit(1757378807.161:768): avc: denied { execute } for pid=9705 comm="syz.1.1171" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 110.985609][ T9704] team0: Port device team_slave_0 removed [ 110.996562][ T9704] team0: Port device team_slave_1 removed [ 110.999677][ T9704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.002209][ T9704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.005421][ T9704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.008004][ T9704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.015899][ T9704] bond0: (slave wlan1): Releasing backup interface [ 111.019687][ T9704] bond1: (slave veth3): Releasing active interface [ 111.042489][ T9704] vlan0: entered promiscuous mode [ 111.051258][ T9704] team0: Port device vlan0 added [ 111.059280][ T9704] tipc: Started in network mode [ 111.060959][ T9704] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 111.063269][ T9704] tipc: Enabled bearer , priority 0 [ 111.082637][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 111.210317][ T9725] net_ratelimit: 13 callbacks suppressed [ 111.210332][ T9725] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.336622][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 111.338367][ T5971] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 111.374988][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1185'. [ 111.490358][ T5971] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.493882][ T5971] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.497042][ T5971] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.500410][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.504723][ T9710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.508619][ T5971] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.563183][ T9763] vlan0: entered promiscuous mode [ 111.564993][ T9763] vlan0: entered allmulticast mode [ 111.566730][ T9763] hsr_slave_1: entered allmulticast mode [ 111.622083][ T40] audit: type=1400 audit(1757378807.810:769): avc: denied { map } for pid=9762 comm="syz.1.1192" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 111.709141][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.712371][ T5971] usb 8-1: USB disconnect, device number 6 [ 111.882598][ T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 111.885887][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.889790][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.895134][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.898717][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.902390][ T29] usb 5-1: Product: syz [ 111.904048][ T29] usb 5-1: Manufacturer: syz [ 111.905623][ T29] usb 5-1: SerialNumber: syz [ 111.909204][ T29] usb 5-1: config 0 descriptor?? [ 111.912486][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 111.914425][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 111.918687][ T29] usb 5-1: selecting invalid altsetting 0 [ 111.931424][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 111.977322][ T40] audit: type=1400 audit(1757378808.159:770): avc: denied { connect } for pid=9772 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.071483][ T10] tipc: Node number set to 11578026 [ 112.099867][ T9781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.106551][ T9781] tipc: Started in network mode [ 112.108723][ T9781] tipc: Node identity d671b487a9ed, cluster identity 4711 [ 112.111780][ T9781] tipc: Enabled bearer , priority 0 [ 112.114311][ T9781] syzkaller0: entered promiscuous mode [ 112.116130][ T9781] syzkaller0: entered allmulticast mode [ 112.127757][ T9781] tipc: Resetting bearer [ 112.132180][ T9780] tipc: Resetting bearer [ 112.138682][ T9780] tipc: Disabling bearer [ 112.220220][ T10] usb 5-1: USB disconnect, device number 10 [ 112.293437][ T40] audit: type=1400 audit(1757378808.479:771): avc: denied { mount } for pid=9787 comm="syz.2.1200" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 112.303662][ T9788] 9pnet_fd: Insufficient options for proto=fd [ 112.383555][ T9792] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 112.550776][ T59] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 112.702873][ T59] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 112.706519][ T59] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 112.710742][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.715972][ T59] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.719863][ T59] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.723631][ T59] usb 5-1: Product: syz [ 112.725496][ T59] usb 5-1: Manufacturer: syz [ 112.727547][ T59] usb 5-1: SerialNumber: syz [ 112.732290][ T59] usb 5-1: config 0 descriptor?? [ 112.736393][ T59] hub 5-1:0.0: bad descriptor, ignoring hub [ 112.738941][ T59] hub 5-1:0.0: probe with driver hub failed with error -5 [ 112.744841][ T59] usb 5-1: selecting invalid altsetting 0 [ 113.041905][ T59] usb 5-1: USB disconnect, device number 11 [ 113.140415][ T9811] futex_wake_op: syz.2.1209 tries to shift op by -1; fix this program [ 113.375889][ T9824] __nla_validate_parse: 3 callbacks suppressed [ 113.375902][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 113.455212][ T9828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'. [ 113.488193][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 113.490915][ T9832] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 113.494468][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.719704][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 113.761712][ T40] audit: type=1400 audit(1757378809.946:772): avc: denied { getopt } for pid=9843 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.937926][ T40] audit: type=1400 audit(1757378810.125:773): avc: denied { read } for pid=9853 comm="syz.0.1223" path="socket:[28334]" dev="sockfs" ino=28334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.205155][ T9874] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.207229][ T9874] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.209664][ T9874] vhci_hcd vhci_hcd.0: Device attached [ 114.214712][ T9874] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 114.216517][ T40] audit: type=1400 audit(1757378810.405:774): avc: denied { watch watch_reads } for pid=9872 comm="syz.3.1229" path="/294/file0" dev="tmpfs" ino=1588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.216769][ T9874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.229458][ T9874] vhci_hcd vhci_hcd.0: Device attached [ 114.236646][ T9878] vhci_hcd: connection closed [ 114.236679][ T9875] vhci_hcd: connection closed [ 114.236887][ T670] vhci_hcd: stop threads [ 114.241071][ T670] vhci_hcd: release socket [ 114.242459][ T670] vhci_hcd: disconnect device [ 114.246618][ T670] vhci_hcd: stop threads [ 114.248014][ T670] vhci_hcd: release socket [ 114.249412][ T670] vhci_hcd: disconnect device [ 114.251117][ T40] audit: type=1400 audit(1757378810.435:775): avc: denied { mounton } for pid=9882 comm="syz.3.1231" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 114.763869][ T9889] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.766975][ T9889] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 114.769471][ T9889] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.771966][ T9889] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 114.828294][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 115.099903][ T9920] netlink: 'syz.3.1245': attribute type 16 has an invalid length. [ 115.103460][ T9920] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1245'. [ 115.137388][ T9923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1549 sclass=netlink_tcpdiag_socket pid=9923 comm=syz.0.1246 [ 115.290032][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 115.309910][ T9942] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.1252'. [ 115.313125][ T9942] openvswitch: netlink: Message has 5 unknown bytes. [ 115.364139][ T9946] zonefs (nbd0) ERROR: Not a zoned block device [ 115.433818][ T9954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9954 comm=syz.3.1259 [ 115.433930][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9953 comm=syz.3.1259 [ 115.443048][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1259'. [ 115.694248][ T9966] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 115.697770][ T9966] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1266'. [ 115.836475][ T9987] ptrace attach of "/syz-executor exec"[9988] was attempted by "/syz-executor exec"[9987] [ 115.977252][T10004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=10004 comm=syz.0.1281 [ 115.984012][T10004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10004 comm=syz.0.1281 [ 115.992085][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 115.992095][ T40] audit: type=1400 audit(1757378812.172:777): avc: denied { bind } for pid=10003 comm="syz.0.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.000372][T10004] /dev/sg0: Can't lookup blockdev [ 116.106811][ T40] audit: type=1400 audit(1757378812.281:778): avc: denied { ioctl } for pid=10021 comm="syz.2.1289" path="socket:[31746]" dev="sockfs" ino=31746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.130034][ C2] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 116.132590][ C2] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Logical block address out of range [ 116.191109][ T40] audit: type=1400 audit(1757378812.371:779): avc: denied { transfer } for pid=10036 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.287158][T10056] overlayfs: missing 'lowerdir' [ 116.423535][ T40] audit: type=1400 audit(1757378812.601:780): avc: denied { write } for pid=10072 comm="syz.3.1311" path="socket:[31240]" dev="sockfs" ino=31240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.473911][T10087] geneve2: entered promiscuous mode [ 116.476142][T10087] geneve2: entered allmulticast mode [ 116.531473][T10085] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 116.882681][T10122] FAULT_INJECTION: forcing a failure. [ 116.882681][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.886657][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.3.1327 Not tainted syzkaller #0 PREEMPT(full) [ 116.886678][T10122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.886688][T10122] Call Trace: [ 116.886695][T10122] [ 116.886701][T10122] dump_stack_lvl+0x16c/0x1f0 [ 116.886740][T10122] should_fail_ex+0x512/0x640 [ 116.886759][T10122] _copy_to_user+0x32/0xd0 [ 116.886773][T10122] simple_read_from_buffer+0xcb/0x170 [ 116.886792][T10122] proc_fail_nth_read+0x197/0x240 [ 116.886813][T10122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.886826][T10122] ? rw_verify_area+0xcf/0x6c0 [ 116.886841][T10122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.886880][T10122] vfs_read+0x1e1/0xcf0 [ 116.886896][T10122] ? __pfx___mutex_lock+0x10/0x10 [ 116.886914][T10122] ? __pfx_vfs_read+0x10/0x10 [ 116.886927][T10122] ? __fget_files+0x20e/0x3c0 [ 116.886943][T10122] ksys_read+0x12a/0x250 [ 116.886953][T10122] ? __pfx_ksys_read+0x10/0x10 [ 116.886967][T10122] do_syscall_64+0xcd/0x4c0 [ 116.886980][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.886991][T10122] RIP: 0033:0x7f6c23d8d5fc [ 116.887000][T10122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.887011][T10122] RSP: 002b:00007f6c24c3e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.887021][T10122] RAX: ffffffffffffffda RBX: 00007f6c23fc5fa0 RCX: 00007f6c23d8d5fc [ 116.887027][T10122] RDX: 000000000000000f RSI: 00007f6c24c3e0a0 RDI: 0000000000000003 [ 116.887033][T10122] RBP: 00007f6c24c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 116.887039][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.887045][T10122] R13: 00007f6c23fc6038 R14: 00007f6c23fc5fa0 R15: 00007ffdcb500ce8 [ 116.887058][T10122] [ 117.008770][ T5971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 117.037144][ T40] audit: type=1400 audit(1757378813.210:781): avc: denied { write } for pid=10127 comm="syz.3.1330" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.046190][ T40] audit: type=1400 audit(1757378813.220:782): avc: denied { ioctl } for pid=10127 comm="syz.3.1330" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.158991][ T5971] usb 5-1: device descriptor read/64, error -71 [ 117.400409][ T5971] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.529601][ T5971] usb 5-1: device descriptor read/64, error -71 [ 117.583412][T10149] tipc: Enabled bearer , priority 0 [ 117.587777][T10149] syzkaller0: entered promiscuous mode [ 117.590253][T10149] syzkaller0: entered allmulticast mode [ 117.595594][T10149] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.609406][T10149] tipc: Resetting bearer [ 117.622080][T10148] tipc: Resetting bearer [ 117.632876][T10148] tipc: Disabling bearer [ 117.650220][ T5971] usb usb5-port1: attempt power cycle [ 117.893739][ T40] audit: type=1400 audit(1757378814.069:783): avc: denied { create } for pid=10171 comm="syz.2.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.895374][T10172] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 117.900242][ T40] audit: type=1400 audit(1757378814.069:784): avc: denied { write } for pid=10171 comm="syz.2.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.919122][T10172] bond1 (unregistering): Released all slaves [ 118.000168][ T5971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 118.030678][ T5971] usb 5-1: device descriptor read/8, error -71 [ 118.260111][ T40] audit: type=1400 audit(1757378814.428:785): avc: denied { connect } for pid=10185 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.263680][T10182] fuse: Unknown parameter '000000000000000000000050x0000000000000006' [ 118.268185][ T40] audit: type=1400 audit(1757378814.438:786): avc: denied { setopt } for pid=10185 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.291025][ T5971] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.321306][ T5971] usb 5-1: device descriptor read/8, error -71 [ 118.388304][T10201] FAULT_INJECTION: forcing a failure. [ 118.388304][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 118.395014][T10201] CPU: 2 UID: 0 PID: 10201 Comm: syz.2.1355 Not tainted syzkaller #0 PREEMPT(full) [ 118.395030][T10201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.395037][T10201] Call Trace: [ 118.395041][T10201] [ 118.395046][T10201] dump_stack_lvl+0x16c/0x1f0 [ 118.395061][T10201] should_fail_ex+0x512/0x640 [ 118.395074][T10201] ? __kmalloc_noprof+0xbf/0x510 [ 118.395086][T10201] ? video_usercopy+0x1a0/0x1720 [ 118.395096][T10201] should_failslab+0xc2/0x120 [ 118.395109][T10201] __kmalloc_noprof+0xd2/0x510 [ 118.395120][T10201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.395134][T10201] video_usercopy+0x1a0/0x1720 [ 118.395145][T10201] ? __pfx___video_do_ioctl+0x10/0x10 [ 118.395155][T10201] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.395172][T10201] ? __pfx_video_usercopy+0x10/0x10 [ 118.395191][T10201] v4l2_ioctl+0x1bd/0x250 [ 118.395200][T10201] ? __pfx_v4l2_ioctl+0x10/0x10 [ 118.395211][T10201] __x64_sys_ioctl+0x18e/0x210 [ 118.395231][T10201] do_syscall_64+0xcd/0x4c0 [ 118.395244][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.395258][T10201] RIP: 0033:0x7f873318ebe9 [ 118.395267][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.395279][T10201] RSP: 002b:00007f8733fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.395289][T10201] RAX: ffffffffffffffda RBX: 00007f87333c5fa0 RCX: 00007f873318ebe9 [ 118.395296][T10201] RDX: 0000200000000140 RSI: 00000000c0845657 RDI: 0000000000000003 [ 118.395302][T10201] RBP: 00007f8733fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 118.395308][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.395314][T10201] R13: 00007f87333c6038 R14: 00007f87333c5fa0 R15: 00007ffde2652d88 [ 118.395326][T10201] [ 118.461614][ T5971] usb usb5-port1: unable to enumerate USB device [ 118.588981][T10208] loop7: detected capacity change from 0 to 524255232 [ 118.629411][T10210] __nla_validate_parse: 12 callbacks suppressed [ 118.629426][T10210] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1359'. [ 118.665923][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 118.668732][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 118.728029][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 118.800310][T10231] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 118.804514][T10231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1364'. [ 118.973657][ T6771] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 119.105456][T10247] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 119.111289][T10247] netlink: 'syz.1.1370': attribute type 13 has an invalid length. [ 119.125200][ T6771] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.127962][ T6771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.130612][ T6771] usb 7-1: Product: syz [ 119.132476][ T6771] usb 7-1: Manufacturer: syz [ 119.134428][ T6771] usb 7-1: SerialNumber: syz [ 119.141988][ T6771] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.152402][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 119.168034][ T6771] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.383148][ T5971] usb 7-1: USB disconnect, device number 11 [ 119.806080][T10270] netlink: 'syz.0.1379': attribute type 30 has an invalid length. [ 119.992436][T10288] veth0_to_bond: entered allmulticast mode [ 120.032635][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 120.032640][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 120.033191][T10294] chnl_net:caif_netlink_parms(): no params data found [ 120.063857][T10295] chnl_net:caif_netlink_parms(): no params data found [ 120.113483][T10300] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 120.129898][T10300] batman_adv: batadv0: Adding interface: gretap1 [ 120.132476][T10300] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 120.140752][T10300] batman_adv: batadv0: Interface activated: gretap1 [ 120.142737][T10300] batadv0: mtu less than device minimum [ 120.145577][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.149664][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.153376][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.156996][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.160658][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.164507][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.168043][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.171736][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.175570][T10300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 120.213559][ T6771] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 120.215738][ T6771] ath9k_htc: Failed to initialize the device [ 120.218624][ T5971] usb 7-1: ath9k_htc: USB layer deinitialized [ 120.232517][T10317] 9pnet_fd: p9_fd_create_tcp (10317): problem creating socket [ 120.267730][T10320] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.862649][T10345] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.049808][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 121.049823][ T40] audit: type=1400 audit(1757378817.225:797): avc: denied { accept } for pid=10351 comm="syz.0.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.086801][T10354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1406'. [ 121.090527][T10354] netlink: 'syz.0.1406': attribute type 7 has an invalid length. [ 121.093751][T10354] netlink: 'syz.0.1406': attribute type 8 has an invalid length. [ 121.097238][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 121.129742][T10357] overlayfs: failed lookup in lower (newroot/356, name='bus', err=-40): overlapping layers [ 121.266110][ T40] audit: type=1400 audit(1757378817.444:798): avc: denied { map } for pid=10369 comm="syz.3.1412" path="/353/file0" dev="tmpfs" ino=1898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.295880][T10375] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 121.314553][T10375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.329394][T10375] bond2: (slave ip6erspan0): making interface the new active one [ 121.332796][T10375] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 121.473183][T10378] team0: Port device vlan0 removed [ 121.486680][ T61] tipc: Resetting bearer [ 121.515768][T10383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.519303][T10383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.630984][T10383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.634583][T10383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.686606][T10383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.690737][T10383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.705858][T10403] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 121.769368][ T40] audit: type=1400 audit(1757378817.944:799): avc: denied { ioctl } for pid=10402 comm="syz.0.1424" path="socket:[33964]" dev="sockfs" ino=33964 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.782747][T10383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.786279][ T6021] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 121.787377][T10383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.868040][ T61] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.871590][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.900592][ T61] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.904102][ T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.909277][ T61] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.912772][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.924969][ T61] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.929284][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.955440][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 121.961621][ T6021] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.966139][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.970213][ T6021] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.974288][ T6021] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.980655][ T6021] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.982709][T10427] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 121.984402][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.035035][T10435] virtio-fs: tag not found [ 122.152503][T10450] block nbd1: shutting down sockets [ 122.157102][T10446] block nbd3: Attempted send on invalid socket [ 122.159814][T10446] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.163384][T10446] befs: (nbd3): unable to read superblock [ 122.197396][ T6021] usb 7-1: GET_CAPABILITIES returned 0 [ 122.199818][ T6021] usbtmc 7-1:16.0: can't read capabilities [ 122.230497][ T40] audit: type=1404 audit(1757378818.393:800): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 122.244617][ T40] audit: type=1400 audit(1757378818.413:801): avc: denied { create } for pid=10428 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=0 [ 122.253477][ T40] audit: type=1400 audit(1757378818.413:802): avc: denied { create } for pid=10428 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=0 [ 122.264627][ T40] audit: type=1400 audit(1757378818.413:803): avc: denied { create } for pid=10428 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=0 [ 122.273102][ T40] audit: type=1400 audit(1757378818.423:804): avc: denied { create } for pid=10428 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=0 [ 122.281972][ T40] audit: type=1400 audit(1757378818.423:805): avc: denied { create } for pid=10428 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=0 [ 122.295623][ T40] audit: type=1400 audit(1757378818.423:806): avc: denied { create } for pid=10428 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=0 [ 122.427650][ T29] usb 7-1: USB disconnect, device number 12 [ 122.474266][T10473] Failed to initialize the IGMP autojoin socket (err -2) [ 122.687551][T10490] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.690095][T10490] syz.1.1452: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 122.690946][T10490] CPU: 0 UID: 0 PID: 10490 Comm: syz.1.1452 Not tainted syzkaller #0 PREEMPT(full) [ 122.690967][T10490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.690991][T10490] Call Trace: [ 122.690997][T10490] [ 122.691003][T10490] dump_stack_lvl+0x16c/0x1f0 [ 122.691026][T10490] warn_alloc+0x248/0x3a0 [ 122.691045][T10490] ? __pfx_warn_alloc+0x10/0x10 [ 122.691095][T10490] ? alloc_pages_mpol+0x25a/0x550 [ 122.691118][T10490] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 122.691147][T10490] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 122.691181][T10490] ? vhost_task_create+0x1d2/0x2e0 [ 122.691205][T10490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.691240][T10490] ? vhost_task_create+0x1d2/0x2e0 [ 122.691255][T10490] __vmalloc_node_noprof+0xad/0xf0 [ 122.691278][T10490] ? vhost_task_create+0x1d2/0x2e0 [ 122.691298][T10490] copy_process+0x2c70/0x7690 [ 122.691334][T10490] ? __pfx_copy_process+0x10/0x10 [ 122.691361][T10490] ? lockdep_init_map_type+0x5c/0x280 [ 122.691379][T10490] ? lockdep_init_map_type+0x5c/0x280 [ 122.691395][T10490] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 122.691423][T10490] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 122.691452][T10490] vhost_task_create+0x1d2/0x2e0 [ 122.691468][T10490] ? __pfx_vhost_task_create+0x10/0x10 [ 122.691494][T10490] ? __pfx_vhost_task_fn+0x10/0x10 [ 122.691524][T10490] kvm_mmu_post_init_vm+0x1b7/0x380 [ 122.691546][T10490] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 122.691570][T10490] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 122.691599][T10490] kvm_vcpu_ioctl+0x5eb/0x1690 [ 122.691624][T10490] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 122.691646][T10490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.691668][T10490] ? do_vfs_ioctl+0x128/0x14f0 [ 122.691695][T10490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.691720][T10490] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 122.691755][T10490] ? hook_file_ioctl_common+0x145/0x410 [ 122.691779][T10490] ? selinux_file_ioctl+0x180/0x270 [ 122.691802][T10490] ? selinux_file_ioctl+0xb4/0x270 [ 122.691824][T10490] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 122.691847][T10490] __x64_sys_ioctl+0x18e/0x210 [ 122.691874][T10490] do_syscall_64+0xcd/0x4c0 [ 122.691896][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.691913][T10490] RIP: 0033:0x7fbf8518ebe9 [ 122.691926][T10490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.691942][T10490] RSP: 002b:00007fbf86097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.691957][T10490] RAX: ffffffffffffffda RBX: 00007fbf853c5fa0 RCX: 00007fbf8518ebe9 [ 122.691968][T10490] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 122.691977][T10490] RBP: 00007fbf86097090 R08: 0000000000000000 R09: 0000000000000000 [ 122.691987][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.691997][T10490] R13: 00007fbf853c6038 R14: 00007fbf853c5fa0 R15: 00007ffce8694498 [ 122.692020][T10490] [ 122.692461][T10490] Mem-Info: [ 122.692471][T10490] active_anon:10351 inactive_anon:0 isolated_anon:0 [ 122.692471][T10490] active_file:5012 inactive_file:52006 isolated_file:0 [ 122.692471][T10490] unevictable:1768 dirty:160 writeback:0 [ 122.692471][T10490] slab_reclaimable:12571 slab_unreclaimable:72760 [ 122.692471][T10490] mapped:25472 shmem:2391 pagetables:1316 [ 122.692471][T10490] sec_pagetables:303 bounce:0 [ 122.692471][T10490] kernel_misc_reclaimable:0 [ 122.692471][T10490] free:440561 free_pcp:23770 free_cma:0 [ 122.692511][T10490] Node 0 active_anon:41404kB inactive_anon:0kB active_file:20048kB inactive_file:207824kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101888kB dirty:640kB writeback:0kB shmem:6028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:4976kB sec_pagetables:1212kB all_unreclaimable? yes Balloon:0kB [ 122.692553][T10490] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.692759][T10490] Node 0 DMA free:15168kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:0kB free_cma:0kB [ 122.692873][T10490] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 122.692911][T10490] Node 0 DMA32 free:162172kB boost:22528kB min:50044kB low:56920kB high:63796kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41404kB inactive_anon:0kB active_file:20048kB inactive_file:207824kB unevictable:3536kB writepending:640kB present:2080628kB managed:1263464kB mlocked:0kB bounce:0kB free_pcp:64544kB local_pcp:10444kB free_cma:0kB [ 122.693135][T10490] lowmem_reserve[]: 0 0 0 0 0 [ 122.693171][T10490] Node 1 Normal free:1584904kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:30384kB local_pcp:7664kB free_cma:0kB [ 122.693443][T10490] lowmem_reserve[]: 0 0 0 0 0 [ 122.693476][T10490] Node 0 DMA: 9*4kB (U) 7*8kB (U) 5*16kB (U) 7*32kB (U) 7*64kB (U) 6*128kB (U) 5*256kB (U) 6*512kB (U) 5*1024kB (U) 2*2048kB (M) 0*4096kB = 15180kB [ 122.693688][T10490] Node 0 DMA32: 763*4kB (U) 876*8kB (UME) 467*16kB (UME) 365*32kB (UME) 183*64kB (UME) 80*128kB (UME) 89*256kB (UME) 50*512kB (UM) 25*1024kB (UM) 12*2048kB (UM) 3*4096kB (M) = 162012kB [ 122.694236][T10490] Node 1 Normal: 19*4kB (U) 74*8kB (UE) 57*16kB (UE) 67*32kB (UE) 56*64kB (UE) 43*128kB (UME) 31*256kB (UE) 13*512kB (UME) 13*1024kB (UE) 6*2048kB (UME) 374*4096kB (M) = 1584908kB [ 122.694558][T10490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.694573][T10490] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 122.694645][T10490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.694660][T10490] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.694674][T10490] 59406 total pagecache pages [ 122.694681][T10490] 0 pages in swap cache [ 122.694688][T10490] Free swap = 124996kB [ 122.694695][T10490] Total swap = 124996kB [ 122.694702][T10490] 1048443 pages RAM [ 122.694708][T10490] 0 pages HighMem/MovableOnly [ 122.694715][T10490] 283264 pages reserved [ 122.694722][T10490] 0 pages cma reserved [ 122.711714][T10495] Invalid source name [ 122.711725][T10495] UBIFS error (pid: 10495): cannot open "ubifs", error -22 [ 122.893212][T10506] tmpfs: Bad value for 'huge' [ 122.978123][T10508] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 122.992615][T10508] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.001164][T10512] tmpfs: Bad value for 'mpol' [ 123.006160][ T8860] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.370451][T10543] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 123.409595][T10545] kvm: Disabled LAPIC found during irq injection [ 123.510064][T10553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.520855][T10558] tmpfs: Unknown parameter 'mp' [ 123.578359][T10560] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.583023][T10560] FAULT_INJECTION: forcing a failure. [ 123.583023][T10560] name failslab, interval 1, probability 0, space 0, times 0 [ 123.588334][T10560] CPU: 3 UID: 0 PID: 10560 Comm: syz.0.1476 Not tainted syzkaller #0 PREEMPT(full) [ 123.588359][T10560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.588371][T10560] Call Trace: [ 123.588378][T10560] [ 123.588384][T10560] dump_stack_lvl+0x16c/0x1f0 [ 123.588409][T10560] should_fail_ex+0x512/0x640 [ 123.588429][T10560] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 123.588451][T10560] should_failslab+0xc2/0x120 [ 123.588473][T10560] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 123.588488][T10560] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 123.588515][T10560] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 123.588547][T10560] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 123.588576][T10560] ? _raw_spin_unlock+0x28/0x50 [ 123.588598][T10560] mmu_topup_memory_caches+0x25/0x170 [ 123.588621][T10560] kvm_mmu_load+0xd6/0x23c0 [ 123.588639][T10560] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 123.588659][T10560] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 123.588679][T10560] ? vmx_get_rflags+0x100/0x420 [ 123.588700][T10560] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 123.588723][T10560] ? __pfx_kvm_mmu_load+0x10/0x10 [ 123.588742][T10560] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 123.588766][T10560] ? kvm_check_and_inject_events+0x71c/0x1310 [ 123.588796][T10560] vcpu_run+0x358c/0x5580 [ 123.588821][T10560] ? __lock_acquire+0xb97/0x1ce0 [ 123.588856][T10560] ? __pfx_vcpu_run+0x10/0x10 [ 123.588885][T10560] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 123.588906][T10560] ? __local_bh_enable_ip+0xa4/0x120 [ 123.588934][T10560] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 123.588956][T10560] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 123.588990][T10560] kvm_vcpu_ioctl+0x5eb/0x1690 [ 123.589016][T10560] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.589039][T10560] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.589060][T10560] ? do_vfs_ioctl+0x128/0x14f0 [ 123.589087][T10560] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.589114][T10560] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 123.589148][T10560] ? hook_file_ioctl_common+0x145/0x410 [ 123.589174][T10560] ? selinux_file_ioctl+0x180/0x270 [ 123.589198][T10560] ? selinux_file_ioctl+0xb4/0x270 [ 123.589230][T10560] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.589252][T10560] __x64_sys_ioctl+0x18e/0x210 [ 123.589280][T10560] do_syscall_64+0xcd/0x4c0 [ 123.589302][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.589321][T10560] RIP: 0033:0x7f349cd8ebe9 [ 123.589337][T10560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.589352][T10560] RSP: 002b:00007f349dc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.589367][T10560] RAX: ffffffffffffffda RBX: 00007f349cfc5fa0 RCX: 00007f349cd8ebe9 [ 123.589379][T10560] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.589389][T10560] RBP: 00007f349dc35090 R08: 0000000000000000 R09: 0000000000000000 [ 123.589399][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.589409][T10560] R13: 00007f349cfc6038 R14: 00007f349cfc5fa0 R15: 00007ffe78756c78 [ 123.589434][T10560] [ 123.761431][T10563] team0 (unregistering): Port device team_slave_0 removed [ 123.769896][T10563] team0 (unregistering): Port device team_slave_1 removed [ 123.878269][T10566] __nla_validate_parse: 20 callbacks suppressed [ 123.878281][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 123.883101][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'. [ 124.122400][T10577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10577 comm=syz.3.1482 [ 124.126704][T10577] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 124.162579][T10580] netlink: 'syz.1.1481': attribute type 39 has an invalid length. [ 124.200783][T10577] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 124.263216][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 124.280650][T10585] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) ! [ 124.333688][T10591] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 124.514204][T10614] xt_limit: Overflow, try lower: 271964/0 [ 124.723063][T10618] bond3: entered promiscuous mode [ 124.822590][T10621] netlink: 'syz.0.1496': attribute type 21 has an invalid length. [ 124.825480][T10621] netlink: 'syz.0.1496': attribute type 6 has an invalid length. [ 124.827949][T10621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1496'. [ 124.919906][T10623] tipc: Resetting bearer [ 124.937351][T10625] tipc: Resetting bearer [ 124.957772][T10623] team0: Mode changed to "loadbalance" [ 124.961692][T10625] netlink: 'syz.0.1497': attribute type 10 has an invalid length. [ 124.961714][T10623] netlink: 'syz.0.1497': attribute type 10 has an invalid length. [ 124.972345][T10625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.975208][T10625] team0: Port device bond0 added [ 124.977381][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 124.981336][T10625] tipc: Resetting bearer [ 125.010420][ T5973] Bluetooth: hci4: command 0x1003 tx timeout [ 125.012592][ T5329] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.067448][T10625] tipc: Disabling bearer [ 125.077402][T10625] team0 (unregistering): Port device bond0 removed [ 125.188287][T10634] loop7: detected capacity change from 0 to 7 [ 125.193428][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.197260][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.201196][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.204985][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.207689][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.210588][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.215367][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.219227][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.222580][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.226384][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.229893][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.233349][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.236473][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.238994][ C1] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 125.239814][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.243094][ C1] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 125.246183][T10634] ldm_validate_partition_table(): Disk read failed. [ 125.250480][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 125.251779][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.257142][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.259948][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.263590][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.267093][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.270530][T10634] Dev loop7: unable to read RDB block 0 [ 125.273528][T10634] loop7: unable to read partition table [ 125.276114][T10634] loop7: partition table beyond EOD, truncated [ 125.279063][T10634] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 125.311642][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 125.421697][T10648] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.495419][T10656] kvm: Disabled LAPIC found during irq injection [ 125.501241][T10655] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.634373][T10661] net_ratelimit: 11 callbacks suppressed [ 125.634388][T10661] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 125.716685][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1513'. [ 125.870297][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 125.922419][T10685] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.931878][T10685] FAULT_INJECTION: forcing a failure. [ 125.931878][T10685] name failslab, interval 1, probability 0, space 0, times 0 [ 125.935885][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.0.1517 Not tainted syzkaller #0 PREEMPT(full) [ 125.935899][T10685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.935906][T10685] Call Trace: [ 125.935910][T10685] [ 125.935914][T10685] dump_stack_lvl+0x16c/0x1f0 [ 125.935929][T10685] should_fail_ex+0x512/0x640 [ 125.935941][T10685] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.935955][T10685] should_failslab+0xc2/0x120 [ 125.935967][T10685] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.935977][T10685] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 125.935993][T10685] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 125.936011][T10685] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 125.936028][T10685] ? _raw_spin_unlock+0x28/0x50 [ 125.936054][T10685] mmu_topup_memory_caches+0x25/0x170 [ 125.936066][T10685] kvm_mmu_load+0xd6/0x23c0 [ 125.936077][T10685] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 125.936088][T10685] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 125.936099][T10685] ? vmx_get_rflags+0x100/0x420 [ 125.936113][T10685] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 125.936127][T10685] ? __pfx_kvm_mmu_load+0x10/0x10 [ 125.936137][T10685] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 125.936153][T10685] ? kvm_check_and_inject_events+0x71c/0x1310 [ 125.936173][T10685] vcpu_run+0x358c/0x5580 [ 125.936188][T10685] ? __lock_acquire+0xb97/0x1ce0 [ 125.936208][T10685] ? __pfx_vcpu_run+0x10/0x10 [ 125.936224][T10685] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 125.936237][T10685] ? __local_bh_enable_ip+0xa4/0x120 [ 125.936253][T10685] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 125.936267][T10685] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 125.936286][T10685] kvm_vcpu_ioctl+0x5eb/0x1690 [ 125.936301][T10685] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 125.936315][T10685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.936328][T10685] ? do_vfs_ioctl+0x128/0x14f0 [ 125.936344][T10685] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.936360][T10685] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 125.936380][T10685] ? hook_file_ioctl_common+0x145/0x410 [ 125.936395][T10685] ? selinux_file_ioctl+0x180/0x270 [ 125.936409][T10685] ? selinux_file_ioctl+0xb4/0x270 [ 125.936424][T10685] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 125.936438][T10685] __x64_sys_ioctl+0x18e/0x210 [ 125.936454][T10685] do_syscall_64+0xcd/0x4c0 [ 125.936467][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.936477][T10685] RIP: 0033:0x7f349cd8ebe9 [ 125.936486][T10685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.936497][T10685] RSP: 002b:00007f349dc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.936507][T10685] RAX: ffffffffffffffda RBX: 00007f349cfc5fa0 RCX: 00007f349cd8ebe9 [ 125.936513][T10685] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 125.936519][T10685] RBP: 00007f349dc35090 R08: 0000000000000000 R09: 0000000000000000 [ 125.936525][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.936531][T10685] R13: 00007f349cfc6038 R14: 00007f349cfc5fa0 R15: 00007ffe78756c78 [ 125.936544][T10685] [ 126.042888][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.109564][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.112107][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.114536][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.116952][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 126.116962][ T40] audit: type=1400 audit(1757378822.279:953): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.117022][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.128298][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.130946][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.133381][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.135881][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.138322][T10693] openvswitch: netlink: Key 10 has unexpected len 2 expected 4 [ 126.175385][T10698] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 126.218060][T10698] bond4: (slave geneve2): Opening slave failed [ 126.258773][ T40] audit: type=1400 audit(1757378822.419:954): avc: denied { mount } for pid=10704 comm="syz.2.1524" name="/" dev="ramfs" ino=34361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.274438][ T40] audit: type=1400 audit(1757378822.439:955): avc: denied { create } for pid=10697 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.279728][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'. [ 126.284284][ T40] audit: type=1400 audit(1757378822.439:956): avc: denied { bind } for pid=10697 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.288592][T10706] bond4: entered promiscuous mode [ 126.292747][T10706] bond4: entered allmulticast mode [ 126.295449][T10706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.343236][T10717] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.419644][T10723] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 126.419700][T10713] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 126.424132][T10723] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 126.427691][T10713] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 126.529706][ T6059] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 126.681665][ T6059] usb 8-1: unable to get BOS descriptor or descriptor too short [ 126.685643][ T6059] usb 8-1: not running at top speed; connect to a high speed hub [ 126.691220][ T6059] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.695520][ T6059] usb 8-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.701312][ T6059] usb 8-1: config 1 interface 0 has no altsetting 0 [ 126.706183][ T6059] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.709289][T10734] erofs (device loop0): cannot find valid erofs superblock [ 126.713632][ T6059] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.716188][ T6059] usb 8-1: Product: syz [ 126.717526][ T6059] usb 8-1: Manufacturer: syz [ 126.718993][ T6059] usb 8-1: SerialNumber: syz [ 126.721417][T10734] geneve2: entered promiscuous mode [ 126.732962][T10734] misc userio: No port type given on /dev/userio [ 126.742607][T10732] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.789458][ T40] audit: type=1400 audit(1757378822.949:957): avc: denied { write } for pid=10733 comm="syz.0.1531" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.799288][ T40] audit: type=1400 audit(1757378822.949:958): avc: denied { open } for pid=10733 comm="syz.0.1531" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.980151][ T40] audit: type=1400 audit(1757378823.139:959): avc: denied { watch } for pid=10707 comm="syz.3.1525" path="/396/file0" dev="tmpfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 126.990786][ T40] audit: type=1400 audit(1757378823.149:960): avc: denied { read write } for pid=10707 comm="syz.3.1525" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.001195][ T40] audit: type=1400 audit(1757378823.149:961): avc: denied { open } for pid=10707 comm="syz.3.1525" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.012207][ T40] audit: type=1400 audit(1757378823.179:962): avc: denied { ioctl } for pid=10745 comm="syz.0.1535" path="socket:[36075]" dev="sockfs" ino=36075 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.292659][T10755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.361845][T10755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.376626][T10758] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.382983][T10758] FAULT_INJECTION: forcing a failure. [ 127.382983][T10758] name failslab, interval 1, probability 0, space 0, times 0 [ 127.388343][T10758] CPU: 0 UID: 0 PID: 10758 Comm: syz.2.1540 Not tainted syzkaller #0 PREEMPT(full) [ 127.388380][T10758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.388392][T10758] Call Trace: [ 127.388398][T10758] [ 127.388405][T10758] dump_stack_lvl+0x16c/0x1f0 [ 127.388451][T10758] should_fail_ex+0x512/0x640 [ 127.388475][T10758] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 127.388497][T10758] should_failslab+0xc2/0x120 [ 127.388516][T10758] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 127.388532][T10758] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 127.388559][T10758] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 127.388590][T10758] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 127.388618][T10758] ? _raw_spin_unlock+0x28/0x50 [ 127.388644][T10758] mmu_topup_memory_caches+0x25/0x170 [ 127.388664][T10758] kvm_mmu_load+0xd6/0x23c0 [ 127.388682][T10758] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 127.388701][T10758] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 127.388718][T10758] ? vmx_get_rflags+0x100/0x420 [ 127.388737][T10758] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 127.388758][T10758] ? __pfx_kvm_mmu_load+0x10/0x10 [ 127.388772][T10758] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 127.388796][T10758] ? kvm_check_and_inject_events+0x71c/0x1310 [ 127.388823][T10758] vcpu_run+0x358c/0x5580 [ 127.388847][T10758] ? __lock_acquire+0xb97/0x1ce0 [ 127.388874][T10758] ? __pfx_vcpu_run+0x10/0x10 [ 127.388896][T10758] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 127.388918][T10758] ? __local_bh_enable_ip+0xa4/0x120 [ 127.388945][T10758] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 127.388965][T10758] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 127.388992][T10758] kvm_vcpu_ioctl+0x5eb/0x1690 [ 127.389013][T10758] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 127.389033][T10758] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.389054][T10758] ? do_vfs_ioctl+0x128/0x14f0 [ 127.389079][T10758] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.389102][T10758] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 127.389132][T10758] ? hook_file_ioctl_common+0x145/0x410 [ 127.389156][T10758] ? selinux_file_ioctl+0x180/0x270 [ 127.389177][T10758] ? selinux_file_ioctl+0xb4/0x270 [ 127.389200][T10758] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 127.389222][T10758] __x64_sys_ioctl+0x18e/0x210 [ 127.389248][T10758] do_syscall_64+0xcd/0x4c0 [ 127.389268][T10758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.389285][T10758] RIP: 0033:0x7f873318ebe9 [ 127.389298][T10758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.389315][T10758] RSP: 002b:00007f8733fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.389332][T10758] RAX: ffffffffffffffda RBX: 00007f87333c5fa0 RCX: 00007f873318ebe9 [ 127.389343][T10758] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 127.389353][T10758] RBP: 00007f8733fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 127.389363][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.389372][T10758] R13: 00007f87333c6038 R14: 00007f87333c5fa0 R15: 00007ffde2652d88 [ 127.389396][T10758] [ 127.511340][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.516037][ C0] hrtimer: interrupt took 125679465 ns [ 127.616109][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.633178][T10755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.737244][T10755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.831983][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.840573][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.850580][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.857897][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.062687][T10774] erspan0: entered promiscuous mode [ 128.254538][T10783] can0: slcan on ttyS3. [ 128.322532][T10783] can0 (unregistered): slcan off ttyS3. [ 128.330659][T10785] can0: slcan on ttyS3. [ 128.403186][T10785] can0 (unregistered): slcan off ttyS3. [ 128.962055][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 129.172943][T10816] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 129.173187][T10817] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 129.175951][T10816] cramfs: wrong magic [ 129.182677][T10817] cramfs: wrong magic [ 129.313406][ T6059] cdc_ether 8-1:1.0: invalid descriptor buffer length [ 129.315562][ T6059] usb 8-1: bad CDC descriptors [ 129.330071][ T6059] usb 8-1: USB disconnect, device number 7 [ 129.977198][T10832] [U] ^R [ 129.997731][T10837] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 130.014912][T10837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.048432][T10837] veth3: entered promiscuous mode [ 130.051964][T10837] bond1: (slave veth3): Enslaving as an active interface with a down link [ 130.120506][T10856] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 130.309283][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 130.330969][T10877] bond2: entered promiscuous mode [ 130.334135][T10877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.349122][T10877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.353115][T10877] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 130.358770][T10877] bond2: (slave vcan1): Error -95 calling set_mac_address [ 130.569967][T10891] bond3: entered promiscuous mode [ 130.572264][T10891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.635414][T10900] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 130.640837][T10900] FAULT_INJECTION: forcing a failure. [ 130.640837][T10900] name failslab, interval 1, probability 0, space 0, times 0 [ 130.649376][T10900] CPU: 0 UID: 0 PID: 10900 Comm: syz.2.1586 Not tainted syzkaller #0 PREEMPT(full) [ 130.649392][T10900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.649398][T10900] Call Trace: [ 130.649402][T10900] [ 130.649406][T10900] dump_stack_lvl+0x16c/0x1f0 [ 130.649442][T10900] should_fail_ex+0x512/0x640 [ 130.649458][T10900] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 130.649471][T10900] should_failslab+0xc2/0x120 [ 130.649484][T10900] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 130.649494][T10900] ? fpstate_reset+0x112/0x3b0 [ 130.649507][T10900] ? alloc_pid+0xc7/0xbc0 [ 130.649519][T10900] alloc_pid+0xc7/0xbc0 [ 130.649532][T10900] copy_process+0x466f/0x7690 [ 130.649553][T10900] ? __pfx_copy_process+0x10/0x10 [ 130.649569][T10900] ? lockdep_init_map_type+0x5c/0x280 [ 130.649581][T10900] ? lockdep_init_map_type+0x5c/0x280 [ 130.649590][T10900] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 130.649605][T10900] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 130.649622][T10900] vhost_task_create+0x1d2/0x2e0 [ 130.649633][T10900] ? __pfx_vhost_task_create+0x10/0x10 [ 130.649647][T10900] ? __pfx_vhost_task_fn+0x10/0x10 [ 130.649664][T10900] kvm_mmu_post_init_vm+0x1b7/0x380 [ 130.649677][T10900] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 130.649692][T10900] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 130.649709][T10900] kvm_vcpu_ioctl+0x5eb/0x1690 [ 130.649724][T10900] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.649738][T10900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.649751][T10900] ? do_vfs_ioctl+0x128/0x14f0 [ 130.649768][T10900] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.649783][T10900] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 130.649804][T10900] ? hook_file_ioctl_common+0x145/0x410 [ 130.649819][T10900] ? selinux_file_ioctl+0x180/0x270 [ 130.649833][T10900] ? selinux_file_ioctl+0xb4/0x270 [ 130.649848][T10900] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.649862][T10900] __x64_sys_ioctl+0x18e/0x210 [ 130.649878][T10900] do_syscall_64+0xcd/0x4c0 [ 130.649897][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.649908][T10900] RIP: 0033:0x7f873318ebe9 [ 130.649916][T10900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.649927][T10900] RSP: 002b:00007f8733fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.649937][T10900] RAX: ffffffffffffffda RBX: 00007f87333c5fa0 RCX: 00007f873318ebe9 [ 130.649943][T10900] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 130.649950][T10900] RBP: 00007f8733fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 130.649955][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.649961][T10900] R13: 00007f87333c6038 R14: 00007f87333c5fa0 R15: 00007ffde2652d88 [ 130.649974][T10900] [ 130.744012][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.950614][T10928] ================================================================== [ 130.950627][T10928] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 130.950660][T10928] Write of size 8 at addr ffffc90005371000 by task syz.1.1594/10928 [ 130.950675][T10928] [ 130.950683][T10928] CPU: 3 UID: 0 PID: 10928 Comm: syz.1.1594 Not tainted syzkaller #0 PREEMPT(full) [ 130.950704][T10928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.950744][T10928] Call Trace: [ 130.950751][T10928] [ 130.950758][T10928] dump_stack_lvl+0x116/0x1f0 [ 130.950783][T10928] print_report+0xcd/0x630 [ 130.950803][T10928] ? __virt_addr_valid+0x81/0x610 [ 130.950832][T10928] ? sys_imageblit+0x1a6f/0x1e60 [ 130.950857][T10928] kasan_report+0xe0/0x110 [ 130.950878][T10928] ? sys_imageblit+0x1a6f/0x1e60 [ 130.950904][T10928] sys_imageblit+0x1a6f/0x1e60 [ 130.950931][T10928] ? __pfx_sys_imageblit+0x10/0x10 [ 130.950961][T10928] ? rcu_is_watching+0x12/0xc0 [ 130.950984][T10928] ? trace_kmalloc+0x2b/0xd0 [ 130.951006][T10928] ? __kmalloc_noprof+0x242/0x510 [ 130.951042][T10928] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.951063][T10928] soft_cursor+0x521/0xa10 [ 130.951084][T10928] ? fb_get_color_depth+0x120/0x250 [ 130.951104][T10928] bit_cursor+0xe8c/0x17e0 [ 130.951126][T10928] ? __pfx_bit_cursor+0x10/0x10 [ 130.951154][T10928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.951178][T10928] ? get_color+0x1da/0x450 [ 130.951206][T10928] ? __pfx_bit_cursor+0x10/0x10 [ 130.951225][T10928] fbcon_cursor+0x40c/0x5f0 [ 130.951242][T10928] ? mark_lock+0x5e1/0x610 [ 130.951269][T10928] hide_cursor+0x84/0x220 [ 130.951297][T10928] do_con_write+0x23f7/0x8280 [ 130.951318][T10928] ? rcu_is_watching+0x12/0xc0 [ 130.951340][T10928] ? trace_contention_end+0xdd/0x130 [ 130.951362][T10928] ? __pfx___mutex_lock+0x10/0x10 [ 130.951383][T10928] ? __pfx_do_con_write+0x10/0x10 [ 130.951407][T10928] con_write+0x23/0xb0 [ 130.951426][T10928] n_tty_write+0x41c/0x11e0 [ 130.951455][T10928] ? __pfx_n_tty_write+0x10/0x10 [ 130.951478][T10928] ? rcu_is_watching+0x12/0xc0 [ 130.951500][T10928] ? __pfx_woken_wake_function+0x10/0x10 [ 130.951522][T10928] ? kfree+0x24f/0x4d0 [ 130.951547][T10928] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 130.951567][T10928] ? __pfx_n_tty_write+0x10/0x10 [ 130.951591][T10928] file_tty_write.constprop.0+0x504/0x9b0 [ 130.951614][T10928] vfs_write+0x7d3/0x11d0 [ 130.951632][T10928] ? __pfx_tty_write+0x10/0x10 [ 130.951651][T10928] ? __pfx_vfs_write+0x10/0x10 [ 130.951667][T10928] ? find_held_lock+0x2b/0x80 [ 130.951695][T10928] ksys_write+0x12a/0x250 [ 130.951713][T10928] ? __pfx_ksys_write+0x10/0x10 [ 130.951734][T10928] do_syscall_64+0xcd/0x4c0 [ 130.951756][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.951774][T10928] RIP: 0033:0x7fbf8518ebe9 [ 130.951788][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.951807][T10928] RSP: 002b:00007fbf86097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.951825][T10928] RAX: ffffffffffffffda RBX: 00007fbf853c5fa0 RCX: 00007fbf8518ebe9 [ 130.951837][T10928] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 130.951848][T10928] RBP: 00007fbf85211e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.951858][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.951869][T10928] R13: 00007fbf853c6038 R14: 00007fbf853c5fa0 R15: 00007ffce8694498 [ 130.951886][T10928] [ 130.951893][T10928] [ 130.951898][T10928] The buggy address belongs to a vmalloc virtual mapping [ 130.951912][T10928] Memory state around the buggy address: [ 130.951922][T10928] ffffc90005370f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.951936][T10928] ffffc90005370f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.951949][T10928] >ffffc90005371000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.951960][T10928] ^ [ 130.951970][T10928] ffffc90005371080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.951983][T10928] ffffc90005371100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.951994][T10928] ================================================================== [ 130.952076][T10928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.952090][T10928] CPU: 3 UID: 0 PID: 10928 Comm: syz.1.1594 Not tainted syzkaller #0 PREEMPT(full) [ 130.952113][T10928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.952127][T10928] Call Trace: [ 130.952133][T10928] [ 130.952146][T10928] dump_stack_lvl+0x3d/0x1f0 [ 130.952167][T10928] vpanic+0x6e8/0x7a0 [ 130.952195][T10928] ? __pfx_vpanic+0x10/0x10 [ 130.952227][T10928] ? sys_imageblit+0x1a6f/0x1e60 [ 130.952250][T10928] panic+0xca/0xd0 [ 130.952276][T10928] ? __pfx_panic+0x10/0x10 [ 130.952303][T10928] ? sys_imageblit+0x1a6f/0x1e60 [ 130.952326][T10928] ? preempt_schedule_common+0x44/0xc0 [ 130.952346][T10928] ? preempt_schedule_thunk+0x16/0x30 [ 130.952374][T10928] check_panic_on_warn+0xab/0xb0 [ 130.952390][T10928] end_report+0x107/0x170 [ 130.952410][T10928] kasan_report+0xee/0x110 [ 130.952431][T10928] ? sys_imageblit+0x1a6f/0x1e60 [ 130.952457][T10928] sys_imageblit+0x1a6f/0x1e60 [ 130.952484][T10928] ? __pfx_sys_imageblit+0x10/0x10 [ 130.952531][T10928] ? rcu_is_watching+0x12/0xc0 [ 130.952556][T10928] ? trace_kmalloc+0x2b/0xd0 [ 130.952577][T10928] ? __kmalloc_noprof+0x242/0x510 [ 130.952597][T10928] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.952618][T10928] soft_cursor+0x521/0xa10 [ 130.952640][T10928] ? fb_get_color_depth+0x120/0x250 [ 130.952659][T10928] bit_cursor+0xe8c/0x17e0 [ 130.952682][T10928] ? __pfx_bit_cursor+0x10/0x10 [ 130.952705][T10928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.952726][T10928] ? get_color+0x1da/0x450 [ 130.952753][T10928] ? __pfx_bit_cursor+0x10/0x10 [ 130.952771][T10928] fbcon_cursor+0x40c/0x5f0 [ 130.952788][T10928] ? mark_lock+0x5e1/0x610 [ 130.952813][T10928] hide_cursor+0x84/0x220 [ 130.952839][T10928] do_con_write+0x23f7/0x8280 [ 130.952858][T10928] ? rcu_is_watching+0x12/0xc0 [ 130.952878][T10928] ? trace_contention_end+0xdd/0x130 [ 130.952899][T10928] ? __pfx___mutex_lock+0x10/0x10 [ 130.952916][T10928] ? __pfx_do_con_write+0x10/0x10 [ 130.952938][T10928] con_write+0x23/0xb0 [ 130.952954][T10928] n_tty_write+0x41c/0x11e0 [ 130.952979][T10928] ? __pfx_n_tty_write+0x10/0x10 [ 130.952999][T10928] ? rcu_is_watching+0x12/0xc0 [ 130.953021][T10928] ? __pfx_woken_wake_function+0x10/0x10 [ 130.953040][T10928] ? kfree+0x24f/0x4d0 [ 130.953061][T10928] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 130.953074][T10928] ? __pfx_n_tty_write+0x10/0x10 [ 130.953087][T10928] file_tty_write.constprop.0+0x504/0x9b0 [ 130.953100][T10928] vfs_write+0x7d3/0x11d0 [ 130.953111][T10928] ? __pfx_tty_write+0x10/0x10 [ 130.953121][T10928] ? __pfx_vfs_write+0x10/0x10 [ 130.953131][T10928] ? find_held_lock+0x2b/0x80 [ 130.953155][T10928] ksys_write+0x12a/0x250 [ 130.953166][T10928] ? __pfx_ksys_write+0x10/0x10 [ 130.953179][T10928] do_syscall_64+0xcd/0x4c0 [ 130.953192][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.953203][T10928] RIP: 0033:0x7fbf8518ebe9 [ 130.953212][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.953222][T10928] RSP: 002b:00007fbf86097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.953232][T10928] RAX: ffffffffffffffda RBX: 00007fbf853c5fa0 RCX: 00007fbf8518ebe9 [ 130.953239][T10928] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 130.953246][T10928] RBP: 00007fbf85211e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.953252][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.953258][T10928] R13: 00007fbf853c6038 R14: 00007fbf853c5fa0 R15: 00007ffce8694498 [ 130.953268][T10928] [ 130.953947][T10928] Kernel Offset: disabled VM DIAGNOSIS: 23:08:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffffffff8e2977c0 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f349dc34f98 CR3=000000004fc26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb501070 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb5011f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb5011f6 00007ffdcb5011fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801deba440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f082dbafe9c CR3=000000000e380000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082df1f8f0 00007f082df1f310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082dee0050 00007f082dedf0c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082dee0580 00007f082dedfb20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082dbe20c0 00007f082dee0ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082df1eda0 00007f082dedf5f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082dbe26b0 00007f082dbe20c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082dee0ab0 00007f082dee0580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f082dedfb20 00007f082dee0050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880221b2440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbf853c7dac CR3=000000004e528000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe78757000 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe78757186 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe78757186 00007ffe7875718c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f349ce12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f349ce12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f349ce12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f349ce12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f349ce12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f349ce12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc9000441efc0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fbf860976c0 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003000 CR3=0000000065250000 CR4=00352ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000009 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb5011f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb5011f6 00007ffdcb5011fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23f974a8 00007f6c23f974a0 00007f6c23f97498 00007f6c23f97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c24afd100 00007f6c23f97460 00007f6c23f90004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c23f974b8 00007f6c23f974b0 00007f6c23f974a8 00007f6c23f974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ede22a286d9cd76 0479f61717e5adfd 9e0e3ee04ff53b7c 65fdc4b439c4b2ce ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 189f308b3421eb0c 7c5b889a360fd5f2 641cf3afbc19ef55 6c701504a43d33a9 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df3d97def8609bcf 56e580d4ae8e1da2 dc671b99d722641c 47067905241a4069 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e85bbdc4b1470019 2157db5b7c1e12f1 c69d66ff11023d6c 7aa0dbe0b08d5dd2 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dce4b2daf4700ea5 cdebefab681506e5 709ebe8660fd2433 55082f8b35eb9d0e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000