last executing test programs: 5.328055868s ago: executing program 2 (id=2246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x2fc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x258, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa68c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x22c, 0x6, [@m_ife={0x1b0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x141, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xb2e, 0x6, 0xffffffff, 0x8}, 0xf}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2fc}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupwid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x3, 0xa, 0x0, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x91, &(0x7f0000000880)=""/145, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@map=0x1, 0x6, 0x0, 0xc, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000780)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r4, r8, 0x54, 0x4, 0x0, @prog_fd=r9, r10}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r11, 0x0, 0x1000002, 0x0) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 4.42231025s ago: executing program 2 (id=2249): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x2fc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x258, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa68c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x22c, 0x6, [@m_ife={0x1b0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x141, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xb2e, 0x6, 0xffffffff, 0x8}, 0xf}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2fc}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupwid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x3, 0xa, 0x0, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x91, &(0x7f0000000880)=""/145, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0x1, 0x1, 0x1, r0, 0x1], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@map=0x1, 0x6, 0x0, 0xc, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000780)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r4, r8, 0x54, 0x4, 0x0, @prog_fd=r9, r10}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r11, 0x0, 0x1000002, 0x0) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 3.525294597s ago: executing program 2 (id=2259): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="d6d9c9fd38dd30010000003475e5881bed84ea8ae65d4240a337aa3c4bb2bead95ed97979a1eab98b3e741de5db413d49b769a455e2f1f96cfa676959f425ce2d62825016f5f91b5634bb7c28e9f9253aef04d0f70504806aea585cee81413c09cdade24c389ffc7faf1b2877c"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x9e, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766972745f776966693000000000000008000a00", @ANYRES32=r4, @ANYBLOB="d4d3daed4db75830896dc944640746f39ae7aa1887b34959f48b95dbab910e7ee30adbf7e3a7e55fa6b41e57ff3b"], 0x3c}}, 0x0) 2.942265601s ago: executing program 0 (id=2263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.591857899s ago: executing program 3 (id=2267): ptrace(0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000003c0)=[r3], 0x1) r4 = dup2(r2, r3) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="0f20c035000000200f22c066f3450fc734c0c401f9e84b0466460f3a0a4b0fde6436260fd1469f48b8a8170000000000000f23c00f21f835030003000f23f8420f23a1410f1854df6f6466450f72e0cc36f0212a", 0x54}], 0x1, 0xa, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000002c0)="660fc775d50f01cf0f01c20f78b300000f01d10f20d86635080000000f22d867f2ad650f01c80f852200643e0f76562f", 0x30}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_pidfd_open(0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8001}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000c3c0)={0x2020}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000000c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x401, 0x11008, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004140)="02f00c1d0dda83190c8b2969e5d107b997d557314c4da896298ff72343456d7ad8d0a3c9d50de42ef139d0d06f47aefa86d39e623e4983730bc4acd2a3453e9ce8ab83ca57bba44ef9418053978935925402ab801b6979708a525ed019908b34e02f859ad4fe7ea4a350535a413c192c59200cfe1146cfce7eecb4623aeba4b78d98a60a06859f115f185f5849bc4bf657cc34fdbd22e7093ab80cc806d17ca48f8eece4181c9ac3c9683567bd26348a00f13b4227b52da5dbbff4d3903749eb428bb6a464379db2f0332abbfe4d5a1d8f3175def20fd81e00e99af5cd23e1fe1a02affae45d2fcca7311570b269f073fc727285b6eeaacd862f40f1e5b84abec8f63212c89e4458c61ab5c32f7347d7d537d267708129701bdc744d35218ce52988699adf1e34f61493fd397296b4ca0aefbeeea873eff80fe26c0bf3c058ab0ae570ac08e3c53079d31669f34bee6d68b92398fe21c1d76a24d858af557d7723d27c0435f70fe46b18d17f3c207ad809bf3cf81c3074be87ba9d2beb513903109a9dae4a56576ae7bd3ecd4917a2f22c756f100eb0f3b48f3c506aa5d717b9683762e8d268ecddcf5121ab06300b1cf3586c910bf23de3defeedfcc1e899c899eb483c9b30cc56181f34937c70e9a2482ce13531bb80293f85fe080e722bb628b67a1cc9a9e7607313f0ce60a8f79fb0807139f503622c7cdfbdef26fc004897ca200a9b4328e0961a79e46ea7734a51d3c8930ff903d4779a48b338f43ba5d6b50f27f69802ffeb5473b15e66835035b7bf41489804e99eab0fc7579f569b1ba37151913454be46c6cb12b4e5f8c7a0a64c992fe18e07088d4ae91fbe6ef05d74d63173823bcd63948ebd29b70f144c7a03c951de8e3873623c14c4a99b52a9ad881206005e66f8588b0d73994cbfd6aefddbf8cec9622f948fe21287b38b9daf40c6ccb3feedf50f90e8f4da6a6bbc14b87e514cd976302e223a3c9165ec4b79f341908a97e13331582f39da15f2e9a6ea5a836bff4a42cd816f7f2028763bee37e7bbd0ccdf419edd48c55a6883825cb3373eb0b222187fdbf7a0dd4c862e9c658a5590c62b95b2467b155a87013ad20d47bfc8e8049f8bee091cb893b5d507772ccaadabf407a25647019312cad64b940137ceb603e9854a41d540649d52e5b2a39e7865ac1ab41cc1304712520e8e2827403b01dbee87b8b0caffa3c1bdd3b81538743a5422be517a5c679543282fdb46b29cf256a9d7e1c3dfb69c399db615e2e785d5a3cc719cafaa7973a542679b3185f5f86e4864637ececc4557a5465b05bfbdfe433546fe822d00f41b45c1473fe88d8a6911cd673f3d71518d3d3918ed766030448f01ad5e5ab66a6eac88720f7205491f9bd15d448172de258c865534b0dad6e607819aca86211254ecaafe4597af845c1c92098320dc14d1bae44486a02b8e81733a2be227acf940df9a2e717d9373a52a82ae0863af2320ec820fa8778b1e0123d41e6a79055adbe1b63da8e84ad6eb7906ab65b92c493a8150685dab1e2f2a16da54abe9cddf141dc41ea8a600a5e28bd8a342be318fa91d2e98c36a681c98f5676b27583d49f4948666c80f3b49b2ef6b71896e980c6cf93856d2dfb59cdeab1d8940296207d1f15cf75d7beb6f744fdb38f34e00148f48b3b92d65dab43f3514761864c693e6fdf1e08be74ec507d180301d419cf151901bf2bbc1245bedfe9f8b91f64c869d0741026acb0499a4a7cb167107f609141c349a7810d16b417727ded0decd32b4d48a624d027a3d057a9763ac5139adb0042d70caf9969c7a6bad7afe5d8a48d0e5726396d379a2bfaf957468748c9944bad2dcbefb1474a7d782b2e8e278a10dc6d6dc921476d661cea4439d8ba17c95c9189ef879b52a1889574f70c022b0cb973587a70e5d4147aaf1d1f58836540eb0824e73386d2c3a94d253b99d4532c97c2a75588c536cbc24e47088dfebf31ffc0cb23076bb2f515546b3721d8063e3b88d3a8ea196b88564f65e5f808eff5ab6a30095d6e0978a286b9d693a6053231d71dbf96967b5a2c6eec44117078851bab60718ff22a3e8c522fa8d85d6df1a816b62a557b47b05c5df626a47928523541c23e9f0a0a86515437bc0eb7b9b4b7bb866206e093fb4a5dba6ad9d2424d7fb2f8f220b00be734c781a91ad4555f2714c6c59588300ad47d3ecb86fae178609fe60d9f604be31c05cf3cf1edffb45cc2ce24ec44434107834c6335ac09e2e931b0a8c6cea5ddee3686ec9bf9ef6693fc85e36a7fe1146aa93da6f4dd5f36ab0dcbc28d29ddeb481d5d4f8a2817733a8dff3cb07ac1256bd43dab768c1661e4c8bd3ede3aa548f90424fea8e39c6d5d639b49b7b4da6a95700ac6d9f66bae43320ebe5add0c0cf5fb8a1482c60a21d1ed54ca7967bc22362ccad5c9aca0a7151b53546618500ab0a32151c7e61fc1cd7207f165449d4935337ac69259142d952d83e415bf39227224f208ccd4f6476804b7a9ed45f14f7414e36c9c1000ae4ff34e5ccfa224875c81bf30a73300a22c9dbba7770d0078ff37c965b2d9f97e50e64072d7db371fe4cd364e305f64c1fc70b682cde8fa865fdd7cefbc528f3177a67a4f31f3085ab385705a5008d7572b8f6690c07a9f0d8754614bf036d4efa96b09258cc43787df3259138f995a6d9dd13728fa1745c8e4af63e48853bc63106859defe07c53ead96f2bbd300ace2df4281ee764ba0c2234d4e0da8c0bce90ee74322d50a5653001a6706c8f4f315219bbc7fa42ee186ac031ae2a7f806e539f6d498514c3b657f6b6864ba1cc94879bc70ec199ce4124907bbaf5087280f9288a51f6d2849a2ad906aac9e98874fa678c66e0d71479f71d81aea11acca91b1a80e1517f6ce93d63deb7712a15232856db2e4e33b0c50f638c5c0b11fb81c4d9d1f4ba9914b8cdb1ee091b320db91850700a5ee1f8b837deaf3eac758b1aa03ceaf559cd87f5bea97897b97661746fd0e08713fd5fe42a87de04a2c9256571a14818750dc51d3c5190d8c2055860c0470309ebdbcdf1c050e0de01e6111bafd83eed68935fa61dea3dc55c278080935ee9d36233148dcc1ea0a3867ece386248ffb58ad2c198ef8ba29ea07983740e584daad92c62ec10c3dc16be4283bae22ed5e39a9821a29a40952950abf6b41732933950312719749ad06eee0c08eae0136eb4f16cee5ed167df66482ece475632dd25cc43782df12a8573492fa46da81b527213b098e3d9b0bfc9da02bde9c8f0672778cc418f4c0a113a513b358674de8b218fd3345ccf4179a9db6c0e1858e558e749036ea70c045d572ead75e60cf08fb26551741fdb86ff3c0bfcda029aecb789c9b8e27f360ce04159b9814674a3b5ac823546d4ac467ae878d2d4482e4d5bbf8945155410b8e7ec05619c3d6e254e30879f4dcc3d93b5c3e3f73230e2bb406accf83cc5a3f4b8388b851a98fafa03ddf392b9c0c5232445a313f440f158b20cbc34c29a0e36a062a10ec77d0bbeeba5771da4dfdf3654140f53e85d98f6a065850ff5afec907eddae8b7128ba9dd0821acc8511f3e3c68e9ef9da35df09315619ab781192a648baf254fd5f35cb650b7672a9a82f989bf2039961f68763e34db401c903a40a5ee9495b7011893639ed3c3b83998503905cdc1dcfbc223bec4cbb5e1459ec4bfc6eb14dec0741e2364eb9cd9d988013ae2740b722704d99576f897aca6b3d5c34a057d8a5f51c1bce080936a21fe214c3516c6edda99c4fd104e033fb553839a386fa74549921ff4216589dfee205fec1031e121bb58ede2fad12805785abedd162396e11d36dcdb1993853eefb6e1c8c72afecf98969db8216da5276e347a327c60ec97865e2397127198151feeb9e0e6268fa6e88c50ec8d681450e642fc01455fa216f9835d6e309f9e4b5129a2a56db042f0c0486a47033b52f59513094864c0c6c313c7edebebc28db44679c3544e93375c80cb782763f37d85eba6c0bae5934875444245d467de5d6a463443933ae95400f88441d70891e6455f73356717f68e408b0cf91f0deb9aabce6c1cbb1459d8095433a1e08039132fb8ec30687f856e524ca8ba00b6a20225da41bfd260fa214c26de5844246d44ac5ee2af44f158da1f55188277161d7158fcb97b1e37ff3088cad7e79e78b19c7440ae76356f0b094f928a61e9195fe87a0330baa29dc5e1370abc024577a521ad224074f5ee52c30326e2d1e87044b2027232ac28ba099e211a7b33df9fb6d2fd662b7d38a14c40538dcad133f4f75ce114cf8e583f74d2d5251547541af0236aa59075263e2611fc807ff898163c56ef01e7454da2a6000ac229530ea7bf1eb75529d3c98e6f7fbf3d4cba327ed5cdcb83df0c11fbead1de4ec3ac5c2cb8dda8591f4c316e23a0668ca25149f8a55a47649daf9e40f784319e8b901e70a8a31bb4f8c0a86a4999bdfcb0e9f297e753bdb2a275ef98a92b8dbab2d6eedc06ce92502ae7ae76f6b13264ba41e717f8257e34bf1ba512b335d5d178d74742cc0ec6e7b16942095cde010cd90b5c8a158b65fc51d958a96a7d20446c1fd8d1b0fc9f2de8f404a80b504098dc68e2c60b0f43ab538cba0ca5409dacfbdff2267374775605dce498514ee7b32a7f55452986b12dc6178d6a926dfbac6bbdcc051d0cd54bc3aca47bd665e01bf1f050f7903f031197594c513ce5ba931e2819f5bb63c5238c19c1be9f4d9668e5c075804fd43ea60f0ab9f00e06683b8e29379a9326b40e8fe05161adf1cb519c31ecebcb042ed1fbb4b9f1b12470bef6e964855baaff5a7dd6146f07caa8097c778bd10e5ce995884d1f3b91962a7974d84de6157d3f54735d5b82e11e6fc000874ecd396114c693ce2297caf7a9c6a6814a890e4d74e17a16339ba103c0d2da87e522ed67cd23047c7d9bd1562234aec98b85ad4534522cca58ee17ccb9c8fe7cd68ad3d6d6e0edbb550ec957772ee1109d501ab76e364a988e02e6b4a5b62f72e61fa7cc6120d12414d3c8ea09bfaac8e806d19dd76f940b769863d200861e44c72bfd870005f6663a7a6d1d60ac1e376806293d5143968d37af14301c9d6506985eb7bdd607dfa4d3cb5cb058019cc5502c534d3a5a1337bbf6306184230cc21e3ef7744b839cd82fc6347316e098e05ced0f25b9cf5721f2d003bdb4e0a79eff90ec4aacd6afbb78ca6f129cd16c8b2f3aefb5a2036951db7ebb40d36723a75723b3d1011e6085493664bf5d336c5cb4079ae1ca2412c53c464831844c27f089ffe345a2029118672b2fd2a24c72f9088dc5f92cc5f3bcd6c7359f52d32ea15172e95af7e6c81c52f20995877cafed48dd49762701c88c225bbffbbc3160d838957588fc2d41efab4148bc961e8d66b5b21e7eb4228a132d61a1c9f6e2baf7430d92478a3948fca4e10594167ca5e72678189cb4e90a0b0e45caada64d15010d73157cd8b4d04099ecefb1ed187d673d1bd33f13dbe4b44d351a34738280f21a79b3146b0071a0924e643c1dffe0d8c72b3bdcc00f203153f63c249f18e0e9e7ed1c0237411893832fc5be40d308b194bb04a17e38f0717a0808058b7291d20b6f0f1e5ba11e2351d985138c61806b41ea5a77ef80feb1f6f7383000e97549487f1bc9c3b5e8ccb6ed7ab8e08b258c75d5aad2a01fe8b5777ef5c7ec1eb3feca16dabf8eb50312f8786d5018d7bb7c9776f028af7b3423af3410696587f3feba823e5e3ccacfeb23fd4359c252b2ab5136d2fa7a6633758b5c45099f70a672999329eba1c89f07af0eb7c3fea5ac468ce042d699b6f391eaccadcf6d14e97c620a5eff7d92946f09d79d31cc876da261182a73a3234d5e53709185680c8b5376e4d8445fe4fff988062f23e42e4b7908ec079a840f0be839062074c22c44b7f4c4b23be2b6656abbb103acc0bd5058e0112a7d55cdce5042a76fe24ba5e9a1105c68dab94dddd44cc6c860172847f20e6ebc49787ed8ca19824b09468933ae9a496e960b7c592e783b6a5f10a9d9c2265794c5891ae7eb9cca9b3f99981a252d522047b95fdb518fe681829948a9d329b9cc7cb2f806ee81a3c930c73c8f12a05b47f1470ff08d5a03f37dacc1e4a7f65563f8825f9ffc316c2ed7a5ea434cab348c850d1b8eaaa0ab2ef7460269aef06f9c46a1957575cee49e1aa72d470dc9763b4abd61d34693e462353c1d023249bb7085f1362ec6bab9d349633d5f9637e6a12690e502f8af9c2d37a3f573411595539c66e9f82d5b39c01606af258e769b2391c3cd0bb0d93eaa36e168136b301d516724ecb173a0766ea9e9d5be5dcbf58e0322261e584d22594cfac91d16bcf38b8cb69e022b0956fb4be2981a526bb1832749ea1f7b188dce590927620ad9d6162ea52bbdbd14b45ff967f183c1af4269dc16a1be7b0b5278ec02a259aed022039e70a9c1456997fc1d053b1ab54238d8282dd11b68b806c745a257a7c0fcfad3277245b1f7749243f457121b3d17122f27be6b1c56e9bc151f52db66c92246072ca4e5d10619a6730b1609f133b5db1f2b0bb4a86dee2c44a6e25299ee74b99eeab5f195728aa45dc7bd300bccb48819bd40b12152b40e1395ac25d8b0cd1ae12b9cd46a8e54f495cca85a680cd43f70f55505f1a72c030dcebbb2e5b26ec971cd58c76ee67d86fe075bcad475658f1cdf09c94bcb5b4db83b3147882f65f67921267f8471d8deb7b159761c83fb9547db71b6878a21287aef6a2e01134e735c073645d2488138f280754ddf66cf8c0208e51a96696e185120a6b84a73d2c9bfbfa9e501f1126b44c491ec437a0b490cbcec5e8e0e0c21f803354d2d1923fe82509706ab34eb03101dded5f6421a6b90dea3db643a22eee1549e30d44184bbe7b842a656b91184ebbea76d00942b429dc07c704750fcab290c43bfdd2aed8257c21312933a11a76d0be361753a49ccbad5fab68eef867e11fa99a1d8021218809c0ce0bd52bed2d5c97fff7283e549afee371b7f1b3973ebebcf11f9687c7086129ada7bc09bca2da4fc02c0af28aa043f3f2c1e02dadfbc3a245dfd2e30e6050e05388006852e871b6890ddc006072d1a062978240df6166ba6ccb732195f21bec579d3d2b3f13e818e9fac77be72152fd441f6ab772b7fd3f888a91f8420f336e5a69e36dfdcc23b066506167960dcd1e5c84d4f236bb83f8daf03007d86d5b34aee798755077dea9b4faf98daa725cc3ab671b3b2b95c193530e0d018309a460a518878ee82e8495622028383ee97fe6a0111521b9a60fe51011bd0c62ee11e7a3dc5a0e8e8b82e476e752f63c5ba75a32e7b5b40d8ed1f539b3262351ce42d1bbcae0371ca72790ca4deff1441404f072947970ed3f23894e6c894c9fc7644c4082188b1ac8ef1e5c045bf438b9b81c7333859fcd071100785e14568c784ca30c4aea8a728a7796a201aa1b65a9355cf368b440498c433414141aaeaf722b9ee70b7cd28a3c2beb61ed99b619a4486b4b7210fe5b1cffa4474421b41303f6de7432874327532cbaecd0e1e9e90f00cf03161e9748807f3728e947c1ce281f3417a3a162deb2d01a5aa330e95b5624769d278aabfdfe6e8089c62ee1c26be5c121cfef2fcb549c1671497a05c2a397f5090caf6913fb39f01a095d55d33ae31d36bf223cd506ef2eaa48b1729c2dbdd7cf84bd1c2d0ebed7b6487991de616517c4e53665e60e6bbf559dd5cddd5eb88087fe6d0e2632f10b9e0f653bafbf992f55dd2592bea82a9a5958ae3e767bcf2c50b691e33dab8d2b1b2fb33419b5dae945a7d4a0169ec64817cc02b02139d7f70bfb42516c913311b42323cca46e690467c894a26ea624432b3c536f48ad569d56d8bf131048f81c0bf77460bf7acdf513087bcca1366bbfd05136ab5456f7e99f545f343eebf57299bfb4ef4a3af05357037e7080ba36084505eaa7339fc981cb99e381c3456d3de6cec5c5dc76427b13db53c9bfe516577b51411602146929e08c8762e6c99325a00242bd15f511f25eed7aac3537aca0407c70f362a0583fa10bb259f758feca1edb4f8adff7626bbf67fa0d940bb773d1afd523033b25107fe02161faa7a2bfcd629e58d681be5e980f8d563daac8532bc747a4242fa539416bfedf38cd8e3aab1764102c87627308abc41f6ebf8f03126d26ef90c10f0dd0fb5be22ee794fffb3ef0537f640b92c2ec335ff99422fe5fa41467e1a95fdc98e13881e1912f73afb489f237acfa971f6f64d9dc0066552167ebad1a7797412998a748d3b236e41ee5a8c223a1fa033389dfd2beb582987344db19988096e3bc0c44c8fcc4ef4a1d60b3991a5e3eb08d476c6dbdef30ce2b7f84de6925e28eed23daafe6be895d9b9c055519f9f3dd5c67cfafb5138380f581ec2bcd15c415087c85c32db56fd589883d3f1c81d56fe2436e910bc873596d4fc5abe0046e00934912f70c028c41390091988fe9fc46df6f10edb697bd1408486860fb6e77c76b4778a151769be25d891c1bde084ddcf964a7d3e528fb39835d8a003ee95e31f7c6c8f22e2d97454b8bff0450f6d9d3f3066041f19aa7e99cd00bcdb238e493912ffa5992eaa0c10dc4e0c4277ad8b5b9be74f72a0b2b89cb5df3ff6e06d84b4db052a1846a2b8284d49c0562f561dde8fe38bde79afa4eb12095c9fcfb9805ff76db4c63f2c737bb97117f880284feac51aeb26e21071a8770cffb4670fb94894c5b7cb6b60c3cc6a0e04458371bf59669f07be5517d5aafd2485aac11e29332bc9c0d9aab851d40aa713665be691c1887ed057e63bdb4da732f70dfe503a009c6c431d6780559273215a222228082dbe613d2dc235908927b1693adf812ddd267d1f7b64abc5e174b057e550c60d5b4e5f4aed8fe16dc5ecd7d7fbc3647efe8abbd9f2ce4f21a14d2e76af8a0551d99f1d35cfee6a068f521af0340750658b415685ae99459744c3b29e24f70977ca21e8638045a3dcb88556904f4cdb31920b89dadc5b846d7a1306d1f86d179e1f611d0c061146e3df0aac42cc6710231d844e167a57b99f68ca174152d088d5af232d5d4e186f026dbd0fff228e7de1ce0e5d28f439e94b6cf106306a740071a03ee25387d1c0b2da3b24dfbbbf078458e3db1c42d1c369b3f57946cfba615151c118e5bc31d43f9621bc30ab6fca226285c50eaca6daedb148d0c4acf1d9691e875338221074630d9ac117fc704b06da6b595f9906681f5a598d0308da0d56e45a216860a3acbb2e00376d2931a21695239a8216347d39f649c0d990191a62a32563cc967a03e606ada7dc76e67a1e867ace9e05e8a27d96987b93eec3cbce6c8c4021ef2a7a862bcb49b2450c63802c41bbfd8ae9f3c9a55a570470c41a9ac7ec88c83d5c1f2c9342b30ab09e50271a7be04feedf85abac9efaf1422a045f6383886d3014c6436c7986f264d119b1f8aec8c67be8147feebbb94266c009d98db54dcfd9b6f275f13c210d10d808b55cb558faaa2a89f90023fb7aff01dcd6143c7fb985e286ae7bcd521916794ac148bf85ef14d8a54fe91739a4b0c3bfa4e77d70ebe0bd187364be48953bbcbb220dd43f2e9382d430dd0baf069b6e3fa46d696317b4b0dc030c7edf27c416f33082ae1b0b13290580b5c513adb90fd373af0403f268521fcad12940dec7f0532aff0f78813416cf965937f7ca0eaeee97dcf7a7ec603b892ba55801a6637ff1a8e4d99bbb969ae06bfadc232f131b19cece7b8c998d6c57b9b68d2252d7e543091583b67b868c8dc079c1c95294c5e039c637b1a02e58d614fdb79f3f08a29f9f90ba09370675ac1b071f07bbf97e48d3e3d102590c2fc4ccf5354c088f41f1abe507901a1b5e246c88f81e297a2876182669b16f1be10e68f3bc66c7e20f34ea5a5252ea013f71ef78931ea4e99f5ee9e4761cc3f773eb02fce9065c333eb58da334a67525d9f885747aeeb3193c3e6b60e037b7006435be7bf1eb5ac592e288984885b5f9781a900885c59ee235785501ab93d73ce758aba261f5cf1d732246096412a0a9334fc113b1fdedd0a15961a252479a91a889dd312a4fe44a49a5c8f3364740e2c84ad375226b0a8070d6e5f316320c6f33461e7c32395c60b531aef2690da2ce0a965df38756c26be257f62e89404ce58a62846e11ae30490ed476a484c5b798d0c67cbd795b7e02d460fc1be0dbf85180fbc7d650c14cc86cfe65259fde8d330ff96a175c49ccdca9dcc9886dcfdd763a8ac7bf4c02cec7ca5f808406a9a04ea18cab07febdb8f1f65e987de2cf830ed782ee590f857385f3514798bd3c98bc0bf3c9ceb63b7d2c4d084332f0f4702c185fe9b1a5780f8b11f18b10c9eae1d18a5d45d2677cda5c927906c507f21b987026965d5a9edc182cf6b104878aa8afe22731b2ec16b692cd2819b37a50036db1b6a47f6c47299a8bd35735d180eb1d75d956e8d020db4279fe1332664dfc01cedb5742545a3f2173a159841e11552564c3fbd39fdff26c4438d0b2f66b65f4ddd5778734562eb2bf1d56f5970a8463b520cbbc55dbacdf37a6a16e5c7135f3120c7bd4bf2fcefdf47d55d5a7ac628341ecf694098fd457d23bcce0b2296bf99ab9aff749af11b22fa2f24d4ee95659f3faf48978aea794a80415c845a6d7f924c68a62972db65b9185ff527719c5f8bae299fd50bb7ee1ced73528ab0648b870d8e8ff0acecabf2de8fd4ad30b1fce4084d8e1cfcee237f13a27e4d238f6d2eff350f2393f5ed9918cc35917f2035b1a5faf297bff886b6716db37215b822c8af5142ac94849e5484adb4e59ef85dd56473b1f6e1f6065c8e744377d98815f53244558c42af67e3502865bc81c37741c5ed3ed07e33c64a9d8b2f527e54e3c7e10666dd95eed759e8a3244c5a704a9349ee929752226d01c10bfa94d31ac2ced8261e5fc3a15f68500a9e7b5ad53fe3de581ae3fc9a03fc4da706c17b40ba5d9505938dd55f09989812e25ee54f7668fe8bd274e0c0b040a15c18b9d8bcee0cc88590637a8e7b6792ea8aa8dfd4fa8cfa183f3ce15308acc9d91d02e7f7b46f472c8fabead73ebe033fcc507384948a1eaf03548d79b649be7715b1aa0814a59183424e49e86bc9781ce2e9e8277a85f9b0b4faff231453829faa628ab00daedf8b8aeaeef758bbcbeaf8863ba179e1054b3da56466486fd9b8dcc42ca1bae2d4ff8e0877d9a726744080e125f7a1bbca906bcc59e8798e73bd79e5de3b4a79aa2bc2e8be40b695b5add3a8fc0952053bfc352849fe1ba9da83daca4c904c66fe91e55709ebca2a36356912a285f2206446b3216d78c9fe498431025b1af22d99537d5f86efb23e11e6e8e7d6cd97069c533e908cfb234c26a3424915459c53bf76ff18d7cceca11511b689611ff74118844aed1d4882f5d2a9d051bc3e051a53b7633138d0325082263497c9102cd33fb16c27a93055617ad14befe6321d40251d239d45a89bb079e24b04470fa75454d91bcc39c233eb0ad4a03d5667b9c7eea0d927d665dc2db377c71cfee93bbcd77f6096a2dd14452f1d74a9ebc7288670943ce9910f", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.003799156s ago: executing program 0 (id=2268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3d, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3f00, 0x0, @loopback}, 0x1c) 1.941765031s ago: executing program 0 (id=2269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x1002, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f0000000340)="ae50b28ac5c843ef653471b5c1fb9d114461b0e8db4cf6421ef53775e9bbf6e37513937a21e649fd9904ee452b9b8f2e040060c3a28b5abbbca8ef9646810edd9563017df2bf2a00c40ba709de18403b4a379dc6b52f3001d88c12ba017d16cd157d1f13948cdb538b9e928c87db6d1e7363202b2187581d407473461d222c6f9d76ed9b45768697b0bc96130d8ea24f95aba7d43f86a226a59b3c1aef75013d45c06148aeaa18cdf8c2b4", &(0x7f00000002c0), &(0x7f0000000540)="b27a337e06e728b0cb93fe5d3d275e04d462bc7d436ad9b50f4fb203ab6981a2814113b13deea7ced0e92ecdb63d895ce5a90dd38d65be2fe1448a236031faab0c6757a012d04f58b78e7abaa4ef93c64b3e5f5dbdd632eccdeccb1827c5f1599826eefc51a2249b880de3e6f05ea6354634429c", &(0x7f00000005c0)="49465fa9986ae858811420529f720297017927636b3200daa82e95066c636d8c5417dcaedc6c5a90183f60599b424a835a15fd4aa7e42592a18042e8ab1ea6214fb670abc7c6e6a031481a5b411c258c2d17ea738b1301451c084b2fb876dfd7580d6325580f7b7a3b56987f787e4a9ded960e4547202ce67bb49d73d0c7e616151c2986648c078e89984c4e82d25af7cf5b52b5cf67fa8646b21533a3cf053b26d673b0bc7d8dd1748dc4169a05d80e9c9eb34c193463ba2103ea1b45233ddabfda0efbe552e3a24e6b5b15594f04afc5bb47c6b50c4f4ad2a61d85d83bf72e441d0abd604fc20752b85e", 0x5, r0}, 0x38) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0210000081071d57d30dbcb8310016632a383b674ff82b30cb7d0000538637e331"], 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='jbd2_handle_stats\x00', r5}, 0x10) r6 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000780)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r10}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff020000000000000000000000000001"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020722500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x3cf7, 0xffffffffffffff94) bind$inet(r11, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r11, 0x1, 0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x715, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0xe5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x33, r6, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) 1.851989945s ago: executing program 1 (id=2270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r4], 0x4c}}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x2, 0x8c, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_RUN(r10, 0xae80, 0x0) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) 1.672250668s ago: executing program 0 (id=2271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) mount(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000340)='proc\x00', 0x1002, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchdir(r5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x5392, &(0x7f0000000200)=ANY=[]) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0xfff, 0x1, 0x4, 0x2000, 0x6, {r6, r7/1000+10000}, {0x1, 0x1, 0x3, 0x0, 0x0, 0x1, "161e02a1"}, 0x100, 0x4, {&(0x7f0000000080)=[{0x5, 0x1, {r5}, 0xfff}, {0x3, 0x9, {r8}, 0x4}]}, 0xfffffff7, 0x0, r5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0xc47, 0x4, 0x800, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x3}, 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB="17000100", @ANYRES16=r9, @ANYBLOB="a1ab000000000000000032000000080017010000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.602029448s ago: executing program 3 (id=2272): syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fff000/0x1000)=nil) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001362564aa25b9a64411f6bbf44dc48f57", 0x39}], 0x1) 1.531397233s ago: executing program 3 (id=2273): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x2fc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x258, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa68c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x22c, 0x6, [@m_ife={0x1b0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x141, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xb2e, 0x6, 0xffffffff, 0x8}, 0xf}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2fc}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupwid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x3, 0xa, 0x0, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x91, &(0x7f0000000880)=""/145, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@map=0x1, 0x6, 0x0, 0xc, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000780)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r4, r8, 0x54, 0x4, 0x0, @prog_fd=r9, r10}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r11, 0x0, 0x1000002, 0x0) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 1.44147713s ago: executing program 1 (id=2274): r0 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x48044) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000f1f81999ce6709000000000000008e0000c21ab998867a448956eb08bc796bda7f6051d63a36", @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x30, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) 1.330598647s ago: executing program 1 (id=2275): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40046629, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4fecd2fce2d54fbd909e4"}}) 1.051825607s ago: executing program 0 (id=2276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 672.322766ms ago: executing program 3 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7fffffff, 0x531, 0x7fffffffffffffff, 0x12, 0xfffffffffffffffd, 0x700, 0x6, 0x4}, &(0x7f0000000080)={0xffffffffd57ca58e, 0x7, 0x11fa, 0x3, 0x48a0, 0x9, 0x100, 0x6}, &(0x7f00000000c0)={0x7, 0xff, 0x7, 0x80, 0x9, 0xb, 0x6, 0x1}, &(0x7f0000000100), &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x5, 0x44, 0x4, "f3"}]}}}}}}}}, 0x0) 643.838051ms ago: executing program 3 (id=2278): syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x6, 0x4, 0x7fc}, 0x48) socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x20) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) (fail_nth: 4) 441.997551ms ago: executing program 3 (id=2279): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x47, &(0x7f0000002240)=[{&(0x7f0000000940)=""/4098, 0x1002}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x22) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042c111ec80000000000000000009f9a0a530437dd49d554bc912e628c0008000400"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0x208e24b) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'team0\x00', &(0x7f0000000000)=@ethtool_dump={0x3e, 0x7}}) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') lseek(r4, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000ac0)={[0x5, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924, 0x31], 0x2, 0x1028c1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c800de00da000100100c0400050008000300080003000c00000006000531140003000c00bc0004090400000024020000780501001103020000010402"], 0xe3) socket$inet6(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817aaaaaaaaaab44d140a"], 0x1a) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f00000000c0)=0x1) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000001c0)=""/2) socket$inet_dccp(0x2, 0x6, 0x0) 371.753943ms ago: executing program 2 (id=2280): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x1e}, './file0\x00'}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r1, &(0x7f0000000240)='attr/fscreate\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) 359.218946ms ago: executing program 1 (id=2281): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 260.822864ms ago: executing program 1 (id=2282): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000001140)=0x100, 0x4) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000040)=0xffffffe1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="10000000000000000000ed7fb868e25abad55c5cf170132928c5f17819a82181584af633f70b1f4e37410ee284ec6791e001adf8bc7bba03c77eca31f0bb3bd963fb445ed19795d488fde97ad2e807db793e0a4602c3d497e6cfd663109615cd992ea700b0d4a9a5e0584aa9cfd8e4c6305f0b57e765a9f44ec3d56990466b50c1184ea010b295686cdef6b74c1fbc25dfb5025353ceee1d0f53c97c61e84ef51bc4df0a3648acdd808b93a8f0cd608b898980"], 0x10}}], 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000001140)=0x100, 0x4) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004480)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000000100)="966e2de80f14a3f25b0c2b657d8e1cf5e86c2cdd84a3f1af50e133423c8629b12448eb44cce0796161693c7d10a1a0", 0x2f}, {&(0x7f0000000200)="dc827be4ea5bf9b2c97d4afb9ca2961de05ade98159c088f6d81561219574c2608b27533df8ae46185eb3bd8cfd6bbe1a3c5b51e1b074f9517bf315708c68a46ebc1bfc81d596e3acc964d4f0a721f3123d4d5279bd53e3ae3e9cc3ff85bdc5672fc803e2c058a27929c140bb4f9b6131a9339236152179b40716b8c5579ec75671311243bc52f55437e7fd71e05bd3648358ee38508", 0x96}, {&(0x7f00000002c0)="3b1d2d83fe22f064a632b98e9389634abfbc526cf5c8f42d57cc2118db47f89591c3efedd9800746d1af61786edcf3aec83ec928c8b1739f7c86ee2894ee342d42204c5964a89a23cb9f29336b80b7a8c8e0b0a683348ba6e6a4c19587d0bbbd20182f471ae56d3f877ffcadb77966a6616d1045c814dfe04af8a5bcdc438e2d52781891f99377cebfe024bb62aa963a10d6c9e738b317a44617b1c6e31545c49738e597be1759218c09b2be2bbc45a98217", 0xb2}, {&(0x7f00000036c0)="9f754733818bb98a7b4c86834f5f842a", 0x10}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {0x0}, {&(0x7f00000033c0)="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", 0xfc}, {&(0x7f00000034c0)="7295a4a240bbdf938b6e3c4cc9169847cb84ed06e847a9f155b017f4ee98850bee5a4d9f058aaa8c9574415f0a19d0dfd122fb0b1b494377ae7160c6236104e5fb80eef19714ca71ddc961e9bda2f324c180ae41652698d547082db7cec0e64b51c81636e3dcac7720c71fcca5e7dc066861eb0178a988ebe6b0b1971e3ca1b5710315391321749fc052dc577c70918d44aa03d76b8a611d7e869f25d95f599fbc55bf4ba457495fa77fe893391391a82d427b6d3d20a3ceed7d7189bc460825337a7b61c7809a41f5", 0xc9}, {&(0x7f00000035c0)="5e0867eb7ef5cb2087d1c731279e489ebbc0af9694253cfefbf903b2b78e43ba804a4b4f01e19b7f8cce9889b728da46fb21405fc7fdc3fdfb682deb", 0x3c}], 0xa, 0x0, 0x0, 0x80}}, {{&(0x7f0000003780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003900)=[{&(0x7f0000003bc0)="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", 0x105}, {0x0}], 0x2, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x60, 0x40081}}, {{&(0x7f00000026c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003ec0), 0x0, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x40408c1}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004000)="37df4869315e0f9a3d0b8eeef04a330b24d06a8953ab195048ac2eac85b4e04af93cf5b1d9e1f87868a71e48ee207e63b8cb409cdacccd434b5be4f19e9bebb03052736b611ca8845bdfd09d8fc70049ac16ee44093e2a109346240a167922f9adb42719499fde0f6019b5ff72e0aa9d1fdfb617981c491b3fff887ee1ba190f4810817769645f1d2c668ada3b28c6f9e4a5d25359928a3d276e61fd33c4d46c2db711e22bf65d7b19ad1678ac5749fea9374aaf2e7bfa20763e535e131e41e3c807e456ee820080a6313283e35e611921d228a27183cfac8ba62a9b8488c8af8b55580ec9e0bb0327bb", 0xea}, {&(0x7f0000004100)}, {&(0x7f00000041c0)="be94f1198c0b443b62686453c18465fb24e8662f72185d8e833bb99cc293719435a90ca8238f79450c6de5c10f0ddd8805000000f58a02dc3964952a04b2e5d05530ab6e0376c892e268dba572502f6fcc7b3b43b2c66b58d3991257b582fc2717376bac5483ecbcc8a6aa0fc657eb0657acd017534ed64cb1daacb91408a1f4e0f589f73e2f0f98bddbb37f6a0803c1290730a5e782b04ac89bf67f2016", 0x9e}, {&(0x7f0000004280)="fcd0ca07c4dcb8b571e383c6063c26c2970d5a8289f2", 0x16}, {&(0x7f00000042c0)="d2a23866e46061ef6eb0e8d9", 0xc}, {&(0x7f0000004300)="25c138", 0x3}], 0x6, &(0x7f00000029c0)=ANY=[@ANYBLOB="1c0000000000000000c16e09f5805cd715d195000000", @ANYRES32=0x0, @ANYBLOB="fcf2c79c728c33fe1b12ced93810b5c4f4e17610765fc4acdff79de6ecfce510e8650cc954f7d33ea53fa339a9ae2554d99bf714217a430ea2251cbe5754b6dbb13e03279def59a1c13531766f35803e38059bc02fb512b279adb87a23eac44f11153652f5b47639037517efadf6017bd39f4aed3cd512461f16cac7dd1b8c67ed80753a5fb35d0b98c9f87558c206abf0295d052b6609d535cb35faf1c17313fc0650d4234c58583f97d7d9109da181d864889a81a19f90c6ee874896e9156d2ffd4744692266", @ANYRES32=0xee00, @ANYBLOB="000000001c01000000010059da7d752ba4bb8dba", @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r5, @ANYRES64=r3, @ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="28000000000000006b12dc6601080000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5], 0xb0, 0x4000044}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000024c0)="e269c8f0854855231d656236ac6a3ee946a14f97e681073ededac91041a70e0b52ad1f50100c2e31b8adad8a8f08b8e92907d6b687a6cbd556d6725782c403f25de975fe64dd9015c06946c89f9f75f796f479daecb8df61b1d1fb1ed9fa16c68d58324a37b286af50a0dae7188b64be48c21dfca18981ca9e82ff0129c26b29e436dd992ecc15ab1388ec3798c2953855906cd6ea63aae87998f0e89676845a084018bfaa90082a95e6b2056dc942f94570697e55a46485", 0xb8}, {&(0x7f0000002580)="258977c42f53c6e2673f22887d1b07026b17ca21ec6579d20c95221710d835e18b3609cf7a4c9fa492907e66d58ce447599dff26ff5414ffc4808b568b99bdf3e5813a7b22634992f1d945102cf369a0c8683fd61f925fdef39540d51058d17ba7d23b921e4b40171a5ee273ceda5067fc0f5cb9dce48bbdd41404eda4412f0c72366e0055cf1604bcc66f0cd79faacd45962703a62c06989a523e78882ae1e489d741c491b5ed482fb59df7e2884fc155bf9a30473cfc8eb38870b821707f55ed9991381d396cade24cb29eb81c9436753b2c378219912ddf14026c5f994f5eff7db7d9", 0xe4}, {&(0x7f0000000380)="acf93dd7e32022d94b4df42f3f7dd061031e6a9ab96530c04cbbdaa39477f33632dd9152aab559e2893d7dc80e9b08636384e8", 0x33}], 0x3, 0x0, 0x0, 0xc010}}], 0x5, 0x4c0c0) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x7, 0x0) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) write(r7, &(0x7f0000000140)='i', 0x1) read(r6, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 175.226422ms ago: executing program 2 (id=2283): r0 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x48044) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000f1f81999ce6709000000000000008e0000c21ab998867a448956eb08bc796bda7f6051d63a36", @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x30, 0x18, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) 72.078931ms ago: executing program 2 (id=2284): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000001140)=0x100, 0x4) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000040)=0xffffffe1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="10000000000000000000ed7fb868e25abad55c5cf170132928c5f17819a82181584af633f70b1f4e37410ee284ec6791e001adf8bc7bba03c77eca31f0bb3bd963fb445ed19795d488fde97ad2e807db793e0a4602c3d497e6cfd663109615cd992ea700b0d4a9a5e0584aa9cfd8e4c6305f0b57e765a9f44ec3d56990466b50c1184ea010b295686cdef6b74c1fbc25dfb5025353ceee1d0f53c97c61e84ef51bc4df0a3648acdd808b93a8f0cd608b898980"], 0x10}}], 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000001140)=0x100, 0x4) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004480)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000000100)="966e2de80f14a3f25b0c2b657d8e1cf5e86c2cdd84a3f1af50e133423c8629b12448eb44cce0796161693c7d10a1a0", 0x2f}, {&(0x7f0000000200)="dc827be4ea5bf9b2c97d4afb9ca2961de05ade98159c088f6d81561219574c2608b27533df8ae46185eb3bd8cfd6bbe1a3c5b51e1b074f9517bf315708c68a46ebc1bfc81d596e3acc964d4f0a721f3123d4d5279bd53e3ae3e9cc3ff85bdc5672fc803e2c058a27929c140bb4f9b6131a9339236152179b40716b8c5579ec75671311243bc52f55437e7fd71e05bd3648358ee38508", 0x96}, {&(0x7f00000002c0)="3b1d2d83fe22f064a632b98e9389634abfbc526cf5c8f42d57cc2118db47f89591c3efedd9800746d1af61786edcf3aec83ec928c8b1739f7c86ee2894ee342d42204c5964a89a23cb9f29336b80b7a8c8e0b0a683348ba6e6a4c19587d0bbbd20182f471ae56d3f877ffcadb77966a6616d1045c814dfe04af8a5bcdc438e2d52781891f99377cebfe024bb62aa963a10d6c9e738b317a44617b1c6e31545c49738e597be1759218c09b2be2bbc45a98217", 0xb2}, {&(0x7f00000036c0)="9f754733818bb98a7b4c86834f5f842a", 0x10}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {0x0}, {&(0x7f00000033c0)="92b34729cf9ba82c46abebe502bd831dbc86ab95347e491ad959fbb2110f1757787b2a5b66444925085bd31a5d2fd60f8ee366016d84646a0964ef2b62491285f1efb896e1b1031eae559588d8d931bf6409c1699bfd918085ec8d83bb0445218311f9cf25f1febd55a72906441319c441eb6f2739b65621198047145314e0f532155db28a424137950e0508a6735803bcbbd5c661b2ad5eec7feab0f0697686103432be4b7015be7e022f02e7bf66f39c3cd6a636349982f36a21ef453fd2f851291ebb3b8616c68f089b5a6e796fb591879ee27839dcaee88632d761061e476afa5b45a8c7eea8b49804c6a03fca7d76075dc067c8ac90a3284910", 0xfc}, {&(0x7f00000034c0)="7295a4a240bbdf938b6e3c4cc9169847cb84ed06e847a9f155b017f4ee98850bee5a4d9f058aaa8c9574415f0a19d0dfd122fb0b1b494377ae7160c6236104e5fb80eef19714ca71ddc961e9bda2f324c180ae41652698d547082db7cec0e64b51c81636e3dcac7720c71fcca5e7dc066861eb0178a988ebe6b0b1971e3ca1b5710315391321749fc052dc577c70918d44aa03d76b8a611d7e869f25d95f599fbc55bf4ba457495fa77fe893391391a82d427b6d3d20a3ceed7d7189bc460825337a7b61c7809a41f5", 0xc9}, {&(0x7f00000035c0)="5e0867eb7ef5cb2087d1c731279e489ebbc0af9694253cfefbf903b2b78e43ba804a4b4f01e19b7f8cce9889b728da46fb21405fc7fdc3fdfb682deb", 0x3c}], 0xa, 0x0, 0x0, 0x80}}, {{&(0x7f0000003780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003900)=[{&(0x7f0000003bc0)="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", 0x105}, {0x0}], 0x2, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x60, 0x40081}}, {{&(0x7f00000026c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003ec0), 0x0, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x40408c1}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004000)="37df4869315e0f9a3d0b8eeef04a330b24d06a8953ab195048ac2eac85b4e04af93cf5b1d9e1f87868a71e48ee207e63b8cb409cdacccd434b5be4f19e9bebb03052736b611ca8845bdfd09d8fc70049ac16ee44093e2a109346240a167922f9adb42719499fde0f6019b5ff72e0aa9d1fdfb617981c491b3fff887ee1ba190f4810817769645f1d2c668ada3b28c6f9e4a5d25359928a3d276e61fd33c4d46c2db711e22bf65d7b19ad1678ac5749fea9374aaf2e7bfa20763e535e131e41e3c807e456ee820080a6313283e35e611921d228a27183cfac8ba62a9b8488c8af8b55580ec9e0bb0327bb", 0xea}, {&(0x7f0000004100)}, {&(0x7f00000041c0)="be94f1198c0b443b62686453c18465fb24e8662f72185d8e833bb99cc293719435a90ca8238f79450c6de5c10f0ddd8805000000f58a02dc3964952a04b2e5d05530ab6e0376c892e268dba572502f6fcc7b3b43b2c66b58d3991257b582fc2717376bac5483ecbcc8a6aa0fc657eb0657acd017534ed64cb1daacb91408a1f4e0f589f73e2f0f98bddbb37f6a0803c1290730a5e782b04ac89bf67f2016", 0x9e}, {&(0x7f0000004280)="fcd0ca07c4dcb8b571e383c6063c26c2970d5a8289f2", 0x16}, {&(0x7f00000042c0)="d2a23866e46061ef6eb0e8d9", 0xc}, {&(0x7f0000004300)="25c138", 0x3}], 0x6, &(0x7f00000029c0)=ANY=[@ANYBLOB="1c0000000000000000c16e09f5805cd715d195000000", @ANYRES32=0x0, @ANYBLOB="fcf2c79c728c33fe1b12ced93810b5c4f4e17610765fc4acdff79de6ecfce510e8650cc954f7d33ea53fa339a9ae2554d99bf714217a430ea2251cbe5754b6dbb13e03279def59a1c13531766f35803e38059bc02fb512b279adb87a23eac44f11153652f5b47639037517efadf6017bd39f4aed3cd512461f16cac7dd1b8c67ed80753a5fb35d0b98c9f87558c206abf0295d052b6609d535cb35faf1c17313fc0650d4234c58583f97d7d9109da181d864889a81a19f90c6ee874896e9156d2ffd4744692266", @ANYRES32=0xee00, @ANYBLOB="000000001c01000000010059da7d752ba4bb8dba", @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r5, @ANYRES64=r3, @ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="28000000000000006b12dc6601080000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5], 0xb0, 0x4000044}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000024c0)="e269c8f0854855231d656236ac6a3ee946a14f97e681073ededac91041a70e0b52ad1f50100c2e31b8adad8a8f08b8e92907d6b687a6cbd556d6725782c403f25de975fe64dd9015c06946c89f9f75f796f479daecb8df61b1d1fb1ed9fa16c68d58324a37b286af50a0dae7188b64be48c21dfca18981ca9e82ff0129c26b29e436dd992ecc15ab1388ec3798c2953855906cd6ea63aae87998f0e89676845a084018bfaa90082a95e6b2056dc942f94570697e55a46485", 0xb8}, {&(0x7f0000002580)="258977c42f53c6e2673f22887d1b07026b17ca21ec6579d20c95221710d835e18b3609cf7a4c9fa492907e66d58ce447599dff26ff5414ffc4808b568b99bdf3e5813a7b22634992f1d945102cf369a0c8683fd61f925fdef39540d51058d17ba7d23b921e4b40171a5ee273ceda5067fc0f5cb9dce48bbdd41404eda4412f0c72366e0055cf1604bcc66f0cd79faacd45962703a62c06989a523e78882ae1e489d741c491b5ed482fb59df7e2884fc155bf9a30473cfc8eb38870b821707f55ed9991381d396cade24cb29eb81c9436753b2c378219912ddf14026c5f994f5eff7db7d9", 0xe4}, {&(0x7f0000000380)="acf93dd7e32022d94b4df42f3f7dd061031e6a9ab96530c04cbbdaa39477f33632dd9152aab559e2893d7dc80e9b08636384e8", 0x33}], 0x3, 0x0, 0x0, 0xc010}}], 0x5, 0x4c0c0) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x7, 0x0) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) write(r7, &(0x7f0000000140)='i', 0x1) read(r6, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 71.570078ms ago: executing program 0 (id=2285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x2fc, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x258, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa68c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x22c, 0x6, [@m_ife={0x1b0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x141, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xb2e, 0x6, 0xffffffff, 0x8}, 0xf}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x2fc}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000400), 0x0, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groupwid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb02, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x3, 0xa, 0x0, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x7f, 0x91, &(0x7f0000000880)=""/145, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x7, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@map=0x1, 0x6, 0x0, 0xc, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000780)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@cgroup=r4, r8, 0x54, 0x4, 0x0, @prog_fd=r9, r10}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r3, 0x3, r1, 0x6}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r11, 0x0, 0x1000002, 0x0) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=2286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r4 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) mount(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000340)='proc\x00', 0x1002, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchdir(r5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x5392, &(0x7f0000000200)=ANY=[]) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0xfff, 0x1, 0x4, 0x2000, 0x6, {r6, r7/1000+10000}, {0x1, 0x1, 0x3, 0x0, 0x0, 0x1, "161e02a1"}, 0x100, 0x4, {&(0x7f0000000080)=[{0x5, 0x1, {r5}, 0xfff}, {0x3, 0x9, {r8}, 0x4}]}, 0xfffffff7, 0x0, r5}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0xc47, 0x4, 0x800, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x3}, 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB="17000100", @ANYRES16=r9, @ANYBLOB="a1ab000000000000000032000000080017010000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) kernel console output (not intermixed with test programs): face 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 204.003705][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 204.008059][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.013623][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.017593][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.229855][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 204.232462][ T10] usbtmc 5-1:16.0: can't read capabilities [ 204.273871][T10520] netlink: 'syz.3.1484': attribute type 4 has an invalid length. [ 204.412710][T10527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1486'. [ 204.955053][ T5206] Bluetooth: hci1: command tx timeout [ 204.983523][ T39] audit: type=1400 audit(1721092307.080:557): avc: denied { ioctl } for pid=10541 comm="syz.2.1490" path="socket:[40159]" dev="sockfs" ino=40159 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.018662][T10547] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1492'. [ 205.034064][ T39] audit: type=1400 audit(1721092307.130:558): avc: denied { write } for pid=10541 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 205.130194][ T5206] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 205.775354][ T39] audit: type=1400 audit(1721092307.880:559): avc: denied { ioctl } for pid=10563 comm="syz.3.1498" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.854988][ T39] audit: type=1400 audit(1721092307.950:560): avc: denied { getopt } for pid=10565 comm="syz.0.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.998599][ T39] audit: type=1400 audit(1721092308.100:561): avc: denied { create } for pid=10574 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.015026][ T39] audit: type=1400 audit(1721092308.110:562): avc: denied { ioctl } for pid=10574 comm="syz.1.1501" path="socket:[41120]" dev="sockfs" ino=41120 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.064892][ T5206] Bluetooth: hci0: command 0x040f tx timeout [ 206.075079][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.184928][ T5252] libceph: connect (1)[c::]:6789 error -101 [ 206.187796][ T5252] libceph: mon0 (1)[c::]:6789 connect error [ 206.457827][ T5252] libceph: connect (1)[c::]:6789 error -101 [ 206.460698][ T5252] libceph: mon0 (1)[c::]:6789 connect error [ 206.602888][T10589] 9p: Unknown access argument useÓ²Ånivport: -22 [ 206.606388][T10589] 9p: Unknown access argument KvšÐ(+ÇøÏý¨·^÷eDÔà÷¸ï“åˆl6ú‡T~¿¬üåÐEäZA|×¢ œÈ/­¥›çÆ$#B n­EÐUñ0§ÈrÞ"—;ºY]<¯&ÍàޱΠÞ: -22 [ 206.798586][T10577] ceph: No mds server is up or the cluster is laggy [ 207.024980][ T65] Bluetooth: hci1: command tx timeout [ 207.105480][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 207.440830][T10612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1510'. [ 207.696915][T10621] autofs4:pid:10621:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 207.756222][ T39] audit: type=1400 audit(1721092309.860:563): avc: denied { write } for pid=10620 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.935751][ T5206] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 208.938247][ T5206] Bluetooth: Wrong link type (-22) [ 208.940332][ T5206] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 208.942871][ T5206] Bluetooth: Wrong link type (-22) [ 208.945679][ T5206] Bluetooth: Wrong link type (-71) [ 209.321536][T10656] autofs4:pid:10656:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 209.489247][T10661] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 209.543188][T10665] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1527'. [ 209.646903][T10672] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 209.649815][T10672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 209.653418][T10672] vhci_hcd vhci_hcd.0: Device attached [ 209.665426][ T5206] Bluetooth: hci0: command 0x040f tx timeout [ 209.668270][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 209.676574][T10674] vhci_hcd: connection closed [ 209.682255][ T1130] vhci_hcd: stop threads [ 209.685807][ T1130] vhci_hcd: release socket [ 209.687743][ T1130] vhci_hcd: disconnect device [ 210.537774][T10697] netlink: 'syz.3.1535': attribute type 4 has an invalid length. [ 210.909920][T10704] "syz.0.1538" (10704) uses obsolete ecb(arc4) skcipher [ 211.835619][T10727] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 211.905084][ T5206] Bluetooth: hci0: command 0x040f tx timeout [ 211.906314][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 211.975233][ T65] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 211.978555][ T65] Bluetooth: Wrong link type (-22) [ 211.981301][ T65] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 211.985001][ T65] Bluetooth: Wrong link type (-22) [ 211.987408][ T65] Bluetooth: Wrong link type (-71) [ 212.163250][T10741] FAULT_INJECTION: forcing a failure. [ 212.163250][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 212.168656][T10741] CPU: 2 PID: 10741 Comm: syz.0.1548 Not tainted 6.10.0-syzkaller #0 [ 212.172118][T10741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.176463][T10741] Call Trace: [ 212.177674][T10741] [ 212.178919][T10741] dump_stack_lvl+0x16c/0x1f0 [ 212.181092][T10741] should_fail_ex+0x497/0x5b0 [ 212.183093][T10741] should_failslab+0x9/0x20 [ 212.185239][T10741] kmem_cache_alloc_node_noprof+0x71/0x310 [ 212.187365][T10741] ? __alloc_skb+0x2b1/0x380 [ 212.189214][T10741] __alloc_skb+0x2b1/0x380 [ 212.191535][T10741] ? __pfx___alloc_skb+0x10/0x10 [ 212.193398][T10741] br_vlan_notify+0x15b/0x8c0 [ 212.195193][T10741] __br_vlan_set_default_pvid+0xf6f/0x1130 [ 212.197597][T10741] ? __kernel_text_address+0xd/0x40 [ 212.199368][T10741] ? __pfx___br_vlan_set_default_pvid+0x10/0x10 [ 212.202004][T10741] ? __nla_validate_parse+0x601/0x2880 [ 212.204167][T10741] br_changelink+0x505/0x1770 [ 212.205969][T10741] ? __pfx_br_changelink+0x10/0x10 [ 212.208248][T10741] ? __pfx_stack_trace_save+0x10/0x10 [ 212.210616][T10741] ? stack_depot_save_flags+0x28/0x8f0 [ 212.212898][T10741] ? find_held_lock+0x2d/0x110 [ 212.214977][T10741] ? __nla_parse+0x40/0x60 [ 212.217223][T10741] ? __pfx_br_changelink+0x10/0x10 [ 212.219471][T10741] __rtnl_newlink+0xb58/0x1960 [ 212.221756][T10741] ? __pfx___rtnl_newlink+0x10/0x10 [ 212.224187][T10741] rtnl_newlink+0x67/0xa0 [ 212.226182][T10741] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.228491][T10741] rtnetlink_rcv_msg+0x3c7/0xea0 [ 212.230636][T10741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.232975][T10741] ? lock_acquire+0x1b1/0x560 [ 212.234890][T10741] netlink_rcv_skb+0x16b/0x440 [ 212.237126][T10741] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.239597][T10741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.241970][T10741] ? rcu_is_watching+0x12/0xc0 [ 212.244082][T10741] netlink_unicast+0x542/0x820 [ 212.246210][T10741] ? __pfx_netlink_unicast+0x10/0x10 [ 212.248589][T10741] netlink_sendmsg+0x8b8/0xd70 [ 212.250676][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.252917][T10741] ? __import_iovec+0x1fd/0x6e0 [ 212.254946][T10741] ____sys_sendmsg+0xab5/0xc90 [ 212.256911][T10741] ? copy_msghdr_from_user+0x10b/0x160 [ 212.258978][T10741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.261241][T10741] ? find_held_lock+0x2d/0x110 [ 212.263390][T10741] ? __pfx___lock_acquire+0x10/0x10 [ 212.265410][T10741] ___sys_sendmsg+0x135/0x1e0 [ 212.267311][T10741] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.269464][T10741] ? ksys_write+0x21c/0x260 [ 212.271541][T10741] ? __fget_light+0x173/0x210 [ 212.273303][T10741] __sys_sendmsg+0x117/0x1f0 [ 212.275092][T10741] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.277096][T10741] do_syscall_64+0xcd/0x250 [ 212.278778][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.281174][T10741] RIP: 0033:0x7f5938175bd9 [ 212.283106][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.290332][T10741] RSP: 002b:00007f5938fb9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.293884][T10741] RAX: ffffffffffffffda RBX: 00007f5938303f60 RCX: 00007f5938175bd9 [ 212.296651][T10741] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 212.299398][T10741] RBP: 00007f5938fb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.302864][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.306327][T10741] R13: 000000000000000b R14: 00007f5938303f60 R15: 00007ffe3d995318 [ 212.309375][T10741] [ 212.362507][ T39] audit: type=1400 audit(1721092314.460:564): avc: denied { read } for pid=10742 comm="syz.0.1549" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.391560][ T39] audit: type=1400 audit(1721092314.460:565): avc: denied { open } for pid=10742 comm="syz.0.1549" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 212.444362][T10747] binder: 10746:10747 ioctl 8933 200001c0 returned -22 [ 212.466513][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 212.481102][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 212.492234][T10748] geneve2: entered promiscuous mode [ 212.780772][T10754] VFS: could not find a valid V7 on nullb0. [ 213.053758][T10767] netlink: 'syz.0.1555': attribute type 4 has an invalid length. [ 213.217836][T10774] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1558'. [ 213.832741][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.199498][T10801] FAULT_INJECTION: forcing a failure. [ 214.199498][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 214.205670][T10801] CPU: 3 PID: 10801 Comm: syz.0.1564 Not tainted 6.10.0-syzkaller #0 [ 214.209132][T10801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.213678][T10801] Call Trace: [ 214.215158][T10801] [ 214.216468][T10801] dump_stack_lvl+0x16c/0x1f0 [ 214.218540][T10801] should_fail_ex+0x497/0x5b0 [ 214.220597][T10801] should_failslab+0x9/0x20 [ 214.222556][T10801] __kmalloc_node_noprof+0xd5/0x440 [ 214.224786][T10801] ? qdisc_alloc+0xb3/0xbd0 [ 214.226807][T10801] qdisc_alloc+0xb3/0xbd0 [ 214.228657][T10801] qdisc_create_dflt+0x73/0x440 [ 214.230738][T10801] taprio_init+0x4b4/0x940 [ 214.232627][T10801] ? __pfx_taprio_init+0x10/0x10 [ 214.234753][T10801] ? __pfx_taprio_init+0x10/0x10 [ 214.236868][T10801] qdisc_create+0x4f3/0x1100 [ 214.238855][T10801] ? lock_acquire+0x1b1/0x560 [ 214.240916][T10801] ? __pfx_qdisc_create+0x10/0x10 [ 214.243092][T10801] tc_modify_qdisc+0x4d8/0x1c40 [ 214.245222][T10801] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 214.247531][T10801] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 214.249754][T10801] rtnetlink_rcv_msg+0x3c7/0xea0 [ 214.251767][T10801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.254033][T10801] netlink_rcv_skb+0x16b/0x440 [ 214.255990][T10801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.258227][T10801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.260415][T10801] ? netlink_deliver_tap+0x1ae/0xd90 [ 214.262593][T10801] netlink_unicast+0x542/0x820 [ 214.264613][T10801] ? __pfx_netlink_unicast+0x10/0x10 [ 214.266902][T10801] netlink_sendmsg+0x8b8/0xd70 [ 214.268930][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.271228][T10801] ? __import_iovec+0x1fd/0x6e0 [ 214.273479][T10801] ____sys_sendmsg+0xab5/0xc90 [ 214.275513][T10801] ? copy_msghdr_from_user+0x10b/0x160 [ 214.277843][T10801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.280083][T10801] ? find_held_lock+0x2d/0x110 [ 214.282155][T10801] ? __pfx___lock_acquire+0x10/0x10 [ 214.284397][T10801] ___sys_sendmsg+0x135/0x1e0 [ 214.286449][T10801] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.288737][T10801] ? ksys_write+0x21c/0x260 [ 214.290722][T10801] ? __fget_light+0x173/0x210 [ 214.292777][T10801] __sys_sendmsg+0x117/0x1f0 [ 214.294795][T10801] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.297071][T10801] do_syscall_64+0xcd/0x250 [ 214.299086][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.301697][T10801] RIP: 0033:0x7f5938175bd9 [ 214.303453][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.311311][T10801] RSP: 002b:00007f5938fb9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.314882][T10801] RAX: ffffffffffffffda RBX: 00007f5938303f60 RCX: 00007f5938175bd9 [ 214.318330][T10801] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 214.321703][T10801] RBP: 00007f5938fb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.325143][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.328596][T10801] R13: 000000000000000b R14: 00007f5938303f60 R15: 00007ffe3d995318 [ 214.332089][T10801] [ 214.442129][T10806] autofs4:pid:10806:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 214.558379][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1569'. [ 214.558420][ T39] audit: type=1400 audit(1721092316.660:566): avc: denied { write } for pid=10815 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.571988][ T39] audit: type=1400 audit(1721092316.660:567): avc: denied { nlmsg_write } for pid=10815 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.583027][ T39] audit: type=1400 audit(1721092316.670:568): avc: denied { setopt } for pid=10815 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 214.592741][ T39] audit: type=1400 audit(1721092316.670:569): avc: denied { getopt } for pid=10815 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.642270][ T39] audit: type=1400 audit(1721092316.740:570): avc: denied { listen } for pid=10815 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.675401][T10822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1571'. [ 214.806168][T10827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.806760][ T39] audit: type=1400 audit(1721092316.910:571): avc: denied { ioctl } for pid=10827 comm="syz.2.1573" path="socket:[41388]" dev="sockfs" ino=41388 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.004923][ T55] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 215.165331][ T55] usb 6-1: device descriptor read/64, error -71 [ 215.435913][ T5206] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 215.449513][ T55] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 215.498767][T10839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.596149][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 215.596304][ T5206] Bluetooth: hci0: command 0x040f tx timeout [ 215.597127][ T55] usb 6-1: device descriptor read/64, error -71 [ 215.658870][T10843] autofs4:pid:10843:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 215.726179][ T55] usb usb6-port1: attempt power cycle [ 215.781794][T10845] input: syz1 as /devices/virtual/input/input17 [ 216.145194][ T55] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 216.187785][ T55] usb 6-1: device descriptor read/8, error -71 [ 216.455076][ T55] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 216.485836][ T55] usb 6-1: device descriptor read/8, error -71 [ 216.608211][ T55] usb usb6-port1: unable to enumerate USB device [ 216.935732][T10861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1585'. [ 217.101324][T10865] EXT4-fs warning (device sda1): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 217.801565][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1590'. [ 217.962558][T10884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1594'. [ 217.998249][ T65] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 218.001694][ T65] Bluetooth: Wrong link type (-22) [ 218.004133][ T65] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 218.009291][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 218.010841][ T65] Bluetooth: Wrong link type (-22) [ 218.015901][ T65] Bluetooth: Wrong link type (-71) [ 218.046061][T10890] syz.1.1595 (10890) used greatest stack depth: 21104 bytes left [ 218.588970][T10910] netlink: 'syz.1.1603': attribute type 4 has an invalid length. [ 218.731064][ T39] audit: type=1400 audit(1721092320.830:572): avc: denied { bind } for pid=10917 comm="syz.1.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 219.049110][T10941] netlink: 'syz.3.1612': attribute type 4 has an invalid length. [ 219.185297][ T5206] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 219.185407][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 219.330679][T10955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1616'. [ 219.850372][T10970] autofs4:pid:10970:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 220.152011][T10982] 9pnet_fd: Insufficient options for proto=fd [ 220.233026][T10986] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.625699][ T5251] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 220.676319][T11001] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1632'. [ 220.689313][ T39] audit: type=1326 audit(1721092322.780:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.2.1631" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fada9775bd9 code=0x0 [ 220.834812][ T5251] usb 8-1: Using ep0 maxpacket: 32 [ 220.838515][ T5251] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.843036][ T5251] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.850911][ T5251] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 220.854924][ T5251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.858396][ T5251] usb 8-1: Product: syz [ 220.860284][ T5251] usb 8-1: Manufacturer: syz [ 220.862590][ T5251] usb 8-1: SerialNumber: syz [ 221.073748][ T5251] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 221.273842][T11012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1634'. [ 221.331668][ T5251] usb 8-1: USB disconnect, device number 5 [ 221.339351][ T5251] usblp1: removed [ 221.420448][T11018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1635'. [ 221.585480][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 221.595340][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 221.788420][T11025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.109942][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1641'. [ 222.302230][T11040] x_tables: duplicate underflow at hook 2 [ 222.573947][ T5194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.585833][ T5194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.589680][ T5194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.605033][ T5194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.618186][ T5194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.632136][ T5194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.669060][T11055] netlink: 'syz.0.1646': attribute type 4 has an invalid length. [ 222.722074][T11062] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 222.726093][T11062] netlink: 9364 bytes leftover after parsing attributes in process `syz.0.1649'. [ 222.732569][T11062] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 222.877147][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.931800][T11078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1653'. [ 222.970890][ T39] audit: type=1400 audit(1721092325.070:574): avc: denied { bind } for pid=11079 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.995585][ T39] audit: type=1400 audit(1721092325.100:575): avc: denied { execheap } for pid=11079 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 223.007971][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.089039][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.096852][T11087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1655'. [ 223.107321][T11049] chnl_net:caif_netlink_parms(): no params data found [ 223.171796][T11088] netlink: 'syz.2.1656': attribute type 4 has an invalid length. [ 223.196550][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.270536][T11049] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.273763][T11049] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.276477][T11049] bridge_slave_0: entered allmulticast mode [ 223.280491][T11049] bridge_slave_0: entered promiscuous mode [ 223.285900][T11049] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.288969][T11049] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.293356][T11049] bridge_slave_1: entered allmulticast mode [ 223.297364][T11049] bridge_slave_1: entered promiscuous mode [ 223.362124][ T5194] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 223.394211][T11049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.406217][T11049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.479013][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1659'. [ 223.552692][T11049] team0: Port device team_slave_0 added [ 223.559421][ T1092] bridge_slave_1: left allmulticast mode [ 223.561924][ T1092] bridge_slave_1: left promiscuous mode [ 223.564486][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.584531][ T1092] bridge_slave_0: left allmulticast mode [ 223.587876][ T1092] bridge_slave_0: left promiscuous mode [ 223.591242][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.664940][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.665128][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 224.096102][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.103844][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.110714][ T1092] bond0 (unregistering): Released all slaves [ 224.127044][T11049] team0: Port device team_slave_1 added [ 224.307914][T11049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.310129][T11049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.319185][T11049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.324695][T11049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.327584][T11049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.336717][T11049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.487333][T11049] hsr_slave_0: entered promiscuous mode [ 224.491341][T11049] hsr_slave_1: entered promiscuous mode [ 224.514963][T11124] netlink: 'syz.1.1664': attribute type 4 has an invalid length. [ 224.583503][T11131] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1665'. [ 224.602603][ T1092] hsr_slave_0: left promiscuous mode [ 224.612559][ T1092] hsr_slave_1: left promiscuous mode [ 224.616717][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.619855][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.642066][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.651022][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.704963][ T65] Bluetooth: hci1: command tx timeout [ 224.763110][ T1092] veth1_macvtap: left promiscuous mode [ 224.767476][ T1092] veth0_macvtap: left promiscuous mode [ 224.770174][ T1092] veth1_vlan: left promiscuous mode [ 224.772672][ T39] audit: type=1400 audit(1721092326.870:576): avc: denied { write } for pid=11141 comm="syz.2.1668" name="ip_vs" dev="proc" ino=4026533860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 224.776976][T11145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1669'. [ 224.786848][ T1092] veth0_vlan: left promiscuous mode [ 225.264994][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 225.682752][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 225.745223][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 225.745244][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 225.778072][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 225.953447][ T65] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 226.584361][T11161] netlink: 'syz.0.1672': attribute type 4 has an invalid length. [ 226.742652][T11179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1675'. [ 226.784943][ T65] Bluetooth: hci1: command tx timeout [ 227.159958][T11049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.169811][T11049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.182969][T11049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.183708][T11198] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1678'. [ 227.192445][T11049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.287524][T11049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.305351][T11049] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.315555][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.318299][ T5793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.338862][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.341637][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.358302][ T39] audit: type=1400 audit(1721092329.460:577): avc: denied { sendto } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 227.361776][T11049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.372993][T11049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.498884][T11049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.540150][T11049] veth0_vlan: entered promiscuous mode [ 227.553598][T11049] veth1_vlan: entered promiscuous mode [ 227.582718][T11049] veth0_macvtap: entered promiscuous mode [ 227.590679][T11049] veth1_macvtap: entered promiscuous mode [ 227.606846][T11049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.611640][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.618330][T11049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.622892][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.630137][T11049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.634275][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.640435][T11049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.648344][T11049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.650361][ T5194] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 227.652262][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.652276][T11049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.662900][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.665616][ T5194] Bluetooth: Wrong link type (-22) [ 227.666877][T11049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.669153][ T5194] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 227.673253][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.678743][ T5194] Bluetooth: Wrong link type (-22) [ 227.681058][T11049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.681170][ T5194] Bluetooth: Wrong link type (-71) [ 227.687317][ T5194] Bluetooth: hci0: link tx timeout [ 227.689281][ T5194] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.691930][T11049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.696920][T11049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.700725][T11049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.704484][T11049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.784244][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.790910][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.825440][ T5194] Bluetooth: hci4: command 0x0406 tx timeout [ 227.836581][T10123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.842036][T10123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.866449][ T39] audit: type=1400 audit(1721092329.970:578): avc: denied { mount } for pid=11049 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 227.982230][T11223] befs: Unrecognized mount option "ß" or missing value [ 227.986570][T11223] befs: (nbd3): cannot parse mount options [ 228.073116][T11230] team_slave_0: entered allmulticast mode [ 228.079948][T11225] netlink: 'syz.2.1682': attribute type 4 has an invalid length. [ 228.455304][T11247] autofs4:pid:11247:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 228.875568][ T5194] Bluetooth: hci1: command tx timeout [ 229.025074][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 229.025446][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 229.117882][T11260] No control pipe specified [ 229.194011][T11263] netlink: 'syz.1.1693': attribute type 4 has an invalid length. [ 229.374018][ T5194] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 229.807839][T11282] befs: Unrecognized mount option "ß" or missing value [ 229.811457][T11282] befs: (nbd0): cannot parse mount options [ 229.998994][T11288] netlink: 'syz.3.1700': attribute type 2 has an invalid length. [ 230.002484][T11288] netlink: 'syz.3.1700': attribute type 11 has an invalid length. [ 230.006743][T11288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1700'. [ 230.076844][ T39] audit: type=1400 audit(1721092561.172:579): avc: denied { read } for pid=4671 comm="acpid" name="event9" dev="devtmpfs" ino=2528 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.085848][ T39] audit: type=1400 audit(1721092561.172:580): avc: denied { open } for pid=4671 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2528 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.096346][ T39] audit: type=1400 audit(1721092561.172:581): avc: denied { ioctl } for pid=4671 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2528 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 230.155074][ T5206] Bluetooth: hci4: command 0x0406 tx timeout [ 230.218036][T11302] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1704'. [ 230.221734][T11303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.682631][T11314] netlink: 'syz.1.1709': attribute type 19 has an invalid length. [ 230.735932][T11320] autofs4:pid:11320:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 230.760817][T11316] netlink: 'syz.0.1708': attribute type 4 has an invalid length. [ 230.779974][T11325] No control pipe specified [ 230.836230][ T39] audit: type=1326 audit(1721092561.938:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.0.1713" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5938175bd9 code=0x0 [ 230.852916][ T5194] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 230.945392][ T5194] Bluetooth: hci1: command tx timeout [ 230.952279][T11340] netlink: 'syz.3.1715': attribute type 4 has an invalid length. [ 231.104888][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 231.107310][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 231.195000][T11354] befs: Unrecognized mount option "ß" or missing value [ 231.198171][T11354] befs: (nbd3): cannot parse mount options [ 231.700385][ T39] audit: type=1326 audit(1721092562.856:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.2.1721" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fada9775bd9 code=0x0 [ 231.810689][ T39] audit: type=1400 audit(1721092562.966:584): avc: denied { connect } for pid=11365 comm="syz.1.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.822975][ T39] audit: type=1400 audit(1721092562.976:585): avc: denied { write } for pid=11365 comm="syz.1.1723" path="socket:[43873]" dev="sockfs" ino=43873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.881440][T11370] No control pipe specified [ 232.245041][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 232.322659][T11376] raw_sendmsg: syz.3.1726 forgot to set AF_INET. Fix it! [ 232.448055][T11380] FAULT_INJECTION: forcing a failure. [ 232.448055][T11380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.453729][T11380] CPU: 0 PID: 11380 Comm: syz.1.1727 Not tainted 6.10.0-syzkaller #0 [ 232.457234][T11380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.461943][T11380] Call Trace: [ 232.463452][T11380] [ 232.464804][T11380] dump_stack_lvl+0x16c/0x1f0 [ 232.466982][T11380] should_fail_ex+0x497/0x5b0 [ 232.469136][T11380] _copy_to_user+0x30/0xc0 [ 232.471137][T11380] simple_read_from_buffer+0xd0/0x160 [ 232.473493][T11380] proc_fail_nth_read+0x1b0/0x290 [ 232.475747][T11380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.478244][T11380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.480718][T11380] vfs_read+0x1d4/0xbd0 [ 232.482640][T11380] ? __fdget_pos+0xeb/0x180 [ 232.484680][T11380] ? __pfx_vfs_read+0x10/0x10 [ 232.486868][T11380] ? __pfx___mutex_lock+0x10/0x10 [ 232.489120][T11380] ? __fget_files+0x256/0x400 [ 232.491222][T11380] ksys_read+0x12f/0x260 [ 232.493114][T11380] ? __pfx_ksys_read+0x10/0x10 [ 232.495227][T11380] do_syscall_64+0xcd/0x250 [ 232.497251][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.499871][T11380] RIP: 0033:0x7fe233d746bc [ 232.501863][T11380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 232.510682][T11380] RSP: 002b:00007fe234b20040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.514102][T11380] RAX: ffffffffffffffda RBX: 00007fe233f03f60 RCX: 00007fe233d746bc [ 232.516766][T11380] RDX: 000000000000000f RSI: 00007fe234b200b0 RDI: 0000000000000004 [ 232.519772][T11380] RBP: 00007fe234b200a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.523045][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.526167][T11380] R13: 000000000000000b R14: 00007fe233f03f60 R15: 00007ffd7fe8a198 [ 232.529180][T11380] [ 232.636067][T11384] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 232.641174][ T39] audit: type=1326 audit(1721092563.796:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.1.1729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe233d75bd9 code=0x7ffc0000 [ 232.650945][ T39] audit: type=1326 audit(1721092563.796:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.1.1729" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe233d75bd9 code=0x7ffc0000 [ 232.660415][ T39] audit: type=1326 audit(1721092563.796:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11383 comm="syz.1.1729" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe233d75bd9 code=0x7ffc0000 [ 232.783411][T11401] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 233.185553][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 233.742938][T11438] netlink: 'syz.0.1743': attribute type 4 has an invalid length. [ 234.085307][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.239423][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.305065][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 234.354376][ T65] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 234.654171][T11477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1755'. [ 235.265524][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 235.268178][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 235.501396][T11502] autofs4:pid:11502:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 235.614245][T11505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1763'. [ 235.797805][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 235.797820][ T39] audit: type=1400 audit(1721092566.956:614): avc: denied { ioctl } for pid=11508 comm="syz.3.1764" path="socket:[45468]" dev="sockfs" ino=45468 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.104604][ T5194] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 236.108587][ T5194] Bluetooth: Wrong link type (-22) [ 236.111311][ T5194] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 236.114410][ T5194] Bluetooth: Wrong link type (-22) [ 236.116890][ T5194] Bluetooth: Wrong link type (-71) [ 236.145664][ T5194] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 236.149730][ T5194] Bluetooth: hci1: Injecting HCI hardware error event [ 236.153299][ T5194] Bluetooth: hci1: hardware error 0x00 [ 236.327374][T11530] autofs4:pid:11530:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 236.395370][ T5206] Bluetooth: hci4: command 0x0406 tx timeout [ 236.607736][ T5206] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 236.922283][T11540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1774'. [ 237.035229][T11547] netlink: 'syz.0.1776': attribute type 4 has an invalid length. [ 237.224354][T11557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1780'. [ 237.310819][T11554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11554 comm=syz.2.1779 [ 237.345429][ T5206] Bluetooth: hci0: command 0x040f tx timeout [ 237.348186][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 237.567509][ T5206] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 237.893213][T11585] netlink: 'syz.1.1785': attribute type 4 has an invalid length. [ 238.225296][ T5194] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 238.271641][T11595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 238.274365][T11595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 238.284972][T11595] vhci_hcd vhci_hcd.0: Device attached [ 238.312067][T11600] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1789'. [ 238.595051][ T824] usb 16-1: SetAddress Request (2) to port 0 [ 238.598871][ T824] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 238.828127][T11618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1793'. [ 239.077496][T11597] vhci_hcd: connection reset by peer [ 239.082738][ T1092] vhci_hcd: stop threads [ 239.090685][ T1092] vhci_hcd: release socket [ 239.098674][ T1092] vhci_hcd: disconnect device [ 239.288443][T11629] netlink: 'syz.3.1794': attribute type 4 has an invalid length. [ 239.425224][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 239.427986][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.595133][ T65] Bluetooth: hci4: command 0x0406 tx timeout [ 239.615938][ T39] audit: type=1400 audit(1721092570.776:615): avc: denied { setattr } for pid=11640 comm="syz.1.1798" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 240.174869][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 240.318187][ T39] audit: type=1400 audit(1721092571.476:616): avc: denied { append } for pid=11663 comm="syz.0.1805" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.343992][T11664] input: syz0 as /devices/virtual/input/input20 [ 240.357000][ T10] usb 8-1: config index 0 descriptor too short (expected 9533, got 36) [ 240.360561][ T10] usb 8-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 240.374473][ T10] usb 8-1: config 161 has an invalid interface descriptor of length 7, skipping [ 240.378897][ T10] usb 8-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 240.383074][ T10] usb 8-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 240.388069][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 240.391632][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.441638][T11668] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 240.444426][T11668] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 240.448348][T11668] vhci_hcd vhci_hcd.0: Device attached [ 240.601368][ T10] usb 8-1: USB disconnect, device number 6 [ 240.625122][ T65] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 240.629181][ T65] Bluetooth: hci4: Injecting HCI hardware error event [ 240.635966][ T5194] Bluetooth: hci4: hardware error 0x00 [ 240.930046][ T5251] usb 14-1: SetAddress Request (2) to port 0 [ 240.932327][ T5251] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 241.251544][T11672] vhci_hcd: connection reset by peer [ 241.258132][ T1130] vhci_hcd: stop threads [ 241.261437][ T1130] vhci_hcd: release socket [ 241.263817][ T1130] vhci_hcd: disconnect device [ 241.344451][T11702] netlink: 'syz.2.1817': attribute type 4 has an invalid length. [ 241.505746][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 242.413904][ T39] audit: type=1400 audit(1721092573.566:617): avc: denied { bind } for pid=11748 comm="syz.3.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.616204][ T5273] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 242.708071][ T5194] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 242.795424][ T5273] usb 7-1: Using ep0 maxpacket: 8 [ 242.799807][ T5273] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 242.803304][ T5273] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.808009][ T5273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.812069][ T5273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.816729][ T5273] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.822243][ T5273] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.826663][ T5273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.921305][T11758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.045401][ T5273] usb 7-1: usb_control_msg returned -32 [ 243.048062][ T5273] usbtmc 7-1:16.0: can't read capabilities [ 243.593049][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 243.675371][ T824] usb 16-1: device descriptor read/8, error -110 [ 243.729226][ T5194] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 243.732145][ T5194] Bluetooth: Wrong link type (-22) [ 243.734534][ T5194] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 243.737819][ T5194] Bluetooth: Wrong link type (-22) [ 243.740287][ T5194] Bluetooth: Wrong link type (-71) [ 243.776843][ T39] audit: type=1400 audit(1721092574.936:618): avc: denied { mounton } for pid=11743 comm="syz.2.1829" path="/465/file0/bus" dev="ramfs" ino=45969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 243.777946][T11788] overlayfs: failed to resolve './file1': -2 [ 244.100654][ T824] usb usb16-port1: attempt power cycle [ 244.766367][ T824] usb usb16-port1: unable to enumerate USB device [ 244.888462][T11806] autofs4:pid:11806:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 245.032602][T11808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.096518][ T824] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 245.274857][ T824] usb 6-1: Using ep0 maxpacket: 8 [ 245.279277][ T824] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 245.282912][ T824] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.287070][ T824] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.290984][ T824] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.295666][ T824] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.300687][ T824] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.304290][ T824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.343524][ T8183] usb 7-1: USB disconnect, device number 5 [ 245.511633][ T824] usb 6-1: usb_control_msg returned -32 [ 245.514520][ T824] usbtmc 6-1:16.0: can't read capabilities [ 245.674951][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 245.984926][ T5251] usb 14-1: device descriptor read/8, error -110 [ 246.230315][T11835] overlayfs: failed to resolve './file1': -2 [ 246.234987][T11835] FAULT_INJECTION: forcing a failure. [ 246.234987][T11835] name failslab, interval 1, probability 0, space 0, times 0 [ 246.241655][T11835] CPU: 0 PID: 11835 Comm: syz.1.1846 Not tainted 6.10.0-syzkaller #0 [ 246.245264][T11835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.249789][T11835] Call Trace: [ 246.251197][T11835] [ 246.252509][T11835] dump_stack_lvl+0x16c/0x1f0 [ 246.254575][T11835] should_fail_ex+0x497/0x5b0 [ 246.256586][T11835] should_failslab+0x9/0x20 [ 246.258412][T11835] __kmalloc_noprof+0xcf/0x410 [ 246.260368][T11835] usb_alloc_urb+0x69/0xa0 [ 246.262123][T11835] usb_control_msg+0x1d4/0x4b0 [ 246.263904][T11835] ? __pfx_usb_control_msg+0x10/0x10 [ 246.266023][T11835] usbtmc_ioctl+0x10b5/0x2850 [ 246.268011][T11835] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 246.270573][T11835] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 246.272479][T11835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.274715][T11835] ? selinux_file_ioctl+0x180/0x270 [ 246.276649][T11835] ? selinux_file_ioctl+0xb4/0x270 [ 246.278487][T11835] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 246.280602][T11835] __x64_sys_ioctl+0x193/0x220 [ 246.282621][T11835] do_syscall_64+0xcd/0x250 [ 246.284621][T11835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.287158][T11835] RIP: 0033:0x7fe233d75bd9 [ 246.289114][T11835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.295614][T11835] RSP: 002b:00007fe234ade048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.299085][T11835] RAX: ffffffffffffffda RBX: 00007fe233f04110 RCX: 00007fe233d75bd9 [ 246.302779][T11835] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000006 [ 246.305936][T11835] RBP: 00007fe234ade0a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.309036][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.311927][T11835] R13: 000000000000006e R14: 00007fe233f04110 R15: 00007ffd7fe8a198 [ 246.314933][T11835] [ 246.318086][T11835] usbtmc 5-1:16.0: usb_control_msg returned -12 [ 246.431561][ T5251] usb usb14-port1: attempt power cycle [ 246.705271][ T5273] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 246.885148][ T5273] usb 7-1: Using ep0 maxpacket: 8 [ 246.891243][ T5273] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.896991][ T5273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.901379][ T5273] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.906053][ T5273] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.911623][ T5273] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.916252][ T5273] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.098462][ T5251] usb usb14-port1: unable to enumerate USB device [ 247.131321][ T39] audit: type=1400 audit(1721092578.286:619): avc: denied { create } for pid=11837 comm="syz.2.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 247.266511][ T39] audit: type=1400 audit(1721092578.426:620): avc: denied { create } for pid=11837 comm="syz.2.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 247.380937][ T5273] usb 7-1: usb_control_msg returned -71 [ 247.383651][ T5273] usbtmc 7-1:16.0: can't read capabilities [ 247.395797][ T5273] usb 7-1: USB disconnect, device number 6 [ 247.579097][T11848] autofs4:pid:11848:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 247.746616][T11850] netlink: 'syz.0.1857': attribute type 4 has an invalid length. [ 247.846775][ T824] usb 6-1: USB disconnect, device number 14 [ 248.144892][T11870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1862'. [ 248.417278][T11880] autofs4:pid:11880:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 248.514655][T11883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1866'. [ 248.719537][T11887] FAULT_INJECTION: forcing a failure. [ 248.719537][T11887] name failslab, interval 1, probability 0, space 0, times 0 [ 248.725863][T11887] CPU: 3 PID: 11887 Comm: syz.3.1867 Not tainted 6.10.0-syzkaller #0 [ 248.729216][T11887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.733473][T11887] Call Trace: [ 248.734845][T11887] [ 248.735932][T11887] dump_stack_lvl+0x16c/0x1f0 [ 248.737660][T11887] should_fail_ex+0x497/0x5b0 [ 248.739665][T11887] should_failslab+0x9/0x20 [ 248.742261][T11887] __kmalloc_noprof+0xcf/0x410 [ 248.744302][T11887] __do_sys_futex_waitv+0x127/0x2c0 [ 248.746499][T11887] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 248.748873][T11887] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 248.751105][T11887] do_syscall_64+0xcd/0x250 [ 248.753081][T11887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.755580][T11887] RIP: 0033:0x7f35a1975bd9 [ 248.757458][T11887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.764931][T11887] RSP: 002b:00007f35a2794048 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 248.768176][T11887] RAX: ffffffffffffffda RBX: 00007f35a1b03f60 RCX: 00007f35a1975bd9 [ 248.771180][T11887] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020001080 [ 248.774129][T11887] RBP: 00007f35a27940a0 R08: 0000000000000001 R09: 0000000000000000 [ 248.776900][T11887] R10: 0000000020001100 R11: 0000000000000246 R12: 0000000000000001 [ 248.779490][T11887] R13: 000000000000000b R14: 00007f35a1b03f60 R15: 00007ffd44975358 [ 248.782153][T11887] [ 249.000462][T11899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1873'. [ 249.027120][T11901] autofs4:pid:11901:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 249.202864][T11908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.254813][T11910] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1876'. [ 249.259666][T11910] No control pipe specified [ 249.397484][T11914] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1879'. [ 249.849773][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'. [ 249.884298][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1882'. [ 250.059539][ T824] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 250.230024][T11933] autofs4:pid:11933:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 250.257332][ T824] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.262683][ T824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 250.279018][ T824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.294387][ T824] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.314879][ T824] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.318714][ T824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.337158][ T824] usb 7-1: config 0 descriptor?? [ 250.340693][T11928] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 250.385330][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 250.391098][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 250.450672][ T39] audit: type=1400 audit(1721092581.606:621): avc: denied { audit_write } for pid=11939 comm="syz.0.1886" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.460917][ T39] audit: type=1107 audit(1721092581.606:622): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='à' [ 250.769322][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.780437][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.785505][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.789844][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.794339][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.799277][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.803106][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.807932][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.811517][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.815233][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.818911][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.822413][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.826133][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.829649][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.833349][ T824] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 250.838060][ T824] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 250.846709][ T824] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 250.863860][T11957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.034069][ T824] usb 7-1: USB disconnect, device number 7 [ 251.117991][ T39] audit: type=1400 audit(1721092582.276:623): avc: denied { module_load } for pid=11964 comm="syz.2.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 251.333961][T11969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1894'. [ 251.335844][T11967] netlink: 'syz.2.1893': attribute type 8 has an invalid length. [ 251.341091][T11967] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1893'. [ 251.426897][T11973] autofs4:pid:11973:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 251.563572][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 251.803249][ T39] audit: type=1400 audit(1721092582.956:624): avc: denied { accept } for pid=11989 comm="syz.1.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.867444][ T39] audit: type=1400 audit(1721092583.026:625): avc: denied { create } for pid=11994 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 251.883606][ T39] audit: type=1400 audit(1721092583.026:626): avc: denied { ioctl } for pid=11994 comm="syz.3.1901" path="socket:[47635]" dev="sockfs" ino=47635 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 252.066880][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.221072][T12005] dlm: plock device version mismatch: kernel (1.2.0), user (1.3072.0) [ 252.287460][ T39] audit: type=1400 audit(1721092583.446:627): avc: denied { read write } for pid=12004 comm="syz.2.1904" name="uhid" dev="devtmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.297825][ T39] audit: type=1400 audit(1721092583.446:628): avc: denied { open } for pid=12004 comm="syz.2.1904" path="/dev/uhid" dev="devtmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.306979][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.311120][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.318822][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.322882][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.326216][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.328964][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.332007][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.334961][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.337919][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.341026][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.344229][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.347672][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.351372][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.355106][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.358373][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.361635][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.366054][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x4 [ 252.369421][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.373325][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.377040][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 252.380085][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.383006][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.385731][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.388644][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.391579][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.394693][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.398068][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.401369][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.404678][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.408095][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.410914][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.430693][ T57] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.441405][ T57] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 252.577411][T12009] autofs4:pid:12009:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 253.167415][T12036] __nla_validate_parse: 1 callbacks suppressed [ 253.167433][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 253.284732][ T39] audit: type=1804 audit(1721092584.436:629): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1912" name="/newroot/482/bus/file0" dev="overlay" ino=2590 res=1 errno=0 [ 253.300027][ T39] audit: type=1400 audit(1721092584.456:630): avc: denied { read } for pid=12034 comm="syz.1.1913" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 253.358845][T12040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.584995][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 253.585027][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 253.662707][T12045] dlm: plock device version mismatch: kernel (1.2.0), user (1.3072.0) [ 253.738380][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.741660][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.749081][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.752359][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.756451][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.759693][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.762985][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.766613][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.769880][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.773140][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.776475][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.779605][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.782763][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.786044][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.789157][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.792367][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.796197][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 253.799409][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.802621][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.807041][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x2 [ 253.810144][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.813181][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.817397][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.820634][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.823974][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.828454][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.831609][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.835595][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.838812][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.842038][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.846184][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.849310][ T56] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 253.856284][ T56] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 255.051667][T12077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.179453][T12084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1927'. [ 255.955464][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 256.135702][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 256.141904][ T56] usb 8-1: config 9 has an invalid interface number: 207 but max is 0 [ 256.146428][ T56] usb 8-1: config 9 has no interface number 0 [ 256.148886][ T56] usb 8-1: config 9 interface 207 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 256.152212][ T56] usb 8-1: config 9 interface 207 altsetting 32 endpoint 0x3 has invalid maxpacket 1112, setting to 64 [ 256.158206][ T56] usb 8-1: config 9 interface 207 altsetting 32 endpoint 0xC has an invalid bInterval 129, changing to 7 [ 256.163173][ T56] usb 8-1: config 9 interface 207 altsetting 32 bulk endpoint 0xF has invalid maxpacket 584 [ 256.168875][ T56] usb 8-1: config 9 interface 207 has no altsetting 0 [ 256.174160][ T56] usb 8-1: New USB device found, idVendor=12d1, idProduct=c746, bcdDevice=c1.f9 [ 256.178717][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.182011][ T56] usb 8-1: Product: syz [ 256.183836][ T56] usb 8-1: Manufacturer: syz [ 256.187703][ T56] usb 8-1: SerialNumber: syz [ 256.193911][T12095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 256.389401][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.392391][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.647139][ T56] option 8-1:9.207: GSM modem (1-port) converter detected [ 256.664507][ T56] usb 8-1: USB disconnect, device number 7 [ 256.674198][ T56] option 8-1:9.207: device disconnected [ 256.720355][T12110] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1935'. [ 257.480651][T12133] netlink: 'syz.0.1940': attribute type 3 has an invalid length. [ 257.487466][T12133] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1940'. [ 257.508257][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 257.511046][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 258.108631][T12165] FAULT_INJECTION: forcing a failure. [ 258.108631][T12165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.114223][T12165] CPU: 1 PID: 12165 Comm: syz.2.1947 Not tainted 6.10.0-syzkaller #0 [ 258.117242][T12165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.121953][T12165] Call Trace: [ 258.123455][T12165] [ 258.124770][T12165] dump_stack_lvl+0x16c/0x1f0 [ 258.127060][T12165] should_fail_ex+0x497/0x5b0 [ 258.129168][T12165] ? fs_reclaim_acquire+0xae/0x160 [ 258.131182][T12165] __should_fail_alloc_page+0xe7/0x130 [ 258.133579][T12165] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 258.136256][T12165] ? hlock_class+0x4e/0x130 [ 258.138229][T12165] __alloc_pages_noprof+0x194/0x2460 [ 258.140539][T12165] ? hlock_class+0x4e/0x130 [ 258.142201][T12165] ? hlock_class+0x4e/0x130 [ 258.143998][T12165] ? mark_lock+0xb5/0xc60 [ 258.145733][T12165] ? __pfx_mark_lock+0x10/0x10 [ 258.147706][T12165] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 258.149999][T12165] ? __pfx___lock_acquire+0x10/0x10 [ 258.152176][T12165] ? hlock_class+0x4e/0x130 [ 258.154124][T12165] ? mark_lock+0xb5/0xc60 [ 258.155973][T12165] ? __pfx_mark_lock+0x10/0x10 [ 258.158026][T12165] ? hlock_class+0x4e/0x130 [ 258.159811][T12165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.162290][T12165] ? policy_nodemask+0xea/0x4e0 [ 258.164227][T12165] alloc_pages_mpol_noprof+0x275/0x610 [ 258.166548][T12165] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 258.169042][T12165] ? hlock_class+0x4e/0x130 [ 258.170943][T12165] ? find_held_lock+0x2d/0x110 [ 258.172905][T12165] vma_alloc_folio_noprof+0xad/0x1f0 [ 258.175047][T12165] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 258.177297][T12165] ? __pfx___lock_acquire+0x10/0x10 [ 258.179257][T12165] ? __pfx_lock_acquire+0x10/0x10 [ 258.181251][T12165] do_wp_page+0xf51/0x3340 [ 258.183201][T12165] ? __pfx_lock_acquire+0x10/0x10 [ 258.183678][T12167] FAULT_INJECTION: forcing a failure. [ 258.183678][T12167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.185346][T12165] ? __pfx_do_wp_page+0x10/0x10 [ 258.193799][T12165] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.196074][T12165] __handle_mm_fault+0x2311/0x5410 [ 258.198244][T12165] ? __pfx_mt_find+0x10/0x10 [ 258.200208][T12165] ? __pfx___handle_mm_fault+0x10/0x10 [ 258.202488][T12165] ? find_vma+0xc0/0x140 [ 258.204327][T12165] ? __pfx_find_vma+0x10/0x10 [ 258.206320][T12165] ? __pfx___lock_acquire+0x10/0x10 [ 258.208518][T12165] handle_mm_fault+0x476/0xa00 [ 258.210542][T12165] ? lock_mm_and_find_vma+0xa6/0x6a0 [ 258.212631][T12165] do_user_addr_fault+0x2e5/0xe50 [ 258.214556][T12165] exc_page_fault+0x5c/0xc0 [ 258.216257][T12165] asm_exc_page_fault+0x26/0x30 [ 258.218242][T12165] RIP: 0010:_copy_to_iter+0x379/0x1140 [ 258.220368][T12165] Code: fd 4d 85 ff 0f 85 59 ff ff ff e8 12 9c 0c fd 4c 8b 74 24 18 89 de 4c 89 f7 e8 a3 85 68 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 29 ff ff ff [ 258.227744][T12165] RSP: 0018:ffffc9000332fa40 EFLAGS: 00050246 [ 258.229835][T12165] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000240 [ 258.232681][T12165] RDX: 0000000000000000 RSI: ffff88803ed90dc0 RDI: 000000002000d000 [ 258.235742][T12165] RBP: 000000002000c240 R08: 0000000000000000 R09: ffffed1007db21ff [ 258.239058][T12165] R10: ffff88803ed90fff R11: 0000000000000000 R12: ffffc9000332fda0 [ 258.242244][T12165] R13: 000000002000d240 R14: ffff88803ed90000 R15: 0000000000000000 [ 258.245351][T12165] ? free_unref_page+0x75f/0xe40 [ 258.247313][T12165] ? __pfx__copy_to_iter+0x10/0x10 [ 258.249326][T12165] ? __folio_put+0x23e/0x360 [ 258.251017][T12165] ? __pfx___folio_put+0x10/0x10 [ 258.252887][T12165] copy_page_to_iter+0xf1/0x180 [ 258.254694][T12165] pipe_read+0x543/0x1400 [ 258.256273][T12165] ? __pfx_pipe_read+0x10/0x10 [ 258.258341][T12165] ? inode_security+0x101/0x130 [ 258.260432][T12165] ? avc_policy_seqno+0x9/0x20 [ 258.262390][T12165] ? selinux_file_permission+0x125/0x590 [ 258.264625][T12165] ? security_file_permission+0x98/0xc0 [ 258.266957][T12165] vfs_read+0xa39/0xbd0 [ 258.268686][T12165] ? __pfx_vfs_read+0x10/0x10 [ 258.270634][T12165] ? __fget_files+0x256/0x400 [ 258.272677][T12165] ? __fget_light+0x173/0x210 [ 258.274377][T12165] ksys_read+0x1f8/0x260 [ 258.275778][T12165] ? __pfx_ksys_read+0x10/0x10 [ 258.277713][T12165] do_syscall_64+0xcd/0x250 [ 258.279783][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.282472][T12165] RIP: 0033:0x7fada9775bd9 [ 258.284443][T12165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.292830][T12165] RSP: 002b:00007fadaa548048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.296294][T12165] RAX: ffffffffffffffda RBX: 00007fada9904038 RCX: 00007fada9775bd9 [ 258.299854][T12165] RDX: 000000000000ffa6 RSI: 0000000020000240 RDI: 0000000000000004 [ 258.303434][T12165] RBP: 00007fadaa5480a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.306821][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.310339][T12165] R13: 000000000000006e R14: 00007fada9904038 R15: 00007ffe83b90e98 [ 258.313916][T12165] [ 258.320529][T12167] CPU: 2 PID: 12167 Comm: syz.0.1948 Not tainted 6.10.0-syzkaller #0 [ 258.324555][T12167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.329793][T12167] Call Trace: [ 258.331330][T12167] [ 258.332572][T12167] dump_stack_lvl+0x16c/0x1f0 [ 258.334711][T12167] should_fail_ex+0x497/0x5b0 [ 258.336716][T12167] _copy_to_user+0x30/0xc0 [ 258.338387][T12167] simple_read_from_buffer+0xd0/0x160 [ 258.340396][T12167] proc_fail_nth_read+0x1b0/0x290 [ 258.342589][T12167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.345345][T12167] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.347839][T12167] vfs_read+0x1d4/0xbd0 [ 258.349658][T12167] ? __fdget_pos+0xeb/0x180 [ 258.351493][T12167] ? __pfx_vfs_read+0x10/0x10 [ 258.353412][T12167] ? __pfx___mutex_lock+0x10/0x10 [ 258.355462][T12167] ? __fget_files+0x256/0x400 [ 258.357294][T12167] ksys_read+0x12f/0x260 [ 258.358947][T12167] ? __pfx_ksys_read+0x10/0x10 [ 258.361038][T12167] do_syscall_64+0xcd/0x250 [ 258.363044][T12167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.365589][T12167] RIP: 0033:0x7f59381746bc [ 258.367474][T12167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 258.375394][T12167] RSP: 002b:00007f5938fb9040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.379141][T12167] RAX: ffffffffffffffda RBX: 00007f5938303f60 RCX: 00007f59381746bc [ 258.382376][T12167] RDX: 000000000000000f RSI: 00007f5938fb90b0 RDI: 0000000000000004 [ 258.385964][T12167] RBP: 00007f5938fb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.389324][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.392336][T12167] R13: 000000000000000b R14: 00007f5938303f60 R15: 00007ffe3d995318 [ 258.394972][T12167] [ 258.491175][T12171] netlink: 'syz.0.1949': attribute type 4 has an invalid length. [ 258.532147][T12176] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1951'. [ 258.610337][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 258.610378][ T39] audit: type=1400 audit(1721092589.766:636): avc: denied { create } for pid=12179 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.627992][ T39] audit: type=1400 audit(1721092589.766:637): avc: denied { setopt } for pid=12179 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.642977][ T39] audit: type=1400 audit(1721092589.766:638): avc: denied { bind } for pid=12179 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.657908][ T39] audit: type=1400 audit(1721092589.766:639): avc: denied { node_bind } for pid=12179 comm="syz.1.1952" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.789535][T12189] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 258.952166][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1954'. [ 259.774962][T12206] netlink: 'syz.3.1959': attribute type 4 has an invalid length. [ 260.666824][T12223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1963'. [ 260.864946][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.865196][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 261.285281][T12244] netlink: 'syz.1.1969': attribute type 4 has an invalid length. [ 261.340966][T12247] autofs4:pid:12247:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 261.464684][T12252] sctp: [Deprecated]: syz.1.1972 (pid 12252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.464684][T12252] Use struct sctp_sack_info instead [ 261.484193][ T39] audit: type=1400 audit(1721092592.636:640): avc: denied { setopt } for pid=12250 comm="syz.1.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 261.647419][ T39] audit: type=1400 audit(1721092592.806:641): avc: denied { unmount } for pid=8073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 261.802157][T12258] FAULT_INJECTION: forcing a failure. [ 261.802157][T12258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.808078][T12258] CPU: 0 PID: 12258 Comm: syz.1.1973 Not tainted 6.10.0-syzkaller #0 [ 261.811594][T12258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.816187][T12258] Call Trace: [ 261.817644][T12258] [ 261.818941][T12258] dump_stack_lvl+0x16c/0x1f0 [ 261.820971][T12258] should_fail_ex+0x497/0x5b0 [ 261.822780][T12258] _copy_from_user+0x30/0xf0 [ 261.824787][T12258] copy_msghdr_from_user+0x99/0x160 [ 261.827142][T12258] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 261.829737][T12258] ? __pfx___lock_acquire+0x10/0x10 [ 261.832062][T12258] ___sys_recvmsg+0xdc/0x1a0 [ 261.834121][T12258] ? __pfx____sys_recvmsg+0x10/0x10 [ 261.836489][T12258] ? find_held_lock+0x2d/0x110 [ 261.838618][T12258] ? __pfx___might_resched+0x10/0x10 [ 261.840959][T12258] ? __might_fault+0xe3/0x190 [ 261.843033][T12258] do_recvmmsg+0x2ba/0x750 [ 261.845069][T12258] ? __pfx_do_recvmmsg+0x10/0x10 [ 261.847278][T12258] ? vfs_write+0x14d/0x1140 [ 261.849317][T12258] ? __mutex_unlock_slowpath+0x164/0x650 [ 261.851811][T12258] __x64_sys_recvmmsg+0x239/0x290 [ 261.854062][T12258] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 261.856493][T12258] do_syscall_64+0xcd/0x250 [ 261.858460][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.861014][T12258] RIP: 0033:0x7fe233d75bd9 [ 261.862989][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.871209][T12258] RSP: 002b:00007fe234aff048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 261.874745][T12258] RAX: ffffffffffffffda RBX: 00007fe233f04038 RCX: 00007fe233d75bd9 [ 261.878140][T12258] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000006 [ 261.881527][T12258] RBP: 00007fe234aff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 261.884918][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.888345][T12258] R13: 000000000000006e R14: 00007fe233f04038 R15: 00007ffd7fe8a198 [ 261.891775][T12258] [ 262.448165][T12278] netlink: 'syz.1.1980': attribute type 4 has an invalid length. [ 262.575471][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.853053][ T39] audit: type=1400 audit(1721092594.006:642): avc: denied { shutdown } for pid=12284 comm="syz.0.1979" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.874610][ T39] audit: type=1400 audit(1721092594.026:643): avc: denied { read } for pid=12288 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 262.930852][ T39] audit: type=1400 audit(1721092594.086:644): avc: denied { setopt } for pid=12288 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 262.945053][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 262.947797][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 263.150834][T12295] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 263.153875][T12295] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.158245][T12295] vhci_hcd vhci_hcd.0: Device attached [ 263.233517][T12303] netlink: 5304 bytes leftover after parsing attributes in process `syz.1.1985'. [ 263.474850][ T55] usb 20-1: SetAddress Request (2) to port 0 [ 263.477818][ T55] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 263.610212][T12318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1989'. [ 263.856144][T12296] vhci_hcd: connection reset by peer [ 263.866564][T10114] vhci_hcd: stop threads [ 263.868481][T10114] vhci_hcd: release socket [ 263.870842][T10114] vhci_hcd: disconnect device [ 264.112604][T12336] can0: slcan on ttyprintk. [ 264.376467][T12350] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 264.432816][T12358] sctp: [Deprecated]: syz.3.1999 (pid 12358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.432816][T12358] Use struct sctp_sack_info instead [ 264.461214][ T39] audit: type=1400 audit(1721092595.616:645): avc: denied { watch } for pid=12357 comm="syz.3.1999" path="/74/file0" dev="9p" ino=36574290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.472634][ T39] audit: type=1400 audit(1721092595.616:646): avc: denied { watch_reads } for pid=12357 comm="syz.3.1999" path="/74/file0" dev="9p" ino=36574290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.486846][ T39] audit: type=1400 audit(1721092595.646:647): avc: denied { create } for pid=12357 comm="syz.3.1999" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 264.504968][ T39] audit: type=1400 audit(1721092595.646:648): avc: denied { associate } for pid=12357 comm="syz.3.1999" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 264.513960][ T39] audit: type=1400 audit(1721092595.646:649): avc: denied { read write open } for pid=12357 comm="syz.3.1999" path="/74/file0/bus" dev="9p" ino=36575329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 264.528499][ T39] audit: type=1400 audit(1721092595.686:650): avc: denied { append } for pid=12357 comm="syz.3.1999" path="/74/file0/cgroup.controllers" dev="9p" ino=36575330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.045816][T12335] can0 (unregistered): slcan off ttyprintk. [ 265.475922][ T39] audit: type=1400 audit(1721092596.626:651): avc: denied { bind } for pid=12392 comm="syz.0.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.517135][T12399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.549491][T12394] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 265.690339][T12414] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2013'. [ 265.904940][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 265.904979][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 266.151988][T12426] openvswitch: netlink: IP tunnel dst address not specified [ 266.173980][ T39] audit: type=1326 audit(1721092597.326:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12425 comm="syz.1.2018" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe233d75bd9 code=0x0 [ 266.234594][T12431] FAULT_INJECTION: forcing a failure. [ 266.234594][T12431] name failslab, interval 1, probability 0, space 0, times 0 [ 266.240382][T12431] CPU: 2 PID: 12431 Comm: syz.2.2020 Not tainted 6.10.0-syzkaller #0 [ 266.243280][T12431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.247311][T12431] Call Trace: [ 266.248896][T12431] [ 266.250218][T12431] dump_stack_lvl+0x16c/0x1f0 [ 266.252253][T12431] should_fail_ex+0x497/0x5b0 [ 266.254332][T12431] should_failslab+0x9/0x20 [ 266.256212][T12431] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 266.258443][T12431] ? __pfx_mas_next_range+0x10/0x10 [ 266.260665][T12431] ? vm_area_alloc+0x134/0x230 [ 266.262555][T12431] vm_area_alloc+0x134/0x230 [ 266.264282][T12431] mmap_region+0x3a5/0x2760 [ 266.265762][T12431] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 266.267899][T12431] ? __pfx_mmap_region+0x10/0x10 [ 266.269822][T12431] ? security_mmap_addr+0x8e/0xb0 [ 266.271731][T12431] ? __get_unmapped_area+0x271/0x3a0 [ 266.273739][T12431] do_mmap+0xbc7/0xf60 [ 266.275392][T12431] vm_mmap_pgoff+0x1ba/0x360 [ 266.277523][T12431] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.279716][T12431] ksys_mmap_pgoff+0x332/0x5d0 [ 266.281782][T12431] ? __pfx_ksys_write+0x10/0x10 [ 266.283808][T12431] __x64_sys_mmap+0x125/0x190 [ 266.285791][T12431] do_syscall_64+0xcd/0x250 [ 266.287689][T12431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.289972][T12431] RIP: 0033:0x7fada9775bd9 [ 266.291600][T12431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.299655][T12431] RSP: 002b:00007fadaa569048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.303048][T12431] RAX: ffffffffffffffda RBX: 00007fada9903f60 RCX: 00007fada9775bd9 [ 266.306312][T12431] RDX: 0000000000000000 RSI: 0000000000000930 RDI: 0000000020ffb000 [ 266.309627][T12431] RBP: 00007fadaa5690a0 R08: 0000000000000003 R09: 0000000000004000 [ 266.312972][T12431] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 266.316244][T12431] R13: 000000000000000b R14: 00007fada9903f60 R15: 00007ffe83b90e98 [ 266.319187][T12431] [ 266.358455][T12436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2022'. [ 266.490019][ T39] audit: type=1326 audit(1721092597.636:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12443 comm="syz.2.2024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fada9775bd9 code=0x0 [ 266.750563][ T39] audit: type=1400 audit(1721092597.906:654): avc: denied { read } for pid=12454 comm="syz.0.2028" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 267.437032][ T5252] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 267.450934][T12467] netlink: 183808 bytes leftover after parsing attributes in process `syz.2.2032'. [ 267.454612][T12467] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 267.637455][ T5252] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.642473][ T5252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.647494][ T5252] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.651279][ T5252] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.657609][ T5252] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.660803][ T5252] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.666773][ T5252] usb 8-1: config 0 descriptor?? [ 267.671338][T12474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2035'. [ 268.079078][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.080934][ T5252] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 268.082610][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.085724][ T5252] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 268.096085][ T5252] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.234911][ T5194] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 268.235506][ T5206] Bluetooth: hci3: command 0x1003 tx timeout [ 268.279355][ T56] usb 8-1: USB disconnect, device number 8 [ 268.545053][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 268.545203][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 268.545413][ T55] usb 20-1: device descriptor read/8, error -110 [ 268.853981][T12505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2044'. [ 268.979257][ T55] usb usb20-port1: attempt power cycle [ 269.675708][ T55] usb usb20-port1: unable to enumerate USB device [ 269.974100][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 270.249964][T12547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.269502][T12548] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2055'. [ 271.043358][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 271.043373][ T39] audit: type=1400 audit(1721092602.196:661): avc: denied { bind } for pid=12569 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 271.074901][ T39] audit: type=1400 audit(1721092602.216:662): avc: denied { connect } for pid=12569 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 271.105084][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 271.108251][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 271.704665][T12592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.296061][T12600] openvswitch: netlink: IP tunnel dst address not specified [ 272.349941][ T39] audit: type=1326 audit(1721092603.506:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.0.2070" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5938175bd9 code=0x0 [ 272.471019][T12609] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 272.516276][T12609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12609 comm=syz.1.2073 [ 272.525229][T12610] bond1: entered promiscuous mode [ 272.527883][T12610] bond1: entered allmulticast mode [ 272.534603][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 272.542025][T12609] bond1: left promiscuous mode [ 272.544361][T12609] bond1: left allmulticast mode [ 272.547874][T12609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.678561][T12618] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 272.745172][ T55] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 272.939365][ T55] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 272.943131][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.950556][ T55] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 272.955671][ T55] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 272.959449][ T55] usb 8-1: Manufacturer: syz [ 272.963759][ T55] usb 8-1: config 0 descriptor?? [ 273.035218][ T55] rc_core: IR keymap rc-hauppauge not found [ 273.037899][ T55] Registered IR keymap rc-empty [ 273.042654][ T55] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 273.051352][ T55] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 273.859665][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.387482][ T5194] Bluetooth: hci3: command 0x1003 tx timeout [ 274.391466][ T65] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 274.460727][T12641] usb usb8: usbfs: process 12641 (syz.0.2080) did not claim interface 0 before use [ 274.487272][T12640] usb 8-1: USB disconnect, device number 9 [ 274.510924][T12645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.350540][T12655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2391375842 (38262013472 ns) > initial count (14855924384 ns). Using initial count to start timer. [ 275.810010][T12669] netlink: 'syz.1.2089': attribute type 3 has an invalid length. [ 275.853389][T12666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2391375842 (38262013472 ns) > initial count (14855924384 ns). Using initial count to start timer. [ 276.795775][T12686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.856890][ T39] audit: type=1400 audit(1721092608.016:664): avc: denied { watch } for pid=12691 comm="syz.2.2097" path="/538/net_prio.prioidx" dev="tmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 276.867633][ T39] audit: type=1400 audit(1721092608.016:665): avc: denied { watch_sb } for pid=12691 comm="syz.2.2097" path="/538/net_prio.prioidx" dev="tmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 277.123057][T12706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.459224][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.589111][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2110'. [ 277.592706][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2110'. [ 277.769772][T12737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2113'. [ 277.934932][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 278.117183][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.122265][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 100, changing to 10 [ 278.128864][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.144913][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.150252][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.166797][ T10] usb 7-1: config 0 descriptor?? [ 278.430606][ T39] audit: type=1800 audit(1721092609.586:666): pid=12754 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2116" name="bus" dev="overlay" ino=1501 res=0 errno=0 [ 278.853589][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 278.856497][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 278.866625][ T10] usb 7-1: USB disconnect, device number 8 [ 279.165212][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.291987][T12790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2125'. [ 279.371878][ T39] audit: type=1326 audit(1721092610.526:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.0.2126" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5938175bd9 code=0x0 [ 279.648597][ T39] audit: type=1400 audit(1721092610.806:668): avc: denied { write } for pid=12798 comm="syz.2.2127" name="card0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 279.984972][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 279.984991][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 280.279326][ T39] audit: type=1800 audit(1721092611.436:669): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2132" name="bus" dev="overlay" ino=1530 res=0 errno=0 [ 280.752154][T12835] 9pnet_fd: Insufficient options for proto=fd [ 280.756557][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2138'. [ 280.783015][T12834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.254562][T12850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2142'. [ 281.679673][ T39] audit: type=1800 audit(1721092612.836:670): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2145" name="bus" dev="overlay" ino=2960 res=0 errno=0 [ 282.074030][T12877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.638328][T12887] autofs4:pid:12887:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 282.778769][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 282.784032][ T39] audit: type=1326 audit(1721092613.936:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12894 comm="syz.1.2156" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe233d75bd9 code=0x0 [ 283.541766][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.946212][T12926] autofs4:pid:12926:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 283.948248][T12927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=12927 comm=syz.2.2165 [ 284.027225][T12932] atomic_op ffff88801a9aa198 conn xmit_atomic 0000000000000000 [ 284.040144][T12932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2167'. [ 284.046486][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 284.051802][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 284.536523][ T39] audit: type=1800 audit(1721092615.696:672): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2173" name="bus" dev="overlay" ino=608 res=0 errno=0 [ 284.657493][T12962] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2176'. [ 284.745944][T12965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2177'. [ 284.836628][T12968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.134365][T12979] FAULT_INJECTION: forcing a failure. [ 285.134365][T12979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 285.141561][T12979] CPU: 3 PID: 12979 Comm: syz.1.2180 Not tainted 6.10.0-syzkaller #0 [ 285.145420][T12979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.150989][T12979] Call Trace: [ 285.152949][T12979] [ 285.155023][T12979] dump_stack_lvl+0x16c/0x1f0 [ 285.157586][T12979] should_fail_ex+0x497/0x5b0 [ 285.160092][T12979] ? fs_reclaim_acquire+0xae/0x160 [ 285.162769][T12979] __should_fail_alloc_page+0xe7/0x130 [ 285.165402][T12979] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 285.168360][T12979] ? __pfx_mark_lock+0x10/0x10 [ 285.170863][T12979] __alloc_pages_noprof+0x194/0x2460 [ 285.173674][T12979] ? page_ext_put+0x48/0xd0 [ 285.176232][T12979] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 285.178299][T12979] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 285.180488][T12979] ? __lock_acquire+0xc5d/0x3b30 [ 285.182468][T12979] ? __pfx___lock_acquire+0x10/0x10 [ 285.184486][T12979] ? mark_lock+0xb5/0xc60 [ 285.186199][T12979] ? __pfx___lock_acquire+0x10/0x10 [ 285.188213][T12979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 285.190495][T12979] ? policy_nodemask+0xea/0x4e0 [ 285.192414][T12979] alloc_pages_mpol_noprof+0x275/0x610 [ 285.194503][T12979] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 285.196818][T12979] ? __pfx_lock_release+0x10/0x10 [ 285.198760][T12979] shmem_alloc_folio+0x114/0x150 [ 285.200672][T12979] shmem_alloc_and_add_folio+0x14f/0x790 [ 285.202823][T12979] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 285.205264][T12979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 285.207550][T12979] ? __shmem_is_huge+0x213/0x300 [ 285.209467][T12979] shmem_get_folio_gfp+0x687/0x13d0 [ 285.211544][T12979] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 285.213712][T12979] ? fault_in_readable+0xcb/0x200 [ 285.215667][T12979] shmem_write_begin+0x15a/0x360 [ 285.217577][T12979] ? __pfx_fault_in_readable+0x10/0x10 [ 285.219676][T12979] ? __pfx_shmem_write_begin+0x10/0x10 [ 285.221772][T12979] generic_perform_write+0x272/0x620 [ 285.223808][T12979] ? __pfx_generic_perform_write+0x10/0x10 [ 285.226048][T12979] ? __mark_inode_dirty+0x71d/0xe70 [ 285.228052][T12979] ? generic_update_time+0xcf/0xf0 [ 285.230016][T12979] ? mnt_put_write_access_file+0x45/0xf0 [ 285.232171][T12979] shmem_file_write_iter+0x114/0x140 [ 285.234195][T12979] do_iter_readv_writev+0x504/0x780 [ 285.236227][T12979] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 285.238406][T12979] vfs_iter_write+0x1eb/0x9c0 [ 285.240215][T12979] backing_file_write_iter+0x5bf/0x8a0 [ 285.242285][T12979] ovl_write_iter+0x384/0x470 [ 285.244092][T12979] ? __pfx_ovl_write_iter+0x10/0x10 [ 285.246091][T12979] ? __pfx_ovl_file_modified+0x10/0x10 [ 285.248151][T12979] vfs_write+0x6b6/0x1140 [ 285.249833][T12979] ? __pfx_ovl_write_iter+0x10/0x10 [ 285.251845][T12979] ? __pfx_vfs_write+0x10/0x10 [ 285.253678][T12979] ? __pfx___mutex_lock+0x10/0x10 [ 285.255623][T12979] ? __fget_files+0x256/0x400 [ 285.257428][T12979] ksys_write+0x12f/0x260 [ 285.259084][T12979] ? __pfx_ksys_write+0x10/0x10 [ 285.260954][T12979] do_syscall_64+0xcd/0x250 [ 285.262674][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.264984][T12979] RIP: 0033:0x7fe233d75bd9 [ 285.266697][T12979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.273870][T12979] RSP: 002b:00007fe234b20048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.276833][T12979] RAX: ffffffffffffffda RBX: 00007fe233f03f60 RCX: 00007fe233d75bd9 [ 285.279858][T12979] RDX: 000000000000fea7 RSI: 0000000020000000 RDI: 0000000000000006 [ 285.282861][T12979] RBP: 00007fe234b200a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.285914][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.288920][T12979] R13: 000000000000000b R14: 00007fe233f03f60 R15: 00007ffd7fe8a198 [ 285.291934][T12979] [ 285.783826][ T39] audit: type=1400 audit(1721092616.936:673): avc: denied { accept } for pid=13001 comm="syz.0.2189" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.831666][T13004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2190'. [ 285.875063][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.025097][ T10] usb 6-1: device descriptor read/64, error -71 [ 286.315040][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 286.427036][T13008] FAULT_INJECTION: forcing a failure. [ 286.427036][T13008] name failslab, interval 1, probability 0, space 0, times 0 [ 286.432002][T13008] CPU: 2 PID: 13008 Comm: syz.2.2191 Not tainted 6.10.0-syzkaller #0 [ 286.435537][T13008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.440078][T13008] Call Trace: [ 286.441538][T13008] [ 286.442961][T13008] dump_stack_lvl+0x16c/0x1f0 [ 286.445111][T13008] should_fail_ex+0x497/0x5b0 [ 286.447259][T13008] should_failslab+0x9/0x20 [ 286.448954][T13008] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 286.450782][T13008] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 286.453328][T13008] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 286.455802][T13008] ? lock_acquire+0x1b1/0x560 [ 286.457899][T13008] mmu_topup_memory_caches+0x22/0xd0 [ 286.460195][T13008] kvm_mmu_load+0xda/0x20d0 [ 286.462099][T13008] ? kvm_apic_has_interrupt+0xb6/0x190 [ 286.464138][T13008] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 286.466742][T13008] ? kvm_irq_has_notifier+0x1cc/0x220 [ 286.468821][T13008] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 286.470829][T13008] ? __pfx_kvm_mmu_load+0x10/0x10 [ 286.473030][T13008] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 286.475494][T13008] ? kvm_check_and_inject_events+0x641/0x1000 [ 286.478174][T13008] vcpu_run+0x326d/0x4e60 [ 286.480107][T13008] ? __pfx_vcpu_run+0x10/0x10 [ 286.482173][T13008] ? __pfx_lock_acquire+0x10/0x10 [ 286.484333][T13008] ? mark_held_locks+0x9f/0xe0 [ 286.486444][T13008] ? fpu_swap_kvm_fpstate+0x100/0x420 [ 286.488835][T13008] ? __local_bh_enable_ip+0xa4/0x120 [ 286.491168][T13008] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.493543][T13008] ? fpu_swap_kvm_fpstate+0x1c8/0x420 [ 286.495773][T13008] ? __local_bh_enable_ip+0xa4/0x120 [ 286.497877][T13008] ? kvm_arch_vcpu_ioctl_run+0x42e/0x1680 [ 286.500403][T13008] kvm_arch_vcpu_ioctl_run+0x42e/0x1680 [ 286.502829][T13008] kvm_vcpu_ioctl+0x5a1/0x1090 [ 286.504958][T13008] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 286.507179][T13008] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 286.509924][T13008] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 286.512910][T13008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.515430][T13008] ? selinux_file_ioctl+0x180/0x270 [ 286.517466][T13008] ? selinux_file_ioctl+0xb4/0x270 [ 286.519497][T13008] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 286.521738][T13008] __x64_sys_ioctl+0x193/0x220 [ 286.523808][T13008] do_syscall_64+0xcd/0x250 [ 286.525806][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.528358][T13008] RIP: 0033:0x7fada9775bd9 [ 286.530342][T13008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.538683][T13008] RSP: 002b:00007fadaa569048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.542290][T13008] RAX: ffffffffffffffda RBX: 00007fada9903f60 RCX: 00007fada9775bd9 [ 286.545798][T13008] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 286.549259][T13008] RBP: 00007fadaa5690a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.552685][T13008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.555827][T13008] R13: 000000000000000b R14: 00007fada9903f60 R15: 00007ffe83b90e98 [ 286.559283][T13008] [ 286.560736][ T10] usb 6-1: device descriptor read/64, error -71 [ 286.688345][ T10] usb usb6-port1: attempt power cycle [ 286.740674][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2194'. [ 286.944893][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 286.948434][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 286.992997][T13035] autofs4:pid:13035:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 287.105572][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 287.136275][ T10] usb 6-1: device descriptor read/8, error -71 [ 287.404885][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 287.435935][ T10] usb 6-1: device descriptor read/8, error -71 [ 287.555184][ T10] usb usb6-port1: unable to enumerate USB device [ 287.865490][T13051] vivid-000: ================= START STATUS ================= [ 287.869501][T13051] vivid-000: Radio HW Seek Mode: Bounded [ 287.872494][T13051] vivid-000: Radio Programmable HW Seek: false [ 287.875412][T13051] vivid-000: RDS Rx I/O Mode: Block I/O [ 287.878589][T13051] vivid-000: Generate RBDS Instead of RDS: false [ 287.882155][T13051] vivid-000: RDS Reception: true [ 287.884311][T13051] vivid-000: RDS Program Type: 0 inactive [ 287.887876][T13051] vivid-000: RDS PS Name: inactive [ 287.890271][T13051] vivid-000: RDS Radio Text: inactive [ 287.892677][T13051] vivid-000: RDS Traffic Announcement: false inactive [ 287.896607][T13051] vivid-000: RDS Traffic Program: false inactive [ 287.900101][T13051] vivid-000: RDS Music: false inactive [ 287.902402][T13051] vivid-000: ================== END STATUS ================== [ 288.431456][T13057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2205'. [ 288.529178][T13060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2206'. [ 288.725560][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2207'. [ 288.797404][ T39] audit: type=1400 audit(1721092619.946:674): avc: denied { create } for pid=13064 comm="syz.1.2207" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.810179][ T39] audit: type=1400 audit(1721092619.956:675): avc: denied { map } for pid=13064 comm="syz.1.2207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.821055][ T39] audit: type=1400 audit(1721092619.966:676): avc: denied { read write } for pid=13064 comm="syz.1.2207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.845100][ T39] audit: type=1400 audit(1721092619.976:677): avc: denied { create } for pid=13064 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.853463][ T39] audit: type=1400 audit(1721092619.976:678): avc: denied { getopt } for pid=13064 comm="syz.1.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.653138][T13093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2216'. [ 289.977685][T13102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=13102 comm=syz.1.2218 [ 290.067732][T13108] netlink: 'syz.1.2221': attribute type 10 has an invalid length. [ 290.068359][ T39] audit: type=1400 audit(1721092621.226:679): avc: denied { create } for pid=13107 comm="syz.1.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.070782][T13108] bridge0: port 3(team0) entered blocking state [ 290.083752][T13108] bridge0: port 3(team0) entered disabled state [ 290.088043][T13108] team0: entered allmulticast mode [ 290.090393][T13108] team_slave_1: entered allmulticast mode [ 290.098259][T13108] team0: entered promiscuous mode [ 290.099991][T13108] team_slave_0: entered promiscuous mode [ 290.102673][T13108] team_slave_1: entered promiscuous mode [ 290.106554][T13108] bridge0: port 3(team0) entered blocking state [ 290.109422][T13108] bridge0: port 3(team0) entered forwarding state [ 290.126483][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.611635][T13131] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2227'. [ 290.704983][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 290.785015][ T5194] Bluetooth: hci0: command 0x040f tx timeout [ 291.039765][T13141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2230'. [ 291.130680][T13146] autofs4:pid:13146:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 291.545027][T13161] overlayfs: failed to resolve './file1': -2 [ 291.710942][T13171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2238'. [ 291.727159][ T35] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 291.917245][ T35] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 291.922171][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 291.935322][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.939380][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.948246][ T35] usb 6-1: config 0 descriptor?? [ 291.958924][ T35] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 292.000481][T13177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2239'. [ 292.476772][ T39] audit: type=1400 audit(1721092623.636:680): avc: denied { setopt } for pid=13188 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.485426][ T65] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 292.866825][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 292.868477][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 293.034247][T13195] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 293.037981][T13195] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 293.044546][T13195] team0: Port device virt_wifi0 added [ 293.207817][T13197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2244'. [ 293.729846][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'. [ 293.746332][T13204] syz.3.2245: attempt to access beyond end of device [ 293.746332][T13204] loop3: rw=0, sector=16, nr_sectors = 8 limit=0 [ 293.751582][T13204] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 2, size 4096) [ 293.757180][T13204] syz.3.2245: attempt to access beyond end of device [ 293.757180][T13204] loop3: rw=0, sector=128, nr_sectors = 8 limit=0 [ 293.762894][T13204] REISERFS warning (device loop3): sh-2006 read_super_block: bread failed (dev loop3, block 16, size 4096) [ 294.290739][T13212] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2248'. [ 294.559901][ T35] usb 6-1: USB disconnect, device number 19 [ 294.797550][T13231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2255'. [ 295.290950][T13241] FAULT_INJECTION: forcing a failure. [ 295.290950][T13241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.296825][T13241] CPU: 0 PID: 13241 Comm: syz.0.2256 Not tainted 6.10.0-syzkaller #0 [ 295.300397][T13241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.305056][T13241] Call Trace: [ 295.306521][T13241] [ 295.307845][T13241] dump_stack_lvl+0x16c/0x1f0 [ 295.309821][T13241] should_fail_ex+0x497/0x5b0 [ 295.311952][T13241] ? fs_reclaim_acquire+0xae/0x160 [ 295.314165][T13241] __should_fail_alloc_page+0xe7/0x130 [ 295.316552][T13241] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 295.319256][T13241] __alloc_pages_noprof+0x194/0x2460 [ 295.321588][T13241] ? copy_splice_read+0x1a8/0xb80 [ 295.323794][T13241] ? stack_trace_save+0x95/0xd0 [ 295.325960][T13241] ? __pfx_stack_trace_save+0x10/0x10 [ 295.328340][T13241] ? stack_depot_save_flags+0x28/0x8f0 [ 295.330781][T13241] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 295.333355][T13241] ? copy_splice_read+0x1a8/0xb80 [ 295.335602][T13241] ? kasan_save_stack+0x33/0x60 [ 295.337761][T13241] ? kasan_save_track+0x14/0x30 [ 295.339920][T13241] ? __kasan_kmalloc+0xaa/0xb0 [ 295.342008][T13241] ? __kmalloc_noprof+0x1ec/0x410 [ 295.344130][T13241] ? copy_splice_read+0x1a8/0xb80 [ 295.346327][T13241] ? do_splice_read+0x294/0x380 [ 295.348531][T13241] ? splice_direct_to_actor+0x2a4/0xa40 [ 295.350902][T13241] alloc_pages_bulk_noprof+0x742/0x14f0 [ 295.353317][T13241] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 295.355732][T13241] ? trace_kmalloc+0x2d/0xe0 [ 295.357086][T13241] ? __kmalloc_noprof+0x20b/0x410 [ 295.358890][T13241] copy_splice_read+0x1e3/0xb80 [ 295.361031][T13241] ? __pfx_copy_splice_read+0x10/0x10 [ 295.363107][T13241] ? pipe_unlock+0x4a/0x70 [ 295.364973][T13241] ? __pfx_splice_from_pipe+0x10/0x10 [ 295.367282][T13241] ? __pfx_register_lock_class+0x10/0x10 [ 295.369725][T13241] ? __pfx_copy_splice_read+0x10/0x10 [ 295.371981][T13241] do_splice_read+0x294/0x380 [ 295.373961][T13241] splice_direct_to_actor+0x2a4/0xa40 [ 295.376282][T13241] ? __pfx_direct_splice_actor+0x10/0x10 [ 295.378738][T13241] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 295.381268][T13241] ? __pfx___might_resched+0x10/0x10 [ 295.383529][T13241] ? __pfx_lock_release+0x10/0x10 [ 295.385670][T13241] do_splice_direct+0x17e/0x250 [ 295.387791][T13241] ? __pfx_do_splice_direct+0x10/0x10 [ 295.390166][T13241] ? avc_policy_seqno+0x9/0x20 [ 295.392300][T13241] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 295.394823][T13241] ? security_file_permission+0x98/0xc0 [ 295.397111][T13241] do_sendfile+0xb1e/0xe50 [ 295.399032][T13241] ? __pfx_do_sendfile+0x10/0x10 [ 295.401156][T13241] __x64_sys_sendfile64+0x1da/0x220 [ 295.403385][T13241] ? ksys_write+0x1ab/0x260 [ 295.405396][T13241] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 295.407749][T13241] do_syscall_64+0xcd/0x250 [ 295.409529][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.411849][T13241] RIP: 0033:0x7f5938175bd9 [ 295.413711][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.421301][T13241] RSP: 002b:00007f5938fb9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.424875][T13241] RAX: ffffffffffffffda RBX: 00007f5938303f60 RCX: 00007f5938175bd9 [ 295.428203][T13241] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 295.431549][T13241] RBP: 00007f5938fb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.434809][T13241] R10: 00000000fffffffc R11: 0000000000000246 R12: 0000000000000002 [ 295.438045][T13241] R13: 000000000000000b R14: 00007f5938303f60 R15: 00007ffe3d995318 [ 295.441322][T13241] [ 295.507103][T13249] binder: 13246:13249 ioctl c00c6211 0 returned -14 [ 295.584961][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 295.584977][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 295.608045][T13254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2261'. [ 295.764976][ T5234] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 295.945440][ T39] audit: type=1400 audit(1721092627.106:681): avc: denied { setopt } for pid=13257 comm="syz.0.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.947273][ T5234] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 295.953950][ T39] audit: type=1326 audit(1721092627.106:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13257 comm="syz.0.2262" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5938175bd9 code=0x0 [ 295.958298][ T5234] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 295.973575][ T5234] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.978078][ T5234] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.984117][ T5234] usb 7-1: config 0 descriptor?? [ 295.989825][ T5234] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 296.247898][T13270] FAULT_INJECTION: forcing a failure. [ 296.247898][T13270] name failslab, interval 1, probability 0, space 0, times 0 [ 296.253500][T13270] CPU: 2 PID: 13270 Comm: syz.3.2266 Not tainted 6.10.0-syzkaller #0 [ 296.257067][T13270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.261709][T13270] Call Trace: [ 296.263207][T13270] [ 296.264531][T13270] dump_stack_lvl+0x16c/0x1f0 [ 296.266662][T13270] should_fail_ex+0x497/0x5b0 [ 296.268712][T13270] should_failslab+0x9/0x20 [ 296.270735][T13270] kmalloc_node_track_caller_noprof+0xcf/0x430 [ 296.273320][T13270] ? v9fs_mount+0x11/0xaa0 [ 296.275330][T13270] ? v9fs_session_init+0xf5/0x1a80 [ 296.277831][T13270] kstrdup+0x3c/0x70 [ 296.279611][T13270] v9fs_session_init+0xf5/0x1a80 [ 296.281824][T13270] ? __pfx_v9fs_session_init+0x10/0x10 [ 296.284234][T13270] ? kasan_save_track+0x14/0x30 [ 296.286478][T13270] v9fs_mount+0xc6/0xaa0 [ 296.288375][T13270] ? __pfx_v9fs_mount+0x10/0x10 [ 296.290581][T13270] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 296.293323][T13270] ? cap_capable+0x1cf/0x240 [ 296.295430][T13270] ? __pfx_v9fs_mount+0x10/0x10 [ 296.297555][T13270] legacy_get_tree+0x109/0x220 [ 296.299710][T13270] vfs_get_tree+0x8f/0x380 [ 296.301643][T13270] path_mount+0x14e6/0x1f20 [ 296.303573][T13270] ? kmem_cache_free+0x12f/0x3a0 [ 296.305743][T13270] ? __pfx_path_mount+0x10/0x10 [ 296.307865][T13270] ? putname+0x12e/0x170 [ 296.309728][T13270] __x64_sys_mount+0x297/0x320 [ 296.311819][T13270] ? __pfx___x64_sys_mount+0x10/0x10 [ 296.314306][T13270] do_syscall_64+0xcd/0x250 [ 296.316688][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.319270][T13270] RIP: 0033:0x7f35a1975bd9 [ 296.321208][T13270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.329781][T13270] RSP: 002b:00007f35a2794048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.333452][T13270] RAX: ffffffffffffffda RBX: 00007f35a1b03f60 RCX: 00007f35a1975bd9 [ 296.336918][T13270] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 296.340326][T13270] RBP: 00007f35a27940a0 R08: 0000000020000580 R09: 0000000000000000 [ 296.343524][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.346661][T13270] R13: 000000000000000b R14: 00007f35a1b03f60 R15: 00007ffd44975358 [ 296.349732][T13270] [ 296.457176][ T39] audit: type=1400 audit(1721092627.616:683): avc: denied { ioctl } for pid=13272 comm="syz.3.2267" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54776 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 297.010964][T13281] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 297.015103][T13281] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 297.019267][T13281] team0: Port device virt_wifi0 added [ 297.051174][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'. [ 297.150202][T13286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2270'. [ 297.389639][T13293] No control pipe specified [ 297.399958][T13293] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2272'. [ 297.825466][ T5194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 297.829276][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 298.320056][T13313] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 298.402456][T13315] FAULT_INJECTION: forcing a failure. [ 298.402456][T13315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.408719][T13315] CPU: 1 PID: 13315 Comm: syz.3.2278 Not tainted 6.10.0-syzkaller #0 [ 298.412143][T13315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.416027][T13315] Call Trace: [ 298.417213][T13315] [ 298.418235][T13315] dump_stack_lvl+0x16c/0x1f0 [ 298.419988][T13315] should_fail_ex+0x497/0x5b0 [ 298.421865][T13315] _copy_to_user+0x30/0xc0 [ 298.423413][T13315] generic_map_delete_batch+0x609/0x6f0 [ 298.425547][T13315] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 298.427843][T13315] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 298.430108][T13315] bpf_map_do_batch+0x52f/0x720 [ 298.432267][T13315] __sys_bpf+0x5fc/0x49a0 [ 298.434126][T13315] ? ksys_write+0x21c/0x260 [ 298.435675][T13315] ? reacquire_held_locks+0x420/0x4c0 [ 298.437714][T13315] ? __pfx___sys_bpf+0x10/0x10 [ 298.439690][T13315] ? vfs_write+0x14d/0x1140 [ 298.441569][T13315] ? __mutex_unlock_slowpath+0x164/0x650 [ 298.443824][T13315] ? fput+0x32/0x390 [ 298.445506][T13315] ? ksys_write+0x1ab/0x260 [ 298.447538][T13315] ? __pfx_ksys_write+0x10/0x10 [ 298.449392][T13315] __x64_sys_bpf+0x78/0xc0 [ 298.451181][T13315] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.453106][T13315] do_syscall_64+0xcd/0x250 [ 298.454776][T13315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.457257][T13315] RIP: 0033:0x7f35a1975bd9 [ 298.459142][T13315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.467597][T13315] RSP: 002b:00007f35a2794048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.471268][T13315] RAX: ffffffffffffffda RBX: 00007f35a1b03f60 RCX: 00007f35a1975bd9 [ 298.474769][T13315] RDX: 0000000000000038 RSI: 0000000020000000 RDI: 000000000000001b [ 298.478290][T13315] RBP: 00007f35a27940a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.481738][T13315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.485279][T13315] R13: 000000000000000b R14: 00007f35a1b03f60 R15: 00007ffd44975358 [ 298.488525][T13315] [ 298.589671][ T5793] usb 7-1: USB disconnect, device number 9 [ 298.632857][T13320] autofs4:pid:13320:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 299.029396][ T1092] ------------[ cut here ]------------ [ 299.032376][ T1092] WARNING: CPU: 1 PID: 1092 at net/wireless/sme.c:846 __cfg80211_connect_result+0x2967/0x2ac0 [ 299.036939][ T1092] Modules linked in: [ 299.039987][ T1092] CPU: 1 PID: 1092 Comm: kworker/u32:7 Not tainted 6.10.0-syzkaller #0 [ 299.047813][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.052790][ T1092] Workqueue: cfg80211 cfg80211_event_work [ 299.055358][ T1092] RIP: 0010:__cfg80211_connect_result+0x2967/0x2ac0 [ 299.058277][ T1092] Code: ff ff 41 8b 1f 31 ff 4c 89 95 68 ff ff ff 89 de e8 de 0e 4c f7 85 db 4c 8b 95 68 ff ff ff 0f 85 f3 e6 ff ff e8 ca 13 4c f7 90 <0f> 0b 90 4c 89 fe 4c 89 f7 e8 bb 60 ff ff e9 06 d9 ff ff e8 d1 f5 [ 299.066422][ T1092] RSP: 0018:ffffc90004d1fb20 EFLAGS: 00010293 [ 299.069101][ T1092] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a41d6a2 [ 299.072604][ T1092] RDX: ffff88802312a440 RSI: ffffffff8a41d6b6 RDI: 0000000000000005 [ 299.075581][ T1092] RBP: ffffc90004d1fc00 R08: 0000000000000005 R09: 0000000000000000 [ 299.078500][ T1092] R10: ffff8880441f9486 R11: ffff88801dcd2898 R12: 0000000000000000 [ 299.081944][ T1092] R13: ffff88801dcd2818 R14: ffff8880441f9000 R15: ffff88801dcd2818 [ 299.085971][ T1092] FS: 0000000000000000(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 [ 299.090146][ T1092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.093242][ T1092] CR2: 00007fadaa526fa8 CR3: 000000003b468000 CR4: 0000000000350ef0 [ 299.097131][ T1092] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.100823][ T1092] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.105864][ T1092] Call Trace: [ 299.108212][ T1092] [ 299.109861][ T1092] ? show_regs+0x8c/0xa0 [ 299.112074][ T1092] ? __warn+0xe5/0x3c0 [ 299.114407][ T1092] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 299.117068][ T1092] ? report_bug+0x3c0/0x580 [ 299.119196][ T1092] ? handle_bug+0x3d/0x70 [ 299.121096][ T1092] ? exc_invalid_op+0x17/0x50 [ 299.123007][ T1092] ? asm_exc_invalid_op+0x1a/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.125183][ T1092] ? __cfg80211_connect_result+0x2952/0x2ac0 [ 299.128110][ T1092] ? __cfg80211_connect_result+0x2966/0x2ac0 [ 299.130555][ T1092] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 299.133351][ T1092] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 299.135929][ T1092] ? mark_held_locks+0x9f/0xe0 [ 299.137608][ T1092] ? cfg80211_process_wdev_events+0x391/0x5d0 [ 299.139703][ T1092] cfg80211_process_wdev_events+0x391/0x5d0 [ 299.141784][ T1092] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.144108][ T1092] cfg80211_process_rdev_events+0x9f/0x130 [ 299.146664][ T1092] cfg80211_event_work+0x2b/0x40 [ 299.148403][ T1092] process_one_work+0x9c5/0x1b40 [ 299.150246][ T1092] ? __pfx_batadv_nc_worker+0x10/0x10 [ 299.152509][ T1092] ? __pfx_process_one_work+0x10/0x10 [ 299.154588][ T1092] ? assign_work+0x1a0/0x250 [ 299.156643][ T1092] worker_thread+0x6c8/0xf30 [ 299.158473][ T1092] ? __pfx_worker_thread+0x10/0x10 [ 299.160474][ T1092] kthread+0x2c1/0x3a0 [ 299.162112][ T1092] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.164394][ T1092] ? __pfx_kthread+0x10/0x10 [ 299.166550][ T1092] ret_from_fork+0x45/0x80 [ 299.168620][ T1092] ? __pfx_kthread+0x10/0x10 [ 299.170868][ T1092] ret_from_fork_asm+0x1a/0x30 [ 299.173108][ T1092] [ 299.174508][ T1092] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.177499][ T1092] CPU: 1 PID: 1092 Comm: kworker/u32:7 Not tainted 6.10.0-syzkaller #0 [ 299.180887][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.185985][ T1092] Workqueue: cfg80211 cfg80211_event_work [ 299.188639][ T1092] Call Trace: [ 299.190229][ T1092] [ 299.191723][ T1092] dump_stack_lvl+0x3d/0x1f0 [ 299.193758][ T1092] panic+0x6f5/0x7a0 [ 299.195073][ T1092] ? __pfx_panic+0x10/0x10 [ 299.196625][ T1092] ? show_trace_log_lvl+0x363/0x500 [ 299.198392][ T1092] ? check_panic_on_warn+0x1f/0xb0 [ 299.200746][ T1092] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 299.202847][ T1092] check_panic_on_warn+0xab/0xb0 [ 299.204749][ T1092] __warn+0xf1/0x3c0 [ 299.206495][ T1092] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 299.209235][ T1092] report_bug+0x3c0/0x580 [ 299.211150][ T1092] handle_bug+0x3d/0x70 [ 299.213002][ T1092] exc_invalid_op+0x17/0x50 [ 299.215113][ T1092] asm_exc_invalid_op+0x1a/0x20 [ 299.217468][ T1092] RIP: 0010:__cfg80211_connect_result+0x2967/0x2ac0 [ 299.220558][ T1092] Code: ff ff 41 8b 1f 31 ff 4c 89 95 68 ff ff ff 89 de e8 de 0e 4c f7 85 db 4c 8b 95 68 ff ff ff 0f 85 f3 e6 ff ff e8 ca 13 4c f7 90 <0f> 0b 90 4c 89 fe 4c 89 f7 e8 bb 60 ff ff e9 06 d9 ff ff e8 d1 f5 [ 299.230837][ T1092] RSP: 0018:ffffc90004d1fb20 EFLAGS: 00010293 [ 299.233949][ T1092] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a41d6a2 [ 299.238837][ T1092] RDX: ffff88802312a440 RSI: ffffffff8a41d6b6 RDI: 0000000000000005 [ 299.243034][ T1092] RBP: ffffc90004d1fc00 R08: 0000000000000005 R09: 0000000000000000 [ 299.247105][ T1092] R10: ffff8880441f9486 R11: ffff88801dcd2898 R12: 0000000000000000 [ 299.250867][ T1092] R13: ffff88801dcd2818 R14: ffff8880441f9000 R15: ffff88801dcd2818 [ 299.254694][ T1092] ? __cfg80211_connect_result+0x2952/0x2ac0 [ 299.257567][ T1092] ? __cfg80211_connect_result+0x2966/0x2ac0 [ 299.260235][ T1092] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 299.263116][ T1092] ? mark_held_locks+0x9f/0xe0 [ 299.265600][ T1092] ? cfg80211_process_wdev_events+0x391/0x5d0 [ 299.268622][ T1092] cfg80211_process_wdev_events+0x391/0x5d0 [ 299.271722][ T1092] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.274322][ T1092] cfg80211_process_rdev_events+0x9f/0x130 [ 299.277253][ T1092] cfg80211_event_work+0x2b/0x40 [ 299.279751][ T1092] process_one_work+0x9c5/0x1b40 [ 299.281828][ T1092] ? __pfx_batadv_nc_worker+0x10/0x10 [ 299.284267][ T1092] ? __pfx_process_one_work+0x10/0x10 [ 299.286207][ T1092] ? assign_work+0x1a0/0x250 [ 299.288541][ T1092] worker_thread+0x6c8/0xf30 [ 299.290570][ T1092] ? __pfx_worker_thread+0x10/0x10 [ 299.292739][ T1092] kthread+0x2c1/0x3a0 [ 299.294324][ T1092] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.296401][ T1092] ? __pfx_kthread+0x10/0x10 [ 299.298281][ T1092] ret_from_fork+0x45/0x80 [ 299.300022][ T1092] ? __pfx_kthread+0x10/0x10 [ 299.301981][ T1092] ret_from_fork_asm+0x1a/0x30 [ 299.304007][ T1092] [ 299.305886][ T1092] Kernel Offset: disabled [ 299.308154][ T1092] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:09:06 Registers: info registers vcpu 0 CPU#0 RAX=00000000006681bd RBX=0000000000000000 RCX=ffffffff8ae7e779 RDX=0000000000000000 RSI=ffffffff8b2caee0 RDI=ffffffff8b903980 RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000001 R9 =ffffed100d606fdd R10=ffff88806b037eeb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe48850 R15=0000000000000000 RIP=ffffffff8ae7fb6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020050000 CR3=000000002a230000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7fe8a4a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe233de4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe233de4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe233de432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe233de4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe233de43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe233de44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff84fda7c0 RDI=ffffffff94dde1e0 RBP=ffffffff94dde1a0 RSP=ffffc90004d1f4b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff29bbc8e R15=dffffc0000000000 RIP=ffffffff84fda7e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fadaa526fa8 CR3=000000003b468000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0204010000020311 0001057800000224 00000004090400bc 000c000300143105 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a263d100 00007f35a1ad4440 00007f35a1ad0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a1ad4498 00007f35a1ad4490 00007f35a1ad4488 00007f35a1ad4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6406639fbcae0bce 771bdf4995fb3aae 4e61f3023ac53a83 9156ddf7bca271c8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e2478e0bec642ba 6bb78c6e50634a77 1f6b5e9b173633f6 506c2c5a11f535ff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 958f3952132e846e 5ab19a519c4db007 6f4863cd3024e96a 091462ae4e0d6101 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 752ffac4c8771053 293066b3fa2a4147 d5ba81b6c84475d9 38b026b348aa9ece ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff907dd5ef RBX=ffffc9000483ed00 RCX=0000000000000000 RDX=dffffc0000000000 RSI=ffffffff907dd5ef RDI=ffffc9000483ed58 RBP=0000000000000001 RSP=ffffc9000483ec80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=dffffc0000000000 R12=ffffffff907dd5ea R13=ffffc9000483f840 R14=ffffffff907dd5ee R15=0000000000000001 RIP=ffffffff813ce56c RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe234b206c0 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200aa000 CR3=000000001effe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400000 Opmask01=00000000ffffffff Opmask02=00000000fff80800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc6a2c5a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff1a985ce RBX=dffffc0000000000 RCX=000000000000025d RDX=1ffff1100d647f2d RSI=ffff88806b33ec80 RDI=ffffffff8d4c2e70 RBP=ffffc900034ffdd8 RSP=ffffc900034ffc48 R8 =0000000000000000 R9 =000000000000025d R10=ffffffff8fe48857 R11=0000000000000000 R12=ffffffff8d4c2e20 R13=0000000000000000 R14=ffffc900034ffd30 R15=ffff88806b33ebc0 RIP=ffffffff8aea0da1 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fadaa527d58 CR3=000000001d9fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd44975660 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35a19e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000