last executing test programs: 4m34.986766352s ago: executing program 1 (id=2497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x581143, 0x0) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x2000000000000060}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x22200, 0x0) writev(r1, &(0x7f0000000580), 0x1000000000000297) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x4004851}, 0x20000040) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r9 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2400) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r9, 0x4122, 0x0) getdents64(r8, 0x0, 0x0) getdents64(r8, 0x0, 0xc0) open_tree(r8, &(0x7f00000000c0)='./file0\x00', 0x801) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000380)={'dvmrp1\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0xfffffffd, 0xc4, 0x1, 0x3, 0x0, 0x7, 0x1, 0x2, 0x1, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2]}}) 4m34.918752968s ago: executing program 1 (id=2500): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 4m34.847811711s ago: executing program 1 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x200000000000000, 0x44801}, 0x840) 4m34.847516082s ago: executing program 1 (id=2502): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) prctl$PR_GET_SECCOMP(0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x13fe80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x4005, 0xc000, 0xfffffffc, r3, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000480)='./file1/file0\x00', 0x402440, 0x140) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x8, 0x7383ca22, 0xb7, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x0, 0x9, 0xfffffffc, 0x6, {0x0, 0xa8, 0x6, 0x100000008, 0x3, 0x1, 0x800001ff, 0xffffff61, 0x0, 0x8000, 0x0, r3, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x7}}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x51, 0x63, 0x0, 0x61, 0x61, 0x30, 0x63], 0x2d, [0x38, 0x32, 0x34, 0x4a], 0x2d, [0x62, 0x65, 0x65, 0x33], 0x2d, [0x34, 0x66, 0x63], 0x2d, [0x62, 0x38, 0x39, 0x64, 0x35, 0x39, 0x35, 0x34]}}}, {@fsname={'fsname', 0x3d, '\x82)'}}, {@fsname}]}}) rmdir(&(0x7f0000000440)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m33.907744718s ago: executing program 1 (id=2514): mkdir(&(0x7f0000000300)='./file0\x00', 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) 4m30.791017558s ago: executing program 1 (id=2522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0xc0006020, 0x0, 0x0) unshare(0x400) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0x40043d14, &(0x7f0000000500)={0x15}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x5, 0x2, 0x962}) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2000000000, 0x0, 0x0, 0x704, 0x7ff}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="9121", 0x2}, 0x1, 0x0, 0x0, 0x1}, 0xc0e4) 4m30.722122357s ago: executing program 32 (id=2522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r3, 0x0, 0x0, 0xc0006020, 0x0, 0x0) unshare(0x400) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0x40043d14, &(0x7f0000000500)={0x15}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x5, 0x2, 0x962}) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2000000000, 0x0, 0x0, 0x704, 0x7ff}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="9121", 0x2}, 0x1, 0x0, 0x0, 0x1}, 0xc0e4) 3m30.193208654s ago: executing program 3 (id=3571): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x10001}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r4}, 0x10) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000018000100fcffffff000200000a20200000000007"], 0x1c}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) 3m30.060432976s ago: executing program 3 (id=3576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000030000000004000000200001800d0001007564703a73"], 0x34}}, 0x4040) 3m30.060209618s ago: executing program 3 (id=3577): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_sve={0x6080000000150505, &(0x7f0000000040)=0x1}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x405, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10408, 0x2140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x200400c0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) 3m29.985922033s ago: executing program 3 (id=3578): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x0, 0x3, 0x1001, {0x6, 0x1}, {0x47, 0x2}, @const={0x4, {0x1000, 0x7f, 0x7, 0xc}}}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="056f1d41", @ANYRES16=r2, @ANYBLOB="200000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1278}, 0x1, 0x0, 0x0, 0x8046}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 3m29.922212412s ago: executing program 3 (id=3579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x1b]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r5, 0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b0000040"]) 3m29.836774477s ago: executing program 3 (id=3580): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e002e8970d8107040a60110000020000000455a1bc0009009c000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2210000000014d6d930dfe1d9c322fe040000005025ac227d3ae7ca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b69b5000000000000002a9ecbee", 0xd8}], 0x1}, 0x94) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x1000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[], 0xffdd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r8, 0x7, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x8080) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = fcntl$dupfd(r5, 0x0, r10) write$cgroup_pid(r11, 0x0, 0x0) read$FUSE(r11, &(0x7f0000004000)={0x2020}, 0x2020) connect$bt_sco(r11, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) 3m29.806978699s ago: executing program 33 (id=3580): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e002e8970d8107040a60110000020000000455a1bc0009009c000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2210000000014d6d930dfe1d9c322fe040000005025ac227d3ae7ca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b69b5000000000000002a9ecbee", 0xd8}], 0x1}, 0x94) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x1000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[], 0xffdd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r8, 0x7, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x8080) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = fcntl$dupfd(r5, 0x0, r10) write$cgroup_pid(r11, 0x0, 0x0) read$FUSE(r11, &(0x7f0000004000)={0x2020}, 0x2020) connect$bt_sco(r11, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) 1m26.777020297s ago: executing program 2 (id=5865): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x4, 0x0, 0x0, 0x0) 1m26.242122373s ago: executing program 4 (id=5875): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x1, 0x3400) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) 1m25.836372573s ago: executing program 2 (id=5876): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000b80)=""/82, 0x52}, {&(0x7f0000000c00)=""/97, 0x61}], 0x7}, 0x12}], 0x1, 0x2, 0x0) 1m25.836218473s ago: executing program 2 (id=5877): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7db", 0xc5}], 0x1}}], 0x1, 0x8001) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FIONREAD(r1, 0x541b, 0x0) 1m25.311214141s ago: executing program 4 (id=5881): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0xffff, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x7, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xfffffffd, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x9, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0x80ff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0x7ffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x8, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8, 0xd8, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x3, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x9, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x800, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1fd, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x5, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x0, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x5c81, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x6, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b0ffd, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0x9, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x5, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0x4, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x4, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x8, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0xfffffffd, 0xf7d6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0x240000, 0x5, 0x9, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000000, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x6, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0x4, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0xf, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x897, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x808000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x7, 0x6, 0x5, 0x3d91, 0xffffffff, 0x400002dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x1, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.895186139s ago: executing program 2 (id=5885): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7e, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12", 0x4, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000004c0)="8b", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 1m24.328465666s ago: executing program 4 (id=5886): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x82, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000200)=0x4d) 1m24.328293902s ago: executing program 4 (id=5887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040805}, 0x24040841) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x10043, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x7, @empty, 0x2}, 0x1c) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xb5f7e000) futex(&(0x7f0000000040), 0xa, 0x100000, 0x0, 0x0, 0x1) 1m24.093954075s ago: executing program 4 (id=5890): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1m23.976416152s ago: executing program 2 (id=5891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2, 0x100000, 0x0, 0xffffffffffffffff, 0x5}) 1m23.976171076s ago: executing program 4 (id=5892): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}], 0x10) 1m23.890515874s ago: executing program 34 (id=5892): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}], 0x10) 1m23.749305373s ago: executing program 2 (id=5894): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendto$inet6(r1, &(0x7f0000000100)="e084dc", 0x3, 0x8812, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 1m23.74492919s ago: executing program 35 (id=5894): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendto$inet6(r1, &(0x7f0000000100)="e084dc", 0x3, 0x8812, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 5.26842462s ago: executing program 0 (id=7351): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x2}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) (async) syz_clone3(&(0x7f0000000440)={0x20080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, &(0x7f0000002600)=""/4096, 0x0, 0x0, {r2}}, 0x58) 4.949383292s ago: executing program 0 (id=7353): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xbc) syz_usb_disconnect(r0) 1.732143073s ago: executing program 0 (id=7434): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 1.504321066s ago: executing program 5 (id=7436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2404e004}, 0x804) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 4) 1.503683602s ago: executing program 5 (id=7437): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) 1.431406384s ago: executing program 5 (id=7438): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, 0x0, 0x282d) 1.431160965s ago: executing program 5 (id=7439): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, 0x0, 0x282d) 1.315671674s ago: executing program 5 (id=7440): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f00000001c0)=0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x20008880}}], 0x2, 0x4c054) r4 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000200)={0x1}) ioctl$VHOST_VDPA_SET_GROUP_ASID(r5, 0x4008af7c, &(0x7f0000000440)={0x1, 0x5}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071300000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203200000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0x7ff, 0x10, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_prespec={0x44, 0x44, 0x2e, 0x3, 0x9, [{@loopback, 0x7}, {@multicast2}, {@broadcast, 0x6}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@empty, 0xffff}, {@loopback, 0xfffffff9}, {@local, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0x71, 0x3, 0x8, [{@multicast2, 0x6}, {@multicast2, 0x4}, {@local, 0x3}, {@multicast1, 0x7fffffff}, {@multicast1, 0xed}, {@private=0xa010102, 0x1000}, {@multicast1, 0x9}, {@multicast2}]}, @end]}}}}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) r12 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) ioctl$BLKIOMIN(r11, 0x1278, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, 0x0, r12}, 0x68) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x3, &(0x7f00000000c0)={0x0, 0x21}) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r13, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/151, 0x97}], 0x1, 0x9, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3, 0x8000, @vifc_lcl_addr=@empty, @empty}, 0x10) 1.121791534s ago: executing program 5 (id=7442): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xbc) syz_usb_disconnect(r0) 588.155848ms ago: executing program 7 (id=7448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x8000}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) getrusage(0x1, &(0x7f0000000340)) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 428.315926ms ago: executing program 7 (id=7450): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r0, 0x1, 0xffffffa7, @local}, 0x6b) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000006", 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) (fail_nth: 9) 353.361625ms ago: executing program 6 (id=7452): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') chdir(&(0x7f0000000080)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x300000000000000) 353.174034ms ago: executing program 6 (id=7453): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x1ccc3, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x8, r2, 0x0, r0}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x8a, 0x0, 0x1, 0x7, 0x6, 0x2, "03e8499ee3367de54fdbe217a65adcc5ff75bc775d35f520beed68507b22389413ad463166ee731fac6df015ed913f1ea367cb37c81078cf2109ffd4b0419392332717cb39363d12f70133d6d97ea63c7c813a52e4a846f12e818f9bc600f43057bc708b6f538ac1b3d9d4c1e3409c5d4697d4a96303fb8b6ac1f8f56d30e5045fa8e0fe814ae9f34d17"}}, 0x1a2) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x13, r0, 0x100000000) 352.798388ms ago: executing program 7 (id=7454): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0xfff5, 0x0, 0x10}, 0x0) 267.244267ms ago: executing program 6 (id=7455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00000000ffffff8c000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 262.055778ms ago: executing program 7 (id=7456): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="450f21aa6767470f01cf0fdf67e566470f3a2095db00d27200f3450fc73486440f306736660fc736440f01d10f01f866b833008ec0", 0x35}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841c0, 0x2c) recvfrom$netrom(r6, &(0x7f00000000c0)=""/211, 0xd3, 0x40010002, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x125d, &(0x7f0000001080)) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="450f21aa6767470f01cf0fdf67e566470f3a2095db00d27200f3450fc73486440f306736660fc736440f01d10f01f866b833008ec0", 0x35}], 0x1, 0x2, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841c0, 0x2c) (async) recvfrom$netrom(r6, &(0x7f00000000c0)=""/211, 0xd3, 0x40010002, 0x0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x125d, &(0x7f0000001080)) (async) 261.858143ms ago: executing program 6 (id=7457): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) chmod(&(0x7f0000000200)='./file0\x00', 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) close(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x149840, 0x1c1) readv(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x41}}, 0x4004003) syz_emit_ethernet(0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000015ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe800000000000000000000000002f1d7b15a4a9fb5d9d00aa00030e22001690780203000000000000ffb00afe4e70"], 0x0) socket(0x2c, 0xa, 0xfffffffd) 201.507755ms ago: executing program 6 (id=7458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000003"]) 83.806026ms ago: executing program 6 (id=7459): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0xcf, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0xb, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x5, 0x54, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0x5000, 0x9}, 0x10000, 0x0, 0x0, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x8, 0xc5]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 20) 83.600789ms ago: executing program 0 (id=7460): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x1000000}}}}}}}}, 0x0) 82.015373ms ago: executing program 0 (id=7461): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0xb, 0x8, &(0x7f0000000040)={0x84, "43124675050566a3ae00"}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x17, 0x70, 0x1, 0x0, 0x2, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x43, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r12, r11, 0x25, 0x2, @val=@tcx={@void, @value=r12}}, 0x1c) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) (async) splice(r1, 0x0, r5, 0x0, 0x714f, 0x0) r13 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r13}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {0xffff, 0xffff}, {0xa, 0xfffc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10010, 0xf, 0x0, 0x3}}]}}]}, 0x44}}, 0x4000010) 81.941173ms ago: executing program 7 (id=7462): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x3, 0xef, 0x9}]}, 0x10) syz_emit_ethernet(0x6f, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x2e, 0xe0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x80000001, 0x8b, "01b466a110b1d32aa6b1af708e214065d9f570627cf7cbfe5f50ee0119cbb99384791c71d67b42efbfa9e1bfb0b3a411f187dc2414"}}}}}}, 0x0) 280.602µs ago: executing program 7 (id=7463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e100020111200509040200000000000000240600014812987e052400df000d240f0101000000000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b01040300"], 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000500)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=[r3], 0x0, 0x0, 0x0, 0x0, 0x7f}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={r3, r5, r6, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) 0s ago: executing program 0 (id=7464): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @local}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66ba610066ed450fc772f3c4220d47e00f01dfc42215be4f00f30f01f82e65450f00180f3235000800000f300f01e6664d0faef7", 0x34}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000380)=0x4) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000003c0)) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000280)) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x14, 0x18, {0x1}}], 0x18}) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0) mmap$KVM_VCPU(&(0x7f0000ad6000/0x2000)=nil, r11, 0x1000002, 0x40010, r6, 0x0) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000107000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="c74424000c860000c7442402204a0000c7442406000000000f011c24c4e2fd22c4f00fba75807bc7442400f205e8b5c74424027e800000c7442406000000000f011c24c4e281b679c90f0936360f01c40f22e7b9b70a00000f3266baf80cb8e66b8a8bef66bafc0c66ed", 0x6a}], 0x1, 0x14, &(0x7f0000000240)=[@cr4={0x1, 0x100}], 0x1) kernel console output (not intermixed with test programs): [ 451.869240][T16382] should_fail_ex+0x512/0x640 [ 451.869262][T16382] _copy_to_user+0x32/0xd0 [ 451.869286][T16382] simple_read_from_buffer+0xcb/0x170 [ 451.869305][T16382] proc_fail_nth_read+0x197/0x240 [ 451.869326][T16382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.869372][T16382] ? security_file_permission+0x71/0x210 [ 451.869399][T16382] ? rw_verify_area+0xcf/0x6c0 [ 451.869427][T16382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.869446][T16382] vfs_read+0x1e1/0xcf0 [ 451.869465][T16382] ? __pfx___mutex_lock+0x10/0x10 [ 451.869485][T16382] ? __pfx_vfs_read+0x10/0x10 [ 451.869501][T16382] ? __fget_files+0x204/0x3c0 [ 451.869519][T16382] ? rcu_is_watching+0x12/0xc0 [ 451.869544][T16382] ? __fget_files+0x20e/0x3c0 [ 451.869566][T16382] ksys_read+0x12a/0x250 [ 451.869583][T16382] ? __pfx_ksys_read+0x10/0x10 [ 451.869599][T16382] ? fput+0x9b/0xd0 [ 451.869623][T16382] do_syscall_64+0xcd/0x4c0 [ 451.869643][T16382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.869662][T16382] RIP: 0033:0x7faa9538d5fc [ 451.869676][T16382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 451.869693][T16382] RSP: 002b:00007faa9625f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 451.869709][T16382] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538d5fc [ 451.869721][T16382] RDX: 000000000000000f RSI: 00007faa9625f0a0 RDI: 0000000000000006 [ 451.869732][T16382] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 451.869742][T16382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.869753][T16382] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 451.869772][T16382] [ 451.983003][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7097'. [ 452.016807][T16401] Option ''MO' to dns_resolver key: bad/missing value [ 452.169539][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7101'. [ 452.175332][T16419] netlink: 152 bytes leftover after parsing attributes in process `syz.7.7101'. [ 452.179187][T16419] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 452.217188][T16427] fuse: Bad value for 'group_id' [ 452.218870][T16427] fuse: Bad value for 'group_id' [ 452.331901][T16444] netlink: 'syz.7.7109': attribute type 17 has an invalid length. [ 452.335596][T16444] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7109'. [ 452.339484][T16444] macvtap0: entered allmulticast mode [ 452.341879][T16444] veth0_macvtap: entered allmulticast mode [ 452.346829][T16444] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 452.356355][T16444] fuse: Unknown parameter '00000000000000000008' [ 452.592820][T16465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.660207][T16471] binder: Binderfs stats mode cannot be changed during a remount [ 452.790183][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7120'. [ 452.792237][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.812567][T16488] macvlan2: entered promiscuous mode [ 452.814575][T16488] macvlan2: entered allmulticast mode [ 452.816847][T16488] bond3: (slave macvlan2): Opening slave failed [ 453.383117][T16593] FAULT_INJECTION: forcing a failure. [ 453.383117][T16593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.387189][T16593] CPU: 0 UID: 0 PID: 16593 Comm: syz.7.7135 Not tainted syzkaller #0 PREEMPT(full) [ 453.387205][T16593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 453.387212][T16593] Call Trace: [ 453.387217][T16593] [ 453.387222][T16593] dump_stack_lvl+0x16c/0x1f0 [ 453.387237][T16593] should_fail_ex+0x512/0x640 [ 453.387252][T16593] _copy_from_iter+0x29f/0x16f0 [ 453.387267][T16593] ? _copy_from_iter+0x15d/0x16f0 [ 453.387281][T16593] ? __pfx__copy_from_iter+0x10/0x10 [ 453.387296][T16593] ? __pfx__copy_from_iter+0x10/0x10 [ 453.387310][T16593] ? _copy_from_iter+0x15d/0x16f0 [ 453.387325][T16593] copy_page_from_iter+0xde/0x180 [ 453.387340][T16593] skb_copy_datagram_from_iter+0x2a0/0x740 [ 453.387361][T16593] tun_get_user+0x185c/0x3ce0 [ 453.387380][T16593] ? __pfx_tun_get_user+0x10/0x10 [ 453.387396][T16593] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 453.387412][T16593] ? tun_get+0x191/0x370 [ 453.387424][T16593] ? rcu_is_watching+0x12/0xc0 [ 453.387439][T16593] ? lock_release+0x201/0x2f0 [ 453.387458][T16593] tun_chr_write_iter+0xdc/0x210 [ 453.387474][T16593] vfs_write+0x7d3/0x11d0 [ 453.387486][T16593] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 453.387502][T16593] ? __pfx_vfs_write+0x10/0x10 [ 453.387513][T16593] ? lock_release+0x201/0x2f0 [ 453.387533][T16593] ksys_write+0x12a/0x250 [ 453.387544][T16593] ? __pfx_ksys_write+0x10/0x10 [ 453.387557][T16593] do_syscall_64+0xcd/0x4c0 [ 453.387570][T16593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.387582][T16593] RIP: 0033:0x7f7458d8ebe9 [ 453.387591][T16593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.387603][T16593] RSP: 002b:00007f7459b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.387614][T16593] RAX: ffffffffffffffda RBX: 00007f7458fb5fa0 RCX: 00007f7458d8ebe9 [ 453.387621][T16593] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 453.387628][T16593] RBP: 00007f7459b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 453.387635][T16593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.387642][T16593] R13: 00007f7458fb6038 R14: 00007f7458fb5fa0 R15: 00007fff3f69aa68 [ 453.387652][T16593] [ 453.587785][ T6010] IPVS: starting estimator thread 0... [ 453.614195][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7137'. [ 453.690314][T16611] IPVS: using max 55 ests per chain, 132000 per kthread [ 453.697034][T16625] FAULT_INJECTION: forcing a failure. [ 453.697034][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 453.698542][T16633] FAULT_INJECTION: forcing a failure. [ 453.698542][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 453.701808][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.7.7143 Not tainted syzkaller #0 PREEMPT(full) [ 453.701829][T16625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 453.701839][T16625] Call Trace: [ 453.701844][T16625] [ 453.701850][T16625] dump_stack_lvl+0x16c/0x1f0 [ 453.701870][T16625] should_fail_ex+0x512/0x640 [ 453.701889][T16625] should_failslab+0xc2/0x120 [ 453.701906][T16625] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 453.701922][T16625] ? __pfx___might_resched+0x10/0x10 [ 453.701940][T16625] ? alloc_vmap_area+0x645/0x29c0 [ 453.701960][T16625] alloc_vmap_area+0x645/0x29c0 [ 453.701983][T16625] ? __pfx_alloc_vmap_area+0x10/0x10 [ 453.702004][T16625] __get_vm_area_node+0x1ca/0x330 [ 453.702026][T16625] __vmalloc_node_range_noprof+0x271/0x14b0 [ 453.702047][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 453.702062][T16625] ? lock_release+0x201/0x2f0 [ 453.702085][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 453.702099][T16625] ? lock_release+0x201/0x2f0 [ 453.702122][T16625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 453.702146][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 453.702159][T16625] __vmalloc_node_noprof+0xad/0xf0 [ 453.702180][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 453.702196][T16625] copy_process+0x2c70/0x7690 [ 453.702219][T16625] ? __pfx_copy_process+0x10/0x10 [ 453.702240][T16625] ? lockdep_init_map_type+0x5c/0x280 [ 453.702254][T16625] ? __raw_spin_lock_init+0x3a/0x110 [ 453.702268][T16625] ? lockdep_init_map_type+0x5c/0x280 [ 453.702282][T16625] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 453.702302][T16625] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 453.702326][T16625] vhost_task_create+0x1d2/0x2e0 [ 453.702340][T16625] ? __pfx_vhost_task_create+0x10/0x10 [ 453.702357][T16625] ? __pfx_vhost_task_fn+0x10/0x10 [ 453.702372][T16625] ? rcu_is_watching+0x12/0xc0 [ 453.702390][T16625] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 453.702411][T16625] kvm_mmu_post_init_vm+0x1b7/0x380 [ 453.702428][T16625] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 453.702450][T16625] ? rcu_is_watching+0x12/0xc0 [ 453.702468][T16625] ? lock_release+0x201/0x2f0 [ 453.702491][T16625] kvm_vcpu_ioctl+0x5eb/0x1690 [ 453.702512][T16625] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.702530][T16625] ? preempt_count_add+0x76/0x150 [ 453.702544][T16625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.702562][T16625] ? do_vfs_ioctl+0x128/0x14f0 [ 453.702584][T16625] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 453.702605][T16625] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 453.702630][T16625] ? rcu_is_watching+0x12/0xc0 [ 453.702648][T16625] ? __fget_files+0x204/0x3c0 [ 453.702663][T16625] ? hook_file_ioctl_common+0x145/0x410 [ 453.702680][T16625] ? selinux_file_ioctl+0x180/0x270 [ 453.702699][T16625] ? selinux_file_ioctl+0xb4/0x270 [ 453.702719][T16625] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.702738][T16625] __x64_sys_ioctl+0x18b/0x210 [ 453.702760][T16625] do_syscall_64+0xcd/0x4c0 [ 453.702778][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.702799][T16625] RIP: 0033:0x7f7458d8ebe9 [ 453.702811][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.702825][T16625] RSP: 002b:00007f7459b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.702841][T16625] RAX: ffffffffffffffda RBX: 00007f7458fb5fa0 RCX: 00007f7458d8ebe9 [ 453.702851][T16625] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 453.702861][T16625] RBP: 00007f7459b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 453.702869][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.702878][T16625] R13: 00007f7458fb6038 R14: 00007f7458fb5fa0 R15: 00007fff3f69aa68 [ 453.702894][T16625] [ 453.702918][T16625] syz.7.7143: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 453.709280][T16633] CPU: 2 UID: 0 PID: 16633 Comm: syz.5.7145 Not tainted syzkaller #0 PREEMPT(full) [ 453.709298][T16633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 453.709305][T16633] Call Trace: [ 453.709309][T16633] [ 453.709314][T16633] dump_stack_lvl+0x16c/0x1f0 [ 453.709362][T16633] should_fail_ex+0x512/0x640 [ 453.709382][T16633] should_failslab+0xc2/0x120 [ 453.709405][T16633] __kmalloc_cache_noprof+0x6a/0x3e0 [ 453.709427][T16633] ? kvm_hv_vcpu_init+0xa4/0x7a0 [ 453.709444][T16633] kvm_hv_vcpu_init+0xa4/0x7a0 [ 453.709460][T16633] kvm_hv_set_msr_common+0x109/0x37d0 [ 453.709476][T16633] ? kasan_save_stack+0x42/0x60 [ 453.709487][T16633] ? kasan_save_stack+0x33/0x60 [ 453.709497][T16633] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 453.709513][T16633] ? memdup_user+0x2a/0xe0 [ 453.709524][T16633] ? kvm_arch_vcpu_ioctl+0xf3f/0x52d0 [ 453.709538][T16633] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 453.709552][T16633] ? __x64_sys_ioctl+0x18b/0x210 [ 453.709568][T16633] ? do_syscall_64+0xcd/0x4c0 [ 453.709580][T16633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.709594][T16633] kvm_set_msr_common+0x1aca/0x3bc0 [ 453.709607][T16633] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 453.709623][T16633] vmx_set_msr+0xc97/0x3730 [ 453.709633][T16633] ? __pfx_vmx_set_msr+0x10/0x10 [ 453.709644][T16633] ? rcu_is_watching+0x12/0xc0 [ 453.709659][T16633] kvm_set_msr_ignored_check+0x147/0x820 [ 453.709675][T16633] ? __pfx_kvm_set_msr_ignored_check+0x10/0x10 [ 453.709689][T16633] ? _copy_from_user+0x59/0xd0 [ 453.709705][T16633] kvm_arch_vcpu_ioctl+0x10df/0x52d0 [ 453.709719][T16633] ? kasan_save_stack+0x42/0x60 [ 453.709730][T16633] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 453.709743][T16633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.709757][T16633] ? kasan_save_stack+0x42/0x60 [ 453.709767][T16633] ? kasan_save_stack+0x33/0x60 [ 453.709777][T16633] ? kasan_save_track+0x14/0x30 [ 453.709787][T16633] ? kasan_save_free_info+0x3b/0x60 [ 453.709802][T16633] ? __kasan_slab_free+0x60/0x70 [ 453.709813][T16633] ? kfree+0x2b4/0x4d0 [ 453.709828][T16633] ? tomoyo_path_number_perm+0x470/0x580 [ 453.709847][T16633] ? security_file_ioctl+0x9b/0x240 [ 453.709863][T16633] ? __x64_sys_ioctl+0xb7/0x210 [ 453.709879][T16633] ? do_syscall_64+0xcd/0x4c0 [ 453.709893][T16633] ? __mutex_trylock_common+0xe9/0x250 [ 453.709911][T16633] ? __pfx___mutex_trylock_common+0x10/0x10 [ 453.709930][T16633] ? __pfx___might_resched+0x10/0x10 [ 453.709944][T16633] ? rcu_is_watching+0x12/0xc0 [ 453.709957][T16633] ? trace_contention_end+0xdd/0x130 [ 453.709967][T16633] ? __mutex_lock+0x1c5/0x1060 [ 453.709980][T16633] ? rcu_is_watching+0x12/0xc0 [ 453.709994][T16633] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 453.710008][T16633] ? __pfx___mutex_lock+0x10/0x10 [ 453.710020][T16633] ? tomoyo_path_number_perm+0x295/0x580 [ 453.710034][T16633] ? rcu_is_watching+0x12/0xc0 [ 453.710049][T16633] ? tomoyo_path_number_perm+0x18d/0x580 [ 453.710063][T16633] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 453.710077][T16633] kvm_vcpu_ioctl+0x1236/0x1690 [ 453.710092][T16633] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.710107][T16633] ? preempt_count_add+0x76/0x150 [ 453.710117][T16633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.710130][T16633] ? do_vfs_ioctl+0x128/0x14f0 [ 453.710146][T16633] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 453.710163][T16633] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 453.710182][T16633] ? rcu_is_watching+0x12/0xc0 [ 453.710195][T16633] ? __fget_files+0x204/0x3c0 [ 453.710207][T16633] ? hook_file_ioctl_common+0x145/0x410 [ 453.710220][T16633] ? selinux_file_ioctl+0x180/0x270 [ 453.710235][T16633] ? selinux_file_ioctl+0xb4/0x270 [ 453.710251][T16633] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 453.710266][T16633] __x64_sys_ioctl+0x18b/0x210 [ 453.710283][T16633] do_syscall_64+0xcd/0x4c0 [ 453.710295][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.710306][T16633] RIP: 0033:0x7f5932d8ebe9 [ 453.710317][T16633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.710328][T16633] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.710340][T16633] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 453.710347][T16633] RDX: 00002000000004c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 453.710354][T16633] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 453.710361][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.710368][T16633] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 453.710378][T16633] [ 453.904024][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 453.998955][T16625] ,cpuset=/,mems_allowed=0-1 [ 454.002538][T16625] CPU: 1 UID: 0 PID: 16625 Comm: syz.7.7143 Not tainted syzkaller #0 PREEMPT(full) [ 454.002553][T16625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.002560][T16625] Call Trace: [ 454.002565][T16625] [ 454.002569][T16625] dump_stack_lvl+0x16c/0x1f0 [ 454.002585][T16625] warn_alloc+0x248/0x3a0 [ 454.002605][T16625] ? __pfx_warn_alloc+0x10/0x10 [ 454.002616][T16625] ? kfree+0x2b4/0x4d0 [ 454.002639][T16625] ? __get_vm_area_node+0x208/0x330 [ 454.002661][T16625] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 454.002686][T16625] ? lock_release+0x201/0x2f0 [ 454.002715][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 454.002733][T16625] ? lock_release+0x201/0x2f0 [ 454.002752][T16625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.002771][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 454.002782][T16625] __vmalloc_node_noprof+0xad/0xf0 [ 454.002798][T16625] ? vhost_task_create+0x1d2/0x2e0 [ 454.002809][T16625] copy_process+0x2c70/0x7690 [ 454.002828][T16625] ? __pfx_copy_process+0x10/0x10 [ 454.002845][T16625] ? lockdep_init_map_type+0x5c/0x280 [ 454.002856][T16625] ? __raw_spin_lock_init+0x3a/0x110 [ 454.002868][T16625] ? lockdep_init_map_type+0x5c/0x280 [ 454.002878][T16625] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 454.002894][T16625] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 454.002914][T16625] vhost_task_create+0x1d2/0x2e0 [ 454.002924][T16625] ? __pfx_vhost_task_create+0x10/0x10 [ 454.002937][T16625] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.002948][T16625] ? rcu_is_watching+0x12/0xc0 [ 454.002962][T16625] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 454.002978][T16625] kvm_mmu_post_init_vm+0x1b7/0x380 [ 454.002991][T16625] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 454.003007][T16625] ? rcu_is_watching+0x12/0xc0 [ 454.003020][T16625] ? lock_release+0x201/0x2f0 [ 454.003037][T16625] kvm_vcpu_ioctl+0x5eb/0x1690 [ 454.003054][T16625] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 454.003068][T16625] ? preempt_count_add+0x76/0x150 [ 454.003078][T16625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 454.003092][T16625] ? do_vfs_ioctl+0x128/0x14f0 [ 454.003109][T16625] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 454.003125][T16625] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 454.003144][T16625] ? rcu_is_watching+0x12/0xc0 [ 454.003158][T16625] ? __fget_files+0x204/0x3c0 [ 454.003169][T16625] ? hook_file_ioctl_common+0x145/0x410 [ 454.003182][T16625] ? selinux_file_ioctl+0x180/0x270 [ 454.003197][T16625] ? selinux_file_ioctl+0xb4/0x270 [ 454.003213][T16625] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 454.003227][T16625] __x64_sys_ioctl+0x18b/0x210 [ 454.003244][T16625] do_syscall_64+0xcd/0x4c0 [ 454.003257][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.003268][T16625] RIP: 0033:0x7f7458d8ebe9 [ 454.003276][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.003288][T16625] RSP: 002b:00007f7459b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.003298][T16625] RAX: ffffffffffffffda RBX: 00007f7458fb5fa0 RCX: 00007f7458d8ebe9 [ 454.003305][T16625] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 454.003312][T16625] RBP: 00007f7459b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 454.003319][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.003325][T16625] R13: 00007f7458fb6038 R14: 00007f7458fb5fa0 R15: 00007fff3f69aa68 [ 454.003336][T16625] [ 454.003341][T16625] Mem-Info: [ 454.113281][T16625] active_anon:19308 inactive_anon:33 isolated_anon:0 [ 454.113281][T16625] active_file:12783 inactive_file:8662 isolated_file:0 [ 454.113281][T16625] unevictable:1768 dirty:1020 writeback:0 [ 454.113281][T16625] slab_reclaimable:10268 slab_unreclaimable:93993 [ 454.113281][T16625] mapped:27924 shmem:10615 pagetables:1338 [ 454.113281][T16625] sec_pagetables:323 bounce:0 [ 454.113281][T16625] kernel_misc_reclaimable:0 [ 454.113281][T16625] free:440164 free_pcp:12025 free_cma:0 [ 454.126963][T16625] Node 0 active_anon:63728kB inactive_anon:132kB active_file:51132kB inactive_file:34512kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111696kB dirty:4076kB writeback:0kB shmem:25420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16208kB pagetables:4848kB sec_pagetables:1292kB all_unreclaimable? no Balloon:0kB [ 454.138004][T16625] Node 1 active_anon:13504kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:17040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 454.147549][T16625] Node 0 DMA free:14388kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:760kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:88kB local_pcp:32kB free_cma:0kB [ 454.158049][T16625] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 454.159882][T16625] Node 0 DMA32 free:152360kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62844kB inactive_anon:132kB active_file:51132kB inactive_file:34512kB unevictable:3536kB writepending:4076kB present:2080628kB managed:1263492kB mlocked:0kB bounce:0kB free_pcp:39604kB local_pcp:7180kB free_cma:0kB [ 454.173522][T16625] lowmem_reserve[]: 0 0 0 0 0 [ 454.175485][T16625] Node 1 Normal free:1593908kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13504kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:8508kB local_pcp:4688kB free_cma:0kB [ 454.185510][T16625] lowmem_reserve[]: 0 0 0 0 0 [ 454.187044][T16625] Node 0 DMA: 15*4kB (UM) 13*8kB (UM) 15*16kB (UM) 13*32kB (UM) 14*64kB (U) 13*128kB (UM) 11*256kB (UM) 8*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 14388kB [ 454.192061][T16625] Node 0 DMA32: 864*4kB (UME) 754*8kB (UM) 440*16kB (UM) 263*32kB (UME) 176*64kB (UME) 224*128kB (UME) 121*256kB (UM) 59*512kB (UME) 18*1024kB (UM) 4*2048kB (M) 0*4096kB = 152688kB [ 454.200296][T16625] Node 1 Normal: 264*4kB (UME) 301*8kB (UME) 283*16kB (UME) 368*32kB (UME) 224*64kB (UME) 162*128kB (UME) 104*256kB (UME) 46*512kB (UM) 38*1024kB (UM) 26*2048kB (UM) 341*4096kB (UM) = 1593912kB [ 454.207509][T16625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.211015][T16625] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 454.214732][T16625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.217824][T16625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.220738][T16625] 32091 total pagecache pages [ 454.222252][T16625] 32 pages in swap cache [ 454.223620][T16625] Free swap = 124868kB [ 454.225711][T16625] Total swap = 124996kB [ 454.227340][T16625] 1048443 pages RAM [ 454.228917][T16625] 0 pages HighMem/MovableOnly [ 454.230894][T16625] 283257 pages reserved [ 454.232602][T16625] 0 pages cma reserved [ 454.252949][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7150'. [ 454.255875][T16658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16658 comm=syz.0.7151 [ 454.323845][T16671] FAULT_INJECTION: forcing a failure. [ 454.323845][T16671] name failslab, interval 1, probability 0, space 0, times 0 [ 454.328383][T16671] CPU: 1 UID: 0 PID: 16671 Comm: syz.5.7154 Not tainted syzkaller #0 PREEMPT(full) [ 454.328406][T16671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.328416][T16671] Call Trace: [ 454.328421][T16671] [ 454.328428][T16671] dump_stack_lvl+0x16c/0x1f0 [ 454.328450][T16671] should_fail_ex+0x512/0x640 [ 454.328470][T16671] should_failslab+0xc2/0x120 [ 454.328489][T16671] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 454.328506][T16671] ? __skb_ext_alloc+0x1a/0x80 [ 454.328530][T16671] __skb_ext_alloc+0x1a/0x80 [ 454.328550][T16671] skb_ext_add+0x232/0x7a0 [ 454.328571][T16671] ? kfree_skbmem+0x1a4/0x1f0 [ 454.328597][T16671] secpath_set+0xfb/0x1f0 [ 454.328615][T16671] xfrm_input+0x77f/0x71b0 [ 454.328633][T16671] ? unwind_next_frame+0x3f4/0x20a0 [ 454.328652][T16671] ? rcu_is_watching+0x12/0xc0 [ 454.328675][T16671] ? __pfx_xfrm_input+0x10/0x10 [ 454.328693][T16671] ? rcu_is_watching+0x12/0xc0 [ 454.328712][T16671] ? ip_tunnel_lookup+0x805/0xb70 [ 454.328733][T16671] vti_input+0x2be/0x3d0 [ 454.328759][T16671] ? __pfx_vti_input+0x10/0x10 [ 454.328786][T16671] xfrm4_rcv_encap+0x2b4/0x720 [ 454.328807][T16671] xfrm4_udp_encap_rcv+0x4bd/0x780 [ 454.328825][T16671] ? __pfx_xfrm4_udp_encap_rcv+0x10/0x10 [ 454.328844][T16671] udp_queue_rcv_one_skb+0xb3e/0x1940 [ 454.328864][T16671] ? __pfx_udp_queue_rcv_one_skb+0x10/0x10 [ 454.328883][T16671] ? __udp4_lib_lookup+0x730/0xa10 [ 454.328900][T16671] ? __udp4_lib_lookup+0x434/0xa10 [ 454.328918][T16671] udp_queue_rcv_skb+0x198/0xdb0 [ 454.328938][T16671] udp_unicast_rcv_skb+0x165/0x3b0 [ 454.328958][T16671] __udp4_lib_rcv+0x2626/0x3500 [ 454.328981][T16671] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 454.329002][T16671] ? rcu_is_watching+0x12/0xc0 [ 454.329021][T16671] ? __pfx_udp_rcv+0x10/0x10 [ 454.329040][T16671] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 454.329058][T16671] ip_local_deliver_finish+0x3f2/0x720 [ 454.329075][T16671] ip_local_deliver+0x18e/0x1f0 [ 454.329091][T16671] ip_sublist_rcv_finish+0x2ce/0x660 [ 454.329108][T16671] ip_list_rcv_finish+0x552/0x720 [ 454.329125][T16671] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 454.329140][T16671] ? __pfx_ip_rcv_finish+0x10/0x10 [ 454.329156][T16671] ? ip_rcv_core+0x934/0xe80 [ 454.329181][T16671] ip_list_rcv+0x335/0x450 [ 454.329197][T16671] ? __pfx_ip_list_rcv+0x10/0x10 [ 454.329212][T16671] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 454.329228][T16671] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 454.329245][T16671] ? bpf_test_run_xdp_live+0x34d/0x500 [ 454.329263][T16671] ? bpf_prog_test_run_xdp+0x824/0x1590 [ 454.329278][T16671] ? __sys_bpf+0x104d/0x4de0 [ 454.329301][T16671] ? __pfx_ip_list_rcv+0x10/0x10 [ 454.329337][T16671] __netif_receive_skb_list_core+0x752/0x950 [ 454.329367][T16671] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 454.329393][T16671] ? lock_acquire+0x2cd/0x350 [ 454.329419][T16671] netif_receive_skb_list_internal+0x752/0xdb0 [ 454.329446][T16671] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 454.329473][T16671] ? __pfx_eth_type_trans+0x10/0x10 [ 454.329492][T16671] ? __build_skb_around+0x278/0x3b0 [ 454.329520][T16671] netif_receive_skb_list+0x4d/0x4b0 [ 454.329545][T16671] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 454.329567][T16671] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 454.329586][T16671] ? rcu_is_watching+0x12/0xc0 [ 454.329614][T16671] ? read_tsc+0x9/0x20 [ 454.329635][T16671] ? ktime_get+0x1a7/0x310 [ 454.329661][T16671] bpf_test_run_xdp_live+0x34d/0x500 [ 454.329677][T16671] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 454.329696][T16671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 454.329719][T16671] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 454.329747][T16671] ? lock_release+0x201/0x2f0 [ 454.329780][T16671] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 454.329799][T16671] ? bpf_dispatcher_xdp+0x800/0x1000 [ 454.329814][T16671] ? bpf_dispatcher_xdp+0x800/0x1000 [ 454.329827][T16671] ? bpf_dispatcher_xdp+0x800/0x1000 [ 454.329842][T16671] bpf_prog_test_run_xdp+0x824/0x1590 [ 454.329863][T16671] ? lock_release+0x201/0x2f0 [ 454.329888][T16671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.329906][T16671] ? __might_fault+0x130/0x190 [ 454.329925][T16671] ? fput+0x9b/0xd0 [ 454.329946][T16671] ? __bpf_prog_get+0x97/0x2a0 [ 454.329963][T16671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.329980][T16671] __sys_bpf+0x104d/0x4de0 [ 454.330001][T16671] ? lock_release+0x201/0x2f0 [ 454.330028][T16671] ? __pfx___sys_bpf+0x10/0x10 [ 454.330048][T16671] ? ksys_write+0x190/0x250 [ 454.330064][T16671] ? rcu_is_watching+0x12/0xc0 [ 454.330083][T16671] ? lock_release+0x201/0x2f0 [ 454.330109][T16671] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 454.330134][T16671] ? fput+0x9b/0xd0 [ 454.330155][T16671] ? ksys_write+0x1ac/0x250 [ 454.330171][T16671] ? __pfx_ksys_write+0x10/0x10 [ 454.330191][T16671] __x64_sys_bpf+0x78/0xc0 [ 454.330213][T16671] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 454.330234][T16671] do_syscall_64+0xcd/0x4c0 [ 454.330254][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.330271][T16671] RIP: 0033:0x7f5932d8ebe9 [ 454.330286][T16671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.330303][T16671] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.330321][T16671] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 454.330334][T16671] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 454.330345][T16671] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 454.330356][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.330367][T16671] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 454.330385][T16671] [ 454.656334][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7163'. [ 454.662646][T16695] chnl_net:caif_netlink_parms(): no params data found [ 454.667314][T16700] overlay: ./file0 is not a directory [ 454.769606][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7166'. [ 455.015870][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 455.154843][T11612] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 455.231514][T16777] FAULT_INJECTION: forcing a failure. [ 455.231514][T16777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.235411][T16777] CPU: 0 UID: 0 PID: 16777 Comm: syz.5.7181 Not tainted syzkaller #0 PREEMPT(full) [ 455.235426][T16777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.235433][T16777] Call Trace: [ 455.235438][T16777] [ 455.235442][T16777] dump_stack_lvl+0x16c/0x1f0 [ 455.235457][T16777] should_fail_ex+0x512/0x640 [ 455.235471][T16777] _copy_from_iter+0x29f/0x16f0 [ 455.235487][T16777] ? __pfx__copy_from_iter+0x10/0x10 [ 455.235502][T16777] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 455.235516][T16777] ? rcu_is_watching+0x12/0xc0 [ 455.235533][T16777] copy_page_from_iter+0xde/0x180 [ 455.235551][T16777] tun_build_skb.constprop.0+0x2e8/0x1500 [ 455.235570][T16777] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 455.235585][T16777] ? unwind_get_return_address+0x59/0xa0 [ 455.235599][T16777] ? arch_stack_walk+0xa6/0x100 [ 455.235616][T16777] ? _kstrtoull+0x145/0x200 [ 455.235626][T16777] ? __pfx__kstrtoull+0x10/0x10 [ 455.235636][T16777] tun_get_user+0x14ae/0x3ce0 [ 455.235654][T16777] ? __pfx_tun_get_user+0x10/0x10 [ 455.235669][T16777] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 455.235685][T16777] ? tun_get+0x191/0x370 [ 455.235698][T16777] ? rcu_is_watching+0x12/0xc0 [ 455.235711][T16777] ? lock_release+0x201/0x2f0 [ 455.235730][T16777] tun_chr_write_iter+0xdc/0x210 [ 455.235745][T16777] vfs_write+0x7d3/0x11d0 [ 455.235757][T16777] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 455.235773][T16777] ? __pfx_vfs_write+0x10/0x10 [ 455.235784][T16777] ? lock_release+0x201/0x2f0 [ 455.235804][T16777] ksys_write+0x12a/0x250 [ 455.235815][T16777] ? __pfx_ksys_write+0x10/0x10 [ 455.235828][T16777] do_syscall_64+0xcd/0x4c0 [ 455.235841][T16777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.235852][T16777] RIP: 0033:0x7f5932d8d69f [ 455.235862][T16777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 455.235873][T16777] RSP: 002b:00007f5933b49000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 455.235884][T16777] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8d69f [ 455.235892][T16777] RDX: 000000000000004c RSI: 0000200000000140 RDI: 00000000000000c8 [ 455.235899][T16777] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 455.235906][T16777] R10: 000000000000004c R11: 0000000000000293 R12: 0000000000000001 [ 455.235912][T16777] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 455.235924][T16777] [ 455.329233][T11612] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.336987][T11612] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.339984][T11612] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.340142][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7182'. [ 455.352043][T11612] usb 12-1: config 0 descriptor?? [ 455.374015][T16779] macvlan2: entered promiscuous mode [ 455.375692][T16779] macvlan2: entered allmulticast mode [ 455.378273][T16779] bond4: (slave macvlan2): Opening slave failed [ 455.572869][T11612] usbhid 12-1:0.0: can't add hid device: -71 [ 455.574732][T11612] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 455.577598][T11612] usb 12-1: USB disconnect, device number 12 [ 455.658049][T16855] tmpfs: Invalid gid '0x00000000ffffffff' [ 455.728311][T16862] ceph: Path missing in source [ 455.735793][T16862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=16862 comm=syz.5.7192 [ 455.896432][T16870] sp0: Synchronizing with TNC [ 455.903818][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 455.905981][T16870] sp0: Found TNC [ 456.042202][ T7957] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 456.127713][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 456.204191][ T7957] usb 12-1: Using ep0 maxpacket: 32 [ 456.207738][ T7957] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.211922][ T7957] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 456.215593][ T7957] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.220574][ T7957] usb 12-1: config 0 descriptor?? [ 456.224768][ T7957] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 456.229666][ T7957] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 456.394554][ T40] kauditd_printk_skb: 1588 callbacks suppressed [ 456.394567][ T40] audit: type=1400 audit(1756310543.163:60923): avc: denied { read write } for pid=16884 comm="syz.0.7194" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 456.404996][ T40] audit: type=1400 audit(1756310543.163:60924): avc: denied { open } for pid=16884 comm="syz.0.7194" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 456.413390][ T40] audit: type=1400 audit(1756310543.163:60925): avc: denied { ioctl } for pid=16884 comm="syz.0.7194" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 456.438754][ T40] audit: type=1400 audit(1756310543.219:60926): avc: denied { ioctl } for pid=16733 comm="syz.7.7170" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.447064][ T40] audit: type=1400 audit(1756310543.219:60927): avc: denied { read write } for pid=7971 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.455319][ T40] audit: type=1400 audit(1756310543.219:60928): avc: denied { recv } for pid=5934 comm="syz-executor" saddr=127.0.0.1 src=56950 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 456.463625][ T40] audit: type=1400 audit(1756310543.219:60929): avc: denied { open } for pid=7971 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.466586][T16890] binder: 16889:16890 ioctl c0306201 200000000040 returned -22 [ 456.472256][ T40] audit: type=1400 audit(1756310543.219:60930): avc: denied { ioctl } for pid=7971 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 456.475488][T16890] binder: 16889:16890 ioctl c0306201 200000000380 returned -22 [ 456.484560][ T40] audit: type=1400 audit(1756310543.219:60931): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36474 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 456.494348][ T40] audit: type=1400 audit(1756310543.238:60932): avc: denied { relabelfrom } for pid=16889 comm="syz.6.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 456.653664][ T7957] usb 12-1: USB disconnect, device number 13 [ 456.657411][ T7957] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 456.844154][ T1347] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 456.993686][ T1347] usb 11-1: device descriptor read/64, error -71 [ 457.239882][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 457.271738][ T1347] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 457.307305][T16925] geneve2: entered promiscuous mode [ 457.308946][T16925] geneve2: entered allmulticast mode [ 457.421268][ T1347] usb 11-1: device descriptor read/64, error -71 [ 457.469438][T16948] /dev/sg0: Can't lookup blockdev [ 457.550648][ T1347] usb usb11-port1: attempt power cycle [ 457.926023][ T1347] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 457.934409][ T6053] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 457.945855][ T1347] usb 11-1: device descriptor read/8, error -71 [ 458.094763][ T5968] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 458.096537][ T6053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.101081][ T6053] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.101965][T16869] [U] `` [ 458.104829][ T6053] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 458.109402][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.113615][ T6053] usb 5-1: config 0 descriptor?? [ 458.201660][ T1347] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 458.208401][T16976] binder: 16974:16976 ioctl c0306201 200000000040 returned -22 [ 458.211036][T16976] binder: 16974:16976 ioctl c0306201 200000000380 returned -22 [ 458.225217][ T1347] usb 11-1: device descriptor read/8, error -71 [ 458.341609][ T1347] usb usb11-port1: unable to enumerate USB device [ 458.351366][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 458.529481][T17006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17006 comm=syz.5.7214 [ 458.550161][ T6053] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 458.553134][ T6053] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 458.557752][ T6053] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.000E/input/input68 [ 458.569601][ T6053] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 459.323032][T17074] program syz.7.7228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.332033][T17077] program syz.7.7228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.371948][T17082] binder_alloc: 17081: binder_alloc_buf size 4294967304 failed, no address space [ 459.374947][T17082] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 459.463144][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 459.540958][T17110] geneve2: entered promiscuous mode [ 459.542698][T17110] geneve2: entered allmulticast mode [ 459.695424][T17119] FAULT_INJECTION: forcing a failure. [ 459.695424][T17119] name failslab, interval 1, probability 0, space 0, times 0 [ 459.699404][T17119] CPU: 3 UID: 0 PID: 17119 Comm: syz.5.7238 Not tainted syzkaller #0 PREEMPT(full) [ 459.699420][T17119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.699427][T17119] Call Trace: [ 459.699431][T17119] [ 459.699436][T17119] dump_stack_lvl+0x16c/0x1f0 [ 459.699452][T17119] should_fail_ex+0x512/0x640 [ 459.699489][T17119] should_failslab+0xc2/0x120 [ 459.699503][T17119] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 459.699515][T17119] ? __skb_ext_alloc+0x1a/0x80 [ 459.699532][T17119] __skb_ext_alloc+0x1a/0x80 [ 459.699551][T17119] skb_ext_add+0x232/0x7a0 [ 459.699566][T17119] ? kfree_skbmem+0x1a4/0x1f0 [ 459.699582][T17119] secpath_set+0xfb/0x1f0 [ 459.699595][T17119] xfrm_input+0x77f/0x71b0 [ 459.699606][T17119] ? rcu_is_watching+0x12/0xc0 [ 459.699621][T17119] ? unwind_next_frame+0x3f4/0x20a0 [ 459.699636][T17119] ? rcu_is_watching+0x12/0xc0 [ 459.699657][T17119] ? __pfx_xfrm_input+0x10/0x10 [ 459.699674][T17119] ? rcu_is_watching+0x12/0xc0 [ 459.699694][T17119] ? ip_tunnel_lookup+0x805/0xb70 [ 459.699714][T17119] vti_input+0x2be/0x3d0 [ 459.699735][T17119] ? __pfx_vti_input+0x10/0x10 [ 459.699762][T17119] xfrm4_rcv_encap+0x2b4/0x720 [ 459.699777][T17119] xfrm4_udp_encap_rcv+0x4bd/0x780 [ 459.699791][T17119] ? __pfx_xfrm4_udp_encap_rcv+0x10/0x10 [ 459.699803][T17119] udp_queue_rcv_one_skb+0xb3e/0x1940 [ 459.699818][T17119] ? __pfx_udp_queue_rcv_one_skb+0x10/0x10 [ 459.699831][T17119] ? __udp4_lib_lookup+0x730/0xa10 [ 459.699843][T17119] ? __udp4_lib_lookup+0x434/0xa10 [ 459.699855][T17119] udp_queue_rcv_skb+0x198/0xdb0 [ 459.699868][T17119] ? lock_release+0x201/0x2f0 [ 459.699886][T17119] udp_unicast_rcv_skb+0x165/0x3b0 [ 459.699899][T17119] __udp4_lib_rcv+0x2626/0x3500 [ 459.699915][T17119] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 459.699930][T17119] ? rcu_is_watching+0x12/0xc0 [ 459.699944][T17119] ? __pfx_udp_rcv+0x10/0x10 [ 459.699957][T17119] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 459.699969][T17119] ip_local_deliver_finish+0x3f2/0x720 [ 459.699981][T17119] ip_local_deliver+0x18e/0x1f0 [ 459.699991][T17119] ip_sublist_rcv_finish+0x2ce/0x660 [ 459.700003][T17119] ip_list_rcv_finish+0x552/0x720 [ 459.700014][T17119] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 459.700024][T17119] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.700034][T17119] ? ip_rcv_core+0x934/0xe80 [ 459.700052][T17119] ip_list_rcv+0x335/0x450 [ 459.700063][T17119] ? __pfx_ip_list_rcv+0x10/0x10 [ 459.700073][T17119] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 459.700084][T17119] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 459.700095][T17119] ? bpf_test_run_xdp_live+0x34d/0x500 [ 459.700105][T17119] ? bpf_prog_test_run_xdp+0x824/0x1590 [ 459.700116][T17119] ? __sys_bpf+0x104d/0x4de0 [ 459.700130][T17119] ? __pfx_ip_list_rcv+0x10/0x10 [ 459.700141][T17119] __netif_receive_skb_list_core+0x752/0x950 [ 459.700161][T17119] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 459.700179][T17119] ? lock_acquire+0x2cd/0x350 [ 459.700198][T17119] netif_receive_skb_list_internal+0x752/0xdb0 [ 459.700218][T17119] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 459.700236][T17119] ? __pfx_eth_type_trans+0x10/0x10 [ 459.700249][T17119] ? __build_skb_around+0x278/0x3b0 [ 459.700267][T17119] netif_receive_skb_list+0x4d/0x4b0 [ 459.700284][T17119] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 459.700299][T17119] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 459.700310][T17119] ? rcu_is_watching+0x12/0xc0 [ 459.700326][T17119] ? read_tsc+0x9/0x20 [ 459.700340][T17119] ? ktime_get+0x1a7/0x310 [ 459.700357][T17119] bpf_test_run_xdp_live+0x34d/0x500 [ 459.700368][T17119] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 459.700380][T17119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.700394][T17119] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 459.700412][T17119] ? lock_release+0x201/0x2f0 [ 459.700433][T17119] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 459.700445][T17119] ? bpf_dispatcher_xdp+0x800/0x1000 [ 459.700455][T17119] ? bpf_dispatcher_xdp+0x800/0x1000 [ 459.700464][T17119] ? bpf_dispatcher_xdp+0x800/0x1000 [ 459.700475][T17119] bpf_prog_test_run_xdp+0x824/0x1590 [ 459.700488][T17119] ? lock_release+0x201/0x2f0 [ 459.700505][T17119] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 459.700517][T17119] ? __might_fault+0x130/0x190 [ 459.700529][T17119] ? fput+0x9b/0xd0 [ 459.700548][T17119] ? __bpf_prog_get+0x97/0x2a0 [ 459.700559][T17119] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 459.700570][T17119] __sys_bpf+0x104d/0x4de0 [ 459.700584][T17119] ? lock_release+0x201/0x2f0 [ 459.700602][T17119] ? __pfx___sys_bpf+0x10/0x10 [ 459.700616][T17119] ? ksys_write+0x190/0x250 [ 459.700627][T17119] ? rcu_is_watching+0x12/0xc0 [ 459.700640][T17119] ? lock_release+0x201/0x2f0 [ 459.700658][T17119] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 459.700674][T17119] ? fput+0x9b/0xd0 [ 459.700687][T17119] ? ksys_write+0x1ac/0x250 [ 459.700698][T17119] ? __pfx_ksys_write+0x10/0x10 [ 459.700710][T17119] __x64_sys_bpf+0x78/0xc0 [ 459.700724][T17119] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 459.700738][T17119] do_syscall_64+0xcd/0x4c0 [ 459.700751][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.700763][T17119] RIP: 0033:0x7f5932d8ebe9 [ 459.700772][T17119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.700783][T17119] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.700796][T17119] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 459.700803][T17119] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 459.700810][T17119] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 459.700817][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.700823][T17119] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 459.700834][T17119] [ 459.973399][T17138] FAULT_INJECTION: forcing a failure. [ 459.973399][T17138] name failslab, interval 1, probability 0, space 0, times 0 [ 459.979746][T17138] CPU: 0 UID: 0 PID: 17138 Comm: syz.5.7242 Not tainted syzkaller #0 PREEMPT(full) [ 459.979764][T17138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.979771][T17138] Call Trace: [ 459.979776][T17138] [ 459.979781][T17138] dump_stack_lvl+0x16c/0x1f0 [ 459.979797][T17138] should_fail_ex+0x512/0x640 [ 459.979811][T17138] ? tomoyo_encode2+0x100/0x3e0 [ 459.979829][T17138] should_failslab+0xc2/0x120 [ 459.979843][T17138] __kmalloc_noprof+0xd2/0x510 [ 459.979857][T17138] tomoyo_encode2+0x100/0x3e0 [ 459.979875][T17138] tomoyo_encode+0x29/0x50 [ 459.979892][T17138] tomoyo_realpath_from_path+0x18f/0x6e0 [ 459.979910][T17138] ? tomoyo_profile+0x47/0x60 [ 459.979922][T17138] tomoyo_path_number_perm+0x245/0x580 [ 459.979937][T17138] ? tomoyo_path_number_perm+0x237/0x580 [ 459.979953][T17138] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.979970][T17138] ? preempt_count_add+0x76/0x150 [ 459.979987][T17138] ? rcu_is_watching+0x12/0xc0 [ 459.980003][T17138] ? __fget_files+0x204/0x3c0 [ 459.980015][T17138] ? hook_file_ioctl_common+0x145/0x410 [ 459.980028][T17138] ? lock_release+0x201/0x2f0 [ 459.980047][T17138] ? __fget_files+0x20e/0x3c0 [ 459.980060][T17138] security_file_ioctl+0x9b/0x240 [ 459.980078][T17138] __x64_sys_ioctl+0xb7/0x210 [ 459.980097][T17138] do_syscall_64+0xcd/0x4c0 [ 459.980110][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.980122][T17138] RIP: 0033:0x7f5932d8ebe9 [ 459.980132][T17138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.980144][T17138] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.980156][T17138] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 459.980164][T17138] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 459.980171][T17138] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 459.980179][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.980186][T17138] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 459.980198][T17138] [ 459.980207][T17138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.180648][T17154] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.7245'. [ 460.186116][T17155] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.7245'. [ 460.291776][T17169] binder: 17168:17169 ioctl c0306201 0 returned -14 [ 460.405315][ T9] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 460.468149][ T6011] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 460.565764][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.569057][ T9] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 460.571795][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.574972][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 460.575321][ T9] usb 11-1: config 0 descriptor?? [ 460.607074][ T6011] usb 10-1: device descriptor read/64, error -71 [ 460.703338][ T7985] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 460.798870][ T9] usbhid 11-1:0.0: can't add hid device: -71 [ 460.800805][ T9] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 460.804503][ T9] usb 11-1: USB disconnect, device number 14 [ 460.863626][ T6011] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 460.870585][T11612] usb 5-1: USB disconnect, device number 36 [ 460.884968][ T7985] usb 12-1: Using ep0 maxpacket: 16 [ 460.889708][ T7985] usb 12-1: config 0 has no interfaces? [ 460.896405][ T7985] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.899255][ T7985] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.901822][ T7985] usb 12-1: Product: syz [ 460.903160][ T7985] usb 12-1: Manufacturer: syz [ 460.904630][ T7985] usb 12-1: SerialNumber: syz [ 460.907237][ T7985] usb 12-1: config 0 descriptor?? [ 461.002659][ T6011] usb 10-1: device descriptor read/64, error -71 [ 461.121522][ T6011] usb usb10-port1: attempt power cycle [ 461.182212][T17233] binder: 17232:17233 ioctl c0306201 200000000040 returned -22 [ 461.184911][T17233] binder: 17232:17233 ioctl c0306201 200000000380 returned -22 [ 461.190378][T17179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26112 sclass=netlink_route_socket pid=17179 comm=syz.7.7251 [ 461.259315][ T1347] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 461.286854][T17243] FAULT_INJECTION: forcing a failure. [ 461.286854][T17243] name failslab, interval 1, probability 0, space 0, times 0 [ 461.292575][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.0.7257 Not tainted syzkaller #0 PREEMPT(full) [ 461.292601][T17243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.292611][T17243] Call Trace: [ 461.292617][T17243] [ 461.292624][T17243] dump_stack_lvl+0x16c/0x1f0 [ 461.292649][T17243] should_fail_ex+0x512/0x640 [ 461.292669][T17243] should_failslab+0xc2/0x120 [ 461.292712][T17243] __kmalloc_node_noprof+0xd8/0x500 [ 461.292736][T17243] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 461.292766][T17243] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 461.292795][T17243] ? vhost_task_create+0x1d2/0x2e0 [ 461.292813][T17243] ? lock_release+0x201/0x2f0 [ 461.292846][T17243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 461.292879][T17243] ? vhost_task_create+0x1d2/0x2e0 [ 461.292896][T17243] __vmalloc_node_noprof+0xad/0xf0 [ 461.292920][T17243] ? vhost_task_create+0x1d2/0x2e0 [ 461.292938][T17243] copy_process+0x2c70/0x7690 [ 461.292968][T17243] ? __pfx_copy_process+0x10/0x10 [ 461.292993][T17243] ? lockdep_init_map_type+0x5c/0x280 [ 461.293010][T17243] ? __raw_spin_lock_init+0x3a/0x110 [ 461.293027][T17243] ? lockdep_init_map_type+0x5c/0x280 [ 461.293043][T17243] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 461.293066][T17243] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 461.293093][T17243] vhost_task_create+0x1d2/0x2e0 [ 461.293110][T17243] ? __pfx_vhost_task_create+0x10/0x10 [ 461.293132][T17243] ? __pfx_vhost_task_fn+0x10/0x10 [ 461.293148][T17243] ? rcu_is_watching+0x12/0xc0 [ 461.293170][T17243] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 461.293193][T17243] kvm_mmu_post_init_vm+0x1b7/0x380 [ 461.293214][T17243] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 461.293238][T17243] ? rcu_is_watching+0x12/0xc0 [ 461.293284][T17243] ? lock_release+0x201/0x2f0 [ 461.293311][T17243] kvm_vcpu_ioctl+0x5eb/0x1690 [ 461.293335][T17243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 461.293357][T17243] ? preempt_count_add+0x76/0x150 [ 461.293374][T17243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.293395][T17243] ? do_vfs_ioctl+0x128/0x14f0 [ 461.293420][T17243] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 461.293445][T17243] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 461.293474][T17243] ? rcu_is_watching+0x12/0xc0 [ 461.293493][T17243] ? __fget_files+0x204/0x3c0 [ 461.293512][T17243] ? hook_file_ioctl_common+0x145/0x410 [ 461.293533][T17243] ? selinux_file_ioctl+0x180/0x270 [ 461.293556][T17243] ? selinux_file_ioctl+0xb4/0x270 [ 461.293579][T17243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 461.293603][T17243] __x64_sys_ioctl+0x18b/0x210 [ 461.293629][T17243] do_syscall_64+0xcd/0x4c0 [ 461.293649][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.293667][T17243] RIP: 0033:0x7f9cad18ebe9 [ 461.293681][T17243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.293699][T17243] RSP: 002b:00007f9cae0d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.293717][T17243] RAX: ffffffffffffffda RBX: 00007f9cad3b5fa0 RCX: 00007f9cad18ebe9 [ 461.293734][T17243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 461.293746][T17243] RBP: 00007f9cae0d8090 R08: 0000000000000000 R09: 0000000000000000 [ 461.293756][T17243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.293766][T17243] R13: 00007f9cad3b6038 R14: 00007f9cad3b5fa0 R15: 00007fffa158f568 [ 461.293786][T17243] [ 461.447080][ T9] usb 12-1: USB disconnect, device number 14 [ 461.462292][ T1347] usb 11-1: Using ep0 maxpacket: 32 [ 461.466095][ T1347] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.470315][ T1347] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 461.474723][ T1347] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.478347][ T1347] usb 11-1: config 0 descriptor?? [ 461.482476][ T1347] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 461.488860][ T1347] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 461.505186][ T6011] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 461.529022][ T6011] usb 10-1: device descriptor read/8, error -71 [ 461.585875][T17268] usb usb8: usbfs: process 17268 (syz.0.7261) did not claim interface 20 before use [ 461.686853][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 461.744568][ T40] kauditd_printk_skb: 929 callbacks suppressed [ 461.744581][ T40] audit: type=1400 audit(1756310548.177:61862): avc: denied { read write } for pid=17275 comm="syz.0.7263" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 461.755835][ T40] audit: type=1400 audit(1756310548.177:61863): avc: denied { open } for pid=17275 comm="syz.0.7263" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 461.764771][ T40] audit: type=1400 audit(1756310548.177:61864): avc: denied { ioctl } for pid=17275 comm="syz.0.7263" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 461.774414][ T40] audit: type=1400 audit(1756310548.195:61865): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56950 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.783287][ T6011] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 461.784110][ T40] audit: type=1400 audit(1756310548.195:61866): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=56950 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.796646][ T40] audit: type=1400 audit(1756310548.195:61867): avc: denied { recv } for pid=5931 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56950 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.805954][ T40] audit: type=1400 audit(1756310548.195:61868): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36474 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.806238][ T6011] usb 10-1: device descriptor read/8, error -71 [ 461.815522][ T40] audit: type=1400 audit(1756310548.195:61869): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36474 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.815560][ T40] audit: type=1400 audit(1756310548.195:61870): avc: denied { recv } for pid=5931 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56950 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.837786][ T40] audit: type=1400 audit(1756310548.233:61871): avc: denied { ioctl } for pid=17158 comm="syz.5.7247" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.914515][ T7957] usb 11-1: USB disconnect, device number 15 [ 461.918245][ T7957] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 461.933343][ T6011] usb usb10-port1: unable to enumerate USB device [ 461.933915][T17289] binder: 17284:17289 ioctl c0306201 200000000040 returned -22 [ 461.938734][T17289] binder: 17284:17289 ioctl c0306201 200000000380 returned -22 [ 462.013076][T17308] binder_alloc: 17307: binder_alloc_buf size 72057594037927960 failed, no address space [ 462.016069][T17308] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 462.050804][T17313] FAULT_INJECTION: forcing a failure. [ 462.050804][T17313] name failslab, interval 1, probability 0, space 0, times 0 [ 462.055519][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.7.7269 Not tainted syzkaller #0 PREEMPT(full) [ 462.055535][T17313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.055542][T17313] Call Trace: [ 462.055546][T17313] [ 462.055551][T17313] dump_stack_lvl+0x16c/0x1f0 [ 462.055567][T17313] should_fail_ex+0x512/0x640 [ 462.055582][T17313] should_failslab+0xc2/0x120 [ 462.055595][T17313] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 462.055608][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.055622][T17313] ? dst_alloc+0x99/0x1a0 [ 462.055640][T17313] ? __pfx_ip6_dst_gc+0x10/0x10 [ 462.055652][T17313] dst_alloc+0x99/0x1a0 [ 462.055669][T17313] ip6_pol_route+0x96b/0x1230 [ 462.055681][T17313] ? __pfx_ip6_pol_route+0x10/0x10 [ 462.055692][T17313] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 462.055707][T17313] ? debug_check_no_obj_freed+0x31f/0x600 [ 462.055724][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.055739][T17313] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 462.055749][T17313] fib6_rule_lookup+0x536/0x720 [ 462.055771][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.055785][T17313] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 462.055802][T17313] ? __free_frozen_pages+0x8e2/0x10f0 [ 462.055818][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.055831][T17313] ? lock_release+0x201/0x2f0 [ 462.055849][T17313] ? do_raw_spin_unlock+0x172/0x230 [ 462.055861][T17313] ? _raw_spin_unlock+0x28/0x50 [ 462.055878][T17313] ? __free_frozen_pages+0x8ec/0x10f0 [ 462.055894][T17313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 462.055909][T17313] ip6_route_input+0x662/0xc00 [ 462.055920][T17313] ? __pfx_ip6_route_input+0x10/0x10 [ 462.055931][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.055948][T17313] ? sock_wfree+0x11c/0x880 [ 462.055959][T17313] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 462.055972][T17313] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 462.055985][T17313] ipv6_rcv+0x1e8/0x650 [ 462.055995][T17313] ? __pfx_ipv6_rcv+0x10/0x10 [ 462.056005][T17313] __netif_receive_skb_one_core+0x12d/0x1e0 [ 462.056023][T17313] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 462.056040][T17313] ? __asan_memcpy+0x3c/0x60 [ 462.056058][T17313] ? lock_acquire+0x2cd/0x350 [ 462.056076][T17313] __netif_receive_skb+0x1d/0x160 [ 462.056093][T17313] netif_receive_skb+0x137/0x7b0 [ 462.056109][T17313] ? __pfx_netif_receive_skb+0x10/0x10 [ 462.056126][T17313] ? skb_partial_csum_set+0x202/0x3a0 [ 462.056141][T17313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 462.056154][T17313] tun_rx_batched.isra.0+0x3ee/0x740 [ 462.056169][T17313] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 462.056184][T17313] ? lock_acquire+0x2cd/0x350 [ 462.056201][T17313] ? tun_get_user+0x1d8a/0x3ce0 [ 462.056215][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.056230][T17313] tun_get_user+0x28e4/0x3ce0 [ 462.056248][T17313] ? __pfx_tun_get_user+0x10/0x10 [ 462.056264][T17313] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 462.056280][T17313] ? tun_get+0x191/0x370 [ 462.056293][T17313] ? rcu_is_watching+0x12/0xc0 [ 462.056306][T17313] ? lock_release+0x201/0x2f0 [ 462.056324][T17313] tun_chr_write_iter+0xdc/0x210 [ 462.056340][T17313] vfs_write+0x7d3/0x11d0 [ 462.056352][T17313] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 462.056368][T17313] ? __pfx_vfs_write+0x10/0x10 [ 462.056379][T17313] ? lock_release+0x201/0x2f0 [ 462.056399][T17313] ksys_write+0x12a/0x250 [ 462.056410][T17313] ? __pfx_ksys_write+0x10/0x10 [ 462.056423][T17313] do_syscall_64+0xcd/0x4c0 [ 462.056436][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.056447][T17313] RIP: 0033:0x7f7458d8ebe9 [ 462.056457][T17313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.056468][T17313] RSP: 002b:00007f7459b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.056479][T17313] RAX: ffffffffffffffda RBX: 00007f7458fb5fa0 RCX: 00007f7458d8ebe9 [ 462.056486][T17313] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 462.056493][T17313] RBP: 00007f7459b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 462.056500][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.056507][T17313] R13: 00007f7458fb6038 R14: 00007f7458fb5fa0 R15: 00007fff3f69aa68 [ 462.056519][T17313] [ 462.058565][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7270'. [ 462.576995][T17335] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 462.583001][T17335] usb usb8: usbfs: process 17335 (syz.6.7274) did not claim interface 0 before use [ 462.715720][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.798628][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 462.827628][T17347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.968746][T17357] FAULT_INJECTION: forcing a failure. [ 462.968746][T17357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.973335][T17357] CPU: 3 UID: 0 PID: 17357 Comm: syz.6.7280 Not tainted syzkaller #0 PREEMPT(full) [ 462.973352][T17357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.973359][T17357] Call Trace: [ 462.973363][T17357] [ 462.973367][T17357] dump_stack_lvl+0x16c/0x1f0 [ 462.973383][T17357] should_fail_ex+0x512/0x640 [ 462.973397][T17357] _copy_from_user+0x2e/0xd0 [ 462.973411][T17357] copy_msghdr_from_user+0x98/0x160 [ 462.973423][T17357] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 462.973436][T17357] ? __pfx__kstrtoull+0x10/0x10 [ 462.973447][T17357] ___sys_sendmsg+0xfe/0x1d0 [ 462.973459][T17357] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.973472][T17357] ? rcu_is_watching+0x12/0xc0 [ 462.973497][T17357] __sys_sendmmsg+0x200/0x420 [ 462.973509][T17357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 462.973520][T17357] ? lock_release+0x201/0x2f0 [ 462.973540][T17357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.973555][T17357] ? fput+0x9b/0xd0 [ 462.973570][T17357] ? ksys_write+0x1ac/0x250 [ 462.973581][T17357] ? __pfx_ksys_write+0x10/0x10 [ 462.973598][T17357] __x64_sys_sendmmsg+0x9c/0x100 [ 462.973614][T17357] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 462.973634][T17357] do_syscall_64+0xcd/0x4c0 [ 462.973648][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.973659][T17357] RIP: 0033:0x7faa9538ebe9 [ 462.973668][T17357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.973679][T17357] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 462.973691][T17357] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 462.973698][T17357] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 462.973705][T17357] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 462.973712][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.973719][T17357] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 462.973730][T17357] [ 463.063201][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7281'. [ 463.203004][T17370] binder: 17369:17370 ioctl c0306201 200000000040 returned -22 [ 463.205816][T17370] binder: 17369:17370 ioctl c0306201 200000000380 returned -22 [ 463.910440][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.793442][T17503] binder_alloc: 17502: binder_alloc_buf size 1152921504606847000 failed, no address space [ 464.796565][T17503] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 464.936782][ T5965] Bluetooth: hci3: command 0x0406 tx timeout [ 464.977815][T17530] tmpfs: Bad value for 'mpol' [ 465.012621][T17537] geneve2: entered promiscuous mode [ 465.015164][T17537] geneve2: entered allmulticast mode [ 465.053196][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7311'. [ 465.091349][T17555] binder: 17554:17555 ioctl c0306201 200000000040 returned -22 [ 465.094753][T17555] binder: 17554:17555 ioctl c0306201 200000000380 returned -22 [ 465.147406][T17566] FAULT_INJECTION: forcing a failure. [ 465.147406][T17566] name failslab, interval 1, probability 0, space 0, times 0 [ 465.151429][T17566] CPU: 3 UID: 0 PID: 17566 Comm: syz.5.7313 Not tainted syzkaller #0 PREEMPT(full) [ 465.151444][T17566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.151451][T17566] Call Trace: [ 465.151457][T17566] [ 465.151462][T17566] dump_stack_lvl+0x16c/0x1f0 [ 465.151481][T17566] should_fail_ex+0x512/0x640 [ 465.151495][T17566] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 465.151515][T17566] should_failslab+0xc2/0x120 [ 465.151529][T17566] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 465.151542][T17566] ? lock_release+0x201/0x2f0 [ 465.151561][T17566] ? __pfx___cant_migrate+0x10/0x10 [ 465.151577][T17566] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 465.151589][T17566] xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 465.151603][T17566] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 465.151615][T17566] ? rcu_is_watching+0x12/0xc0 [ 465.151632][T17566] ? read_tsc+0x9/0x20 [ 465.151646][T17566] ? ktime_get+0x1a7/0x310 [ 465.151662][T17566] ? bpf_test_timer_continue+0x150/0x3c0 [ 465.151681][T17566] bpf_test_run_xdp_live+0x34d/0x500 [ 465.151692][T17566] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 465.151703][T17566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.151718][T17566] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 465.151736][T17566] ? lock_release+0x201/0x2f0 [ 465.151757][T17566] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 465.151769][T17566] ? bpf_dispatcher_xdp+0x800/0x1000 [ 465.151779][T17566] ? bpf_dispatcher_xdp+0x800/0x1000 [ 465.151788][T17566] ? bpf_dispatcher_xdp+0x800/0x1000 [ 465.151799][T17566] bpf_prog_test_run_xdp+0x824/0x1590 [ 465.151813][T17566] ? lock_release+0x201/0x2f0 [ 465.151829][T17566] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 465.151842][T17566] ? __might_fault+0x130/0x190 [ 465.151854][T17566] ? fput+0x9b/0xd0 [ 465.151868][T17566] ? __bpf_prog_get+0x97/0x2a0 [ 465.151880][T17566] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 465.151892][T17566] __sys_bpf+0x104d/0x4de0 [ 465.151906][T17566] ? lock_release+0x201/0x2f0 [ 465.151923][T17566] ? __pfx___sys_bpf+0x10/0x10 [ 465.151938][T17566] ? ksys_write+0x190/0x250 [ 465.151948][T17566] ? rcu_is_watching+0x12/0xc0 [ 465.151962][T17566] ? lock_release+0x201/0x2f0 [ 465.151980][T17566] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 465.151996][T17566] ? fput+0x9b/0xd0 [ 465.152010][T17566] ? ksys_write+0x1ac/0x250 [ 465.152020][T17566] ? __pfx_ksys_write+0x10/0x10 [ 465.152033][T17566] __x64_sys_bpf+0x78/0xc0 [ 465.152047][T17566] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 465.152061][T17566] do_syscall_64+0xcd/0x4c0 [ 465.152074][T17566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.152086][T17566] RIP: 0033:0x7f5932d8ebe9 [ 465.152095][T17566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.152106][T17566] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.152117][T17566] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 465.152125][T17566] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 465.152132][T17566] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 465.152138][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.152145][T17566] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 465.152156][T17566] [ 465.279502][ C3] vkms_vblank_simulate: vblank timer overrun [ 465.378469][T17580] FAULT_INJECTION: forcing a failure. [ 465.378469][T17580] name failslab, interval 1, probability 0, space 0, times 0 [ 465.382618][T17580] CPU: 0 UID: 0 PID: 17580 Comm: syz.6.7316 Not tainted syzkaller #0 PREEMPT(full) [ 465.382633][T17580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.382641][T17580] Call Trace: [ 465.382645][T17580] [ 465.382650][T17580] dump_stack_lvl+0x16c/0x1f0 [ 465.382665][T17580] should_fail_ex+0x512/0x640 [ 465.382680][T17580] ? tomoyo_encode2+0x100/0x3e0 [ 465.382700][T17580] should_failslab+0xc2/0x120 [ 465.382714][T17580] __kmalloc_noprof+0xd2/0x510 [ 465.382725][T17580] ? d_absolute_path+0x136/0x1a0 [ 465.382742][T17580] tomoyo_encode2+0x100/0x3e0 [ 465.382759][T17580] tomoyo_encode+0x29/0x50 [ 465.382774][T17580] tomoyo_realpath_from_path+0x18f/0x6e0 [ 465.382794][T17580] tomoyo_path_number_perm+0x245/0x580 [ 465.382818][T17580] ? tomoyo_path_number_perm+0x237/0x580 [ 465.382834][T17580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.382854][T17580] ? preempt_count_add+0x76/0x150 [ 465.382869][T17580] ? rcu_is_watching+0x12/0xc0 [ 465.382884][T17580] ? __fget_files+0x204/0x3c0 [ 465.382896][T17580] ? hook_file_ioctl_common+0x145/0x410 [ 465.382907][T17580] ? lock_release+0x201/0x2f0 [ 465.382926][T17580] ? __fget_files+0x20e/0x3c0 [ 465.382939][T17580] security_file_ioctl+0x9b/0x240 [ 465.382956][T17580] __x64_sys_ioctl+0xb7/0x210 [ 465.382974][T17580] do_syscall_64+0xcd/0x4c0 [ 465.382987][T17580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.382999][T17580] RIP: 0033:0x7faa9538ebe9 [ 465.383008][T17580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.383020][T17580] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.383031][T17580] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 465.383039][T17580] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 465.383046][T17580] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 465.383053][T17580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.383059][T17580] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 465.383070][T17580] [ 465.383130][T17580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.491082][T17585] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.7318' resets device [ 465.502070][T17585] macsec1: entered promiscuous mode [ 465.504623][T17585] macsec1: entered allmulticast mode [ 465.738136][T17606] binder: 17605:17606 ioctl c0306201 200000000040 returned -22 [ 465.741422][T17606] binder: 17605:17606 ioctl c0306201 200000000380 returned -22 [ 465.771027][ T9] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 465.820606][T17616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7324'. [ 465.823781][T17616] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7324'. [ 465.827526][T17616] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 465.932715][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.935686][ T9] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 465.940547][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.944802][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 465.948427][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 465.957802][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.961088][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.964066][ T9] usb 10-1: Product: syz [ 465.965666][ T9] usb 10-1: Manufacturer: syz [ 465.972129][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 465.974196][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 465.978702][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 465.980681][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 466.097143][T17635] FAULT_INJECTION: forcing a failure. [ 466.097143][T17635] name failslab, interval 1, probability 0, space 0, times 0 [ 466.102676][T17635] CPU: 3 UID: 0 PID: 17635 Comm: syz.6.7329 Not tainted syzkaller #0 PREEMPT(full) [ 466.102699][T17635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.102710][T17635] Call Trace: [ 466.102716][T17635] [ 466.102722][T17635] dump_stack_lvl+0x16c/0x1f0 [ 466.102744][T17635] should_fail_ex+0x512/0x640 [ 466.102772][T17635] should_failslab+0xc2/0x120 [ 466.102792][T17635] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 466.102811][T17635] ? lock_acquire+0x2cd/0x350 [ 466.102838][T17635] ? sidtab_sid2str_get+0x17a/0x680 [ 466.102880][T17635] kmemdup_noprof+0x29/0x60 [ 466.102898][T17635] sidtab_sid2str_get+0x17a/0x680 [ 466.102924][T17635] sidtab_entry_to_string+0x33/0x110 [ 466.102947][T17635] security_sid_to_context_core+0x35c/0x640 [ 466.102986][T17635] avc_audit_post_callback+0x109/0x8f0 [ 466.103004][T17635] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 466.103019][T17635] ? skb_put+0x138/0x1b0 [ 466.103040][T17635] ? audit_log_n_string+0x253/0x540 [ 466.103059][T17635] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 466.103074][T17635] common_lsm_audit+0x24e/0x300 [ 466.103097][T17635] ? __pfx_common_lsm_audit+0x10/0x10 [ 466.103119][T17635] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 466.103139][T17635] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 466.103167][T17635] ? avc_update_node.isra.0+0x4c0/0xb60 [ 466.103184][T17635] slow_avc_audit+0x186/0x210 [ 466.103200][T17635] ? __pfx_slow_avc_audit+0x10/0x10 [ 466.103217][T17635] ? avc_denied+0x14a/0x190 [ 466.103233][T17635] ? avc_has_perm_noaudit+0x306/0x3b0 [ 466.103250][T17635] avc_has_perm+0x1b5/0x1f0 [ 466.103267][T17635] ? __pfx_avc_has_perm+0x10/0x10 [ 466.103284][T17635] ? is_bpf_text_address+0x94/0x1a0 [ 466.103301][T17635] ? kernel_text_address+0x8d/0x100 [ 466.103320][T17635] ? __kernel_text_address+0xd/0x40 [ 466.103339][T17635] sock_has_perm+0x252/0x2f0 [ 466.103358][T17635] ? __pfx_sock_has_perm+0x10/0x10 [ 466.103378][T17635] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 466.103406][T17635] ? __import_iovec+0x1dd/0x650 [ 466.103427][T17635] ? rcu_is_watching+0x12/0xc0 [ 466.103446][T17635] ? __might_fault+0xe3/0x190 [ 466.103464][T17635] security_socket_sendmsg+0x9b/0x240 [ 466.103484][T17635] ____sys_sendmsg+0x865/0xc70 [ 466.103505][T17635] ? copy_msghdr_from_user+0x10a/0x160 [ 466.103521][T17635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.103540][T17635] ? __pfx_kstrtouint+0x10/0x10 [ 466.103558][T17635] ? kstrtouint_from_user+0x13c/0x1d0 [ 466.103574][T17635] ___sys_sendmsg+0x134/0x1d0 [ 466.103594][T17635] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.103615][T17635] ? rcu_is_watching+0x12/0xc0 [ 466.103644][T17635] __sys_sendmsg+0x16d/0x220 [ 466.103659][T17635] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.103684][T17635] do_syscall_64+0xcd/0x4c0 [ 466.103702][T17635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.103718][T17635] RIP: 0033:0x7faa9538ebe9 [ 466.103730][T17635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.103747][T17635] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.103770][T17635] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 466.103781][T17635] RDX: 0000000000028000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 466.103807][T17635] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 466.103817][T17635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.103826][T17635] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 466.103845][T17635] [ 466.247557][ C3] vkms_vblank_simulate: vblank timer overrun [ 466.253198][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.255884][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.258142][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.260298][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.262999][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.265572][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.267629][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.269540][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.271570][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.273562][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.275680][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.277660][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.280269][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.282756][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.285547][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.288104][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.291218][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.294217][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.296671][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 466.299099][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 466.301107][T17646] binder: 17644:17646 ioctl c0306201 200000000040 returned -22 [ 466.303441][ T1347] usb 10-1: USB disconnect, device number 46 [ 466.304642][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 466.305316][T17646] binder: 17644:17646 ioctl c0306201 200000000380 returned -22 [ 466.493097][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7338'. [ 466.634884][T17737] FAULT_INJECTION: forcing a failure. [ 466.634884][T17737] name failslab, interval 1, probability 0, space 0, times 0 [ 466.639084][T17737] CPU: 1 UID: 0 PID: 17737 Comm: syz.6.7343 Not tainted syzkaller #0 PREEMPT(full) [ 466.639100][T17737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.639107][T17737] Call Trace: [ 466.639112][T17737] [ 466.639118][T17737] dump_stack_lvl+0x16c/0x1f0 [ 466.639133][T17737] should_fail_ex+0x512/0x640 [ 466.639148][T17737] should_failslab+0xc2/0x120 [ 466.639161][T17737] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 466.639173][T17737] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 466.639191][T17737] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 466.639207][T17737] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 466.639226][T17737] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 466.639245][T17737] mmu_topup_memory_caches+0x25/0x170 [ 466.639257][T17737] kvm_mmu_load+0xd6/0x23c0 [ 466.639268][T17737] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 466.639280][T17737] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 466.639293][T17737] ? __pfx_kvm_mmu_load+0x10/0x10 [ 466.639304][T17737] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 466.639321][T17737] ? kvm_check_and_inject_events+0x71c/0x1310 [ 466.639339][T17737] vcpu_run+0x358c/0x5580 [ 466.639352][T17737] ? lock_release+0x201/0x2f0 [ 466.639369][T17737] ? rcu_is_watching+0x12/0xc0 [ 466.639386][T17737] ? __pfx_vcpu_run+0x10/0x10 [ 466.639401][T17737] ? rcu_is_watching+0x12/0xc0 [ 466.639414][T17737] ? lock_acquire+0x2cd/0x350 [ 466.639430][T17737] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 466.639445][T17737] ? __local_bh_enable_ip+0xa4/0x120 [ 466.639461][T17737] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 466.639477][T17737] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 466.639494][T17737] kvm_vcpu_ioctl+0x5eb/0x1690 [ 466.639510][T17737] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 466.639525][T17737] ? preempt_count_add+0x76/0x150 [ 466.639536][T17737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 466.639549][T17737] ? do_vfs_ioctl+0x128/0x14f0 [ 466.639566][T17737] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 466.639583][T17737] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 466.639602][T17737] ? rcu_is_watching+0x12/0xc0 [ 466.639616][T17737] ? __fget_files+0x204/0x3c0 [ 466.639627][T17737] ? hook_file_ioctl_common+0x145/0x410 [ 466.639640][T17737] ? selinux_file_ioctl+0x180/0x270 [ 466.639656][T17737] ? selinux_file_ioctl+0xb4/0x270 [ 466.639672][T17737] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 466.639686][T17737] __x64_sys_ioctl+0x18b/0x210 [ 466.639703][T17737] do_syscall_64+0xcd/0x4c0 [ 466.639721][T17737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.639733][T17737] RIP: 0033:0x7faa9538ebe9 [ 466.639742][T17737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.639753][T17737] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.639765][T17737] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 466.639772][T17737] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 466.639782][T17737] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 466.639791][T17737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.639800][T17737] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 466.639815][T17737] [ 466.902754][T17747] binder: 17743:17747 unknown command 0 [ 466.905332][T17747] binder: 17743:17747 ioctl c0306201 200000000080 returned -22 [ 466.951719][T17756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17756 comm=syz.7.7347 [ 466.959296][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7347'. [ 467.114165][ T40] kauditd_printk_skb: 1198 callbacks suppressed [ 467.114179][ T40] audit: type=1400 audit(1756310553.200:63070): avc: denied { read write } for pid=17770 comm="syz.7.7350" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.120334][T17771] FAULT_INJECTION: forcing a failure. [ 467.120334][T17771] name failslab, interval 1, probability 0, space 0, times 0 [ 467.124327][ T40] audit: type=1400 audit(1756310553.200:63071): avc: denied { read write open } for pid=17770 comm="syz.7.7350" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.129506][T17771] CPU: 1 UID: 0 PID: 17771 Comm: syz.7.7350 Not tainted syzkaller #0 PREEMPT(full) [ 467.129529][T17771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.129539][T17771] Call Trace: [ 467.129545][T17771] [ 467.129551][T17771] dump_stack_lvl+0x16c/0x1f0 [ 467.129573][T17771] should_fail_ex+0x512/0x640 [ 467.129594][T17771] should_failslab+0xc2/0x120 [ 467.129613][T17771] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 467.129630][T17771] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 467.129656][T17771] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 467.129679][T17771] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 467.129706][T17771] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 467.129740][T17771] mmu_topup_memory_caches+0x25/0x170 [ 467.129758][T17771] kvm_mmu_load+0xd6/0x23c0 [ 467.129774][T17771] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 467.129791][T17771] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 467.129809][T17771] ? __up_read+0x1f8/0x750 [ 467.129825][T17771] ? down_read+0x13d/0x480 [ 467.129845][T17771] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 467.129867][T17771] ? __pfx_kvm_mmu_load+0x10/0x10 [ 467.129882][T17771] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 467.129908][T17771] ? kvm_check_and_inject_events+0x71c/0x1310 [ 467.129934][T17771] vcpu_run+0x358c/0x5580 [ 467.129954][T17771] ? lock_release+0x201/0x2f0 [ 467.129978][T17771] ? rcu_is_watching+0x12/0xc0 [ 467.130004][T17771] ? __pfx_vcpu_run+0x10/0x10 [ 467.130026][T17771] ? rcu_is_watching+0x12/0xc0 [ 467.130046][T17771] ? lock_acquire+0x2cd/0x350 [ 467.130070][T17771] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 467.130091][T17771] ? __local_bh_enable_ip+0xa4/0x120 [ 467.130115][T17771] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 467.130138][T17771] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 467.130164][T17771] kvm_vcpu_ioctl+0x5eb/0x1690 [ 467.130187][T17771] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 467.130208][T17771] ? preempt_count_add+0x76/0x150 [ 467.130223][T17771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.130243][T17771] ? do_vfs_ioctl+0x128/0x14f0 [ 467.130269][T17771] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 467.130295][T17771] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 467.130325][T17771] ? rcu_is_watching+0x12/0xc0 [ 467.130347][T17771] ? __fget_files+0x204/0x3c0 [ 467.130365][T17771] ? hook_file_ioctl_common+0x145/0x410 [ 467.130386][T17771] ? selinux_file_ioctl+0x180/0x270 [ 467.130410][T17771] ? selinux_file_ioctl+0xb4/0x270 [ 467.130435][T17771] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 467.130458][T17771] __x64_sys_ioctl+0x18b/0x210 [ 467.130485][T17771] do_syscall_64+0xcd/0x4c0 [ 467.130504][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.130522][T17771] RIP: 0033:0x7f7458d8ebe9 [ 467.130536][T17771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.130552][T17771] RSP: 002b:00007f7459b9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.130571][T17771] RAX: ffffffffffffffda RBX: 00007f7458fb5fa0 RCX: 00007f7458d8ebe9 [ 467.130583][T17771] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 467.130593][T17771] RBP: 00007f7459b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 467.130603][T17771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.130614][T17771] R13: 00007f7458fb6038 R14: 00007f7458fb5fa0 R15: 00007fff3f69aa68 [ 467.130632][T17771] [ 467.248724][ T40] audit: type=1400 audit(1756310553.200:63072): avc: denied { ioctl } for pid=17770 comm="syz.7.7350" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.257315][ T40] audit: type=1400 audit(1756310553.228:63073): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56950 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 467.265182][ T40] audit: type=1400 audit(1756310553.228:63074): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=56950 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 467.272950][ T40] audit: type=1400 audit(1756310553.228:63075): avc: denied { recv } for pid=5931 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56950 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 467.280686][ T40] audit: type=1400 audit(1756310553.228:63076): avc: denied { read write } for pid=32283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.288457][ T40] audit: type=1400 audit(1756310553.228:63077): avc: denied { open } for pid=32283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.297946][ T40] audit: type=1400 audit(1756310553.228:63079): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36474 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 467.305644][ T40] audit: type=1400 audit(1756310553.228:63078): avc: denied { ioctl } for pid=32283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.673840][ T1347] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 467.767244][T17792] binder_alloc: 17791: binder_alloc_buf size 1729382256910270488 failed, no address space [ 467.770775][T17792] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 467.800105][T17795] bond0: (slave syz_tun): Releasing backup interface [ 467.806623][T17795] bridge_slave_0: left allmulticast mode [ 467.808460][T17795] bridge_slave_0: left promiscuous mode [ 467.810359][T17795] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.813129][ T1347] usb 5-1: device descriptor read/64, error -71 [ 467.817062][T17795] bridge_slave_1: left allmulticast mode [ 467.818824][T17795] bridge_slave_1: left promiscuous mode [ 467.821095][T17795] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.827145][T17795] bond0: (slave bond_slave_0): Releasing backup interface [ 467.831262][T17795] bond0: (slave bond_slave_1): Releasing backup interface [ 467.837349][T17795] team0: Port device team_slave_0 removed [ 467.842334][T17795] team0: Port device team_slave_1 removed [ 467.846055][T17795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.848423][T17795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.851585][T17795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.853926][T17795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.862135][T17795] gretap1: left promiscuous mode [ 467.863705][T17795] bridge0: port 4(gretap1) entered disabled state [ 467.883510][T17795] netlink: 'syz.6.7355': attribute type 2 has an invalid length. [ 467.886064][T17795] netlink: 'syz.6.7355': attribute type 1 has an invalid length. [ 467.889072][T17795] netlink: 'syz.6.7355': attribute type 1 has an invalid length. [ 467.891917][T17794] netlink: 'syz.6.7355': attribute type 2 has an invalid length. [ 467.894150][T17794] netlink: 'syz.6.7355': attribute type 1 has an invalid length. [ 467.896360][T17794] netlink: 'syz.6.7355': attribute type 1 has an invalid length. [ 467.956485][T17800] FAULT_INJECTION: forcing a failure. [ 467.956485][T17800] name failslab, interval 1, probability 0, space 0, times 0 [ 467.961785][T17800] CPU: 0 UID: 0 PID: 17800 Comm: syz.6.7357 Not tainted syzkaller #0 PREEMPT(full) [ 467.961810][T17800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.961822][T17800] Call Trace: [ 467.961829][T17800] [ 467.961837][T17800] dump_stack_lvl+0x16c/0x1f0 [ 467.961861][T17800] should_fail_ex+0x512/0x640 [ 467.961882][T17800] should_failslab+0xc2/0x120 [ 467.961902][T17800] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 467.961920][T17800] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 467.961945][T17800] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 467.961969][T17800] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 467.961997][T17800] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 467.962026][T17800] mmu_topup_memory_caches+0x25/0x170 [ 467.962045][T17800] kvm_mmu_load+0xd6/0x23c0 [ 467.962062][T17800] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 467.962096][T17800] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 467.962116][T17800] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 467.962141][T17800] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 467.962162][T17800] ? __pfx_kvm_mmu_load+0x10/0x10 [ 467.962178][T17800] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 467.962205][T17800] ? kvm_check_and_inject_events+0x71c/0x1310 [ 467.962231][T17800] vcpu_run+0x358c/0x5580 [ 467.962252][T17800] ? lock_release+0x201/0x2f0 [ 467.962277][T17800] ? rcu_is_watching+0x12/0xc0 [ 467.962303][T17800] ? __pfx_vcpu_run+0x10/0x10 [ 467.962325][T17800] ? rcu_is_watching+0x12/0xc0 [ 467.962346][T17800] ? lock_acquire+0x2cd/0x350 [ 467.962370][T17800] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 467.962392][T17800] ? __local_bh_enable_ip+0xa4/0x120 [ 467.962417][T17800] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 467.962439][T17800] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 467.962466][T17800] kvm_vcpu_ioctl+0x5eb/0x1690 [ 467.962491][T17800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 467.962513][T17800] ? preempt_count_add+0x76/0x150 [ 467.962530][T17800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.962551][T17800] ? do_vfs_ioctl+0x128/0x14f0 [ 467.962576][T17800] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 467.962601][T17800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 467.962630][T17800] ? rcu_is_watching+0x12/0xc0 [ 467.962651][T17800] ? __fget_files+0x204/0x3c0 [ 467.962673][T17800] ? hook_file_ioctl_common+0x145/0x410 [ 467.962695][T17800] ? selinux_file_ioctl+0x180/0x270 [ 467.962718][T17800] ? selinux_file_ioctl+0xb4/0x270 [ 467.962742][T17800] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 467.962765][T17800] __x64_sys_ioctl+0x18b/0x210 [ 467.962790][T17800] do_syscall_64+0xcd/0x4c0 [ 467.962810][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.962832][T17800] RIP: 0033:0x7faa9538ebe9 [ 467.962846][T17800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.962862][T17800] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.962880][T17800] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 467.962892][T17800] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 467.962903][T17800] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 467.962914][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.962924][T17800] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 467.962942][T17800] [ 468.069185][ T1347] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 468.218862][ T1347] usb 5-1: device descriptor read/64, error -71 [ 468.227168][T17810] geneve2: entered promiscuous mode [ 468.228751][T17810] geneve2: entered allmulticast mode [ 468.327207][T17817] bond0: entered promiscuous mode [ 468.329365][T17817] bond_slave_0: entered promiscuous mode [ 468.332096][T17817] bond_slave_1: entered promiscuous mode [ 468.335955][T17817] batadv0: entered promiscuous mode [ 468.338043][ T1347] usb usb5-port1: attempt power cycle [ 468.339902][T17817] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 468.344821][T17817] bond0: left promiscuous mode [ 468.346860][T17817] bond_slave_0: left promiscuous mode [ 468.350524][T17817] bond_slave_1: left promiscuous mode [ 468.353447][T17817] batadv0: left promiscuous mode [ 468.469873][T17834] FAULT_INJECTION: forcing a failure. [ 468.469873][T17834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.476317][T17834] CPU: 3 UID: 0 PID: 17834 Comm: syz.7.7364 Not tainted syzkaller #0 PREEMPT(full) [ 468.476345][T17834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 468.476359][T17834] Call Trace: [ 468.476365][T17834] [ 468.476372][T17834] dump_stack_lvl+0x16c/0x1f0 [ 468.476399][T17834] should_fail_ex+0x512/0x640 [ 468.476420][T17834] _copy_from_user+0x2e/0xd0 [ 468.476446][T17834] copy_msghdr_from_user+0x98/0x160 [ 468.476476][T17834] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 468.476496][T17834] ? __pfx_kstrtouint+0x10/0x10 [ 468.476517][T17834] ? kstrtouint_from_user+0x13c/0x1d0 [ 468.476537][T17834] ___sys_sendmsg+0xfe/0x1d0 [ 468.476555][T17834] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.476581][T17834] ? rcu_is_watching+0x12/0xc0 [ 468.476617][T17834] __sys_sendmsg+0x16d/0x220 [ 468.476636][T17834] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.476662][T17834] do_syscall_64+0xcd/0x4c0 [ 468.476684][T17834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.476705][T17834] RIP: 0033:0x7f7458d8ebe9 [ 468.476721][T17834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.476740][T17834] RSP: 002b:00007f7459b9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.476759][T17834] RAX: ffffffffffffffda RBX: 00007f7458fb5fa0 RCX: 00007f7458d8ebe9 [ 468.476772][T17834] RDX: 0000000000000000 RSI: 0000200000002c80 RDI: 0000000000000004 [ 468.476784][T17834] RBP: 00007f7459b9c090 R08: 0000000000000000 R09: 0000000000000000 [ 468.476795][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.476806][T17834] R13: 00007f7458fb6038 R14: 00007f7458fb5fa0 R15: 00007fff3f69aa68 [ 468.476827][T17834] [ 468.548820][ C3] vkms_vblank_simulate: vblank timer overrun [ 468.593362][T17842] Bluetooth: MGMT ver 1.23 [ 468.700537][ T1347] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 468.708741][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7373'. [ 468.722146][ T1347] usb 5-1: device descriptor read/8, error -71 [ 468.921437][T17899] binder: 17890:17899 ioctl 400454dc 200000000280 returned -22 [ 468.960770][T17904] FAULT_INJECTION: forcing a failure. [ 468.960770][T17904] name failslab, interval 1, probability 0, space 0, times 0 [ 468.965178][T17904] CPU: 1 UID: 0 PID: 17904 Comm: syz.6.7383 Not tainted syzkaller #0 PREEMPT(full) [ 468.965221][T17904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 468.965231][T17904] Call Trace: [ 468.965235][T17904] [ 468.965240][T17904] dump_stack_lvl+0x16c/0x1f0 [ 468.965257][T17904] should_fail_ex+0x512/0x640 [ 468.965272][T17904] should_failslab+0xc2/0x120 [ 468.965287][T17904] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 468.965300][T17904] ? rcu_is_watching+0x12/0xc0 [ 468.965315][T17904] ? dst_alloc+0x99/0x1a0 [ 468.965334][T17904] ? __pfx_ip6_dst_gc+0x10/0x10 [ 468.965348][T17904] dst_alloc+0x99/0x1a0 [ 468.965380][T17904] ip6_pol_route+0x96b/0x1230 [ 468.965393][T17904] ? __pfx_ip6_pol_route+0x10/0x10 [ 468.965403][T17904] ? __page_table_check_ptes_set+0x1ae/0x420 [ 468.965418][T17904] ? do_pte_missing+0x8a9/0x3ba0 [ 468.965438][T17904] ? __pfx_do_xdp_generic+0x10/0x10 [ 468.965457][T17904] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 468.965468][T17904] fib6_rule_lookup+0x536/0x720 [ 468.965489][T17904] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 468.965507][T17904] ? migrate_enable+0x1ed/0x260 [ 468.965520][T17904] ? __pfx_migrate_enable+0x10/0x10 [ 468.965535][T17904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.965549][T17904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.965562][T17904] ip6_route_input+0x662/0xc00 [ 468.965575][T17904] ? __pfx_ip6_route_input+0x10/0x10 [ 468.965586][T17904] ? rcu_is_watching+0x12/0xc0 [ 468.965605][T17904] ? sock_wfree+0x11c/0x880 [ 468.965616][T17904] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 468.965629][T17904] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 468.965643][T17904] ipv6_rcv+0x1e8/0x650 [ 468.965655][T17904] ? __pfx_ipv6_rcv+0x10/0x10 [ 468.965665][T17904] __netif_receive_skb_one_core+0x12d/0x1e0 [ 468.965684][T17904] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 468.965704][T17904] ? lock_acquire+0x2cd/0x350 [ 468.965732][T17904] __netif_receive_skb+0x1d/0x160 [ 468.965750][T17904] netif_receive_skb+0x137/0x7b0 [ 468.965767][T17904] ? __pfx_netif_receive_skb+0x10/0x10 [ 468.965785][T17904] ? __pfx__copy_from_iter+0x10/0x10 [ 468.965802][T17904] tun_rx_batched.isra.0+0x3ee/0x740 [ 468.965819][T17904] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 468.965835][T17904] ? lock_acquire+0x2cd/0x350 [ 468.965852][T17904] ? tun_get_user+0x1d8a/0x3ce0 [ 468.965868][T17904] ? rcu_is_watching+0x12/0xc0 [ 468.965883][T17904] tun_get_user+0x28e4/0x3ce0 [ 468.965902][T17904] ? __pfx_tun_get_user+0x10/0x10 [ 468.965918][T17904] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 468.965936][T17904] ? tun_get+0x191/0x370 [ 468.965949][T17904] ? rcu_is_watching+0x12/0xc0 [ 468.965963][T17904] ? lock_release+0x201/0x2f0 [ 468.965983][T17904] tun_chr_write_iter+0xdc/0x210 [ 468.965999][T17904] vfs_write+0x7d3/0x11d0 [ 468.966012][T17904] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 468.966028][T17904] ? __pfx_vfs_write+0x10/0x10 [ 468.966041][T17904] ? lock_release+0x201/0x2f0 [ 468.966062][T17904] ksys_write+0x12a/0x250 [ 468.966073][T17904] ? __pfx_ksys_write+0x10/0x10 [ 468.966087][T17904] do_syscall_64+0xcd/0x4c0 [ 468.966101][T17904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.966113][T17904] RIP: 0033:0x7faa9538ebe9 [ 468.966124][T17904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.966135][T17904] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.966150][T17904] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 468.966161][T17904] RDX: 0000000000000fce RSI: 0000200000000380 RDI: 0000000000000004 [ 468.966171][T17904] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 468.966180][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.966191][T17904] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 468.966208][T17904] [ 468.977922][ T1347] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 469.081866][T17915] netlink: 'syz.7.7385': attribute type 3 has an invalid length. [ 469.096221][ T1347] usb 5-1: device descriptor read/8, error -71 [ 469.097418][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7385'. [ 469.134984][T17920] netlink: 'syz.7.7386': attribute type 1 has an invalid length. [ 469.151692][T17920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.157482][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7386'. [ 469.157549][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7386'. [ 469.213439][ T1347] usb usb5-port1: unable to enumerate USB device [ 469.234036][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7388'. [ 469.250198][T17968] netlink: 'syz.7.7388': attribute type 33 has an invalid length. [ 469.310776][T18014] FAULT_INJECTION: forcing a failure. [ 469.310776][T18014] name failslab, interval 1, probability 0, space 0, times 0 [ 469.315104][T18014] CPU: 0 UID: 0 PID: 18014 Comm: syz.5.7393 Not tainted syzkaller #0 PREEMPT(full) [ 469.315120][T18014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 469.315127][T18014] Call Trace: [ 469.315132][T18014] [ 469.315137][T18014] dump_stack_lvl+0x16c/0x1f0 [ 469.315152][T18014] should_fail_ex+0x512/0x640 [ 469.315166][T18014] should_failslab+0xc2/0x120 [ 469.315180][T18014] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 469.315191][T18014] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 469.315209][T18014] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 469.315224][T18014] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 469.315242][T18014] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 469.315268][T18014] mmu_topup_memory_caches+0x25/0x170 [ 469.315287][T18014] kvm_mmu_load+0xd6/0x23c0 [ 469.315306][T18014] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 469.315326][T18014] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 469.315345][T18014] ? __pfx_kvm_mmu_load+0x10/0x10 [ 469.315356][T18014] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 469.315373][T18014] ? kvm_check_and_inject_events+0x71c/0x1310 [ 469.315391][T18014] vcpu_run+0x358c/0x5580 [ 469.315408][T18014] ? __pfx_vcpu_run+0x10/0x10 [ 469.315423][T18014] ? rcu_is_watching+0x12/0xc0 [ 469.315438][T18014] ? lock_acquire+0x2cd/0x350 [ 469.315455][T18014] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 469.315470][T18014] ? __local_bh_enable_ip+0xa4/0x120 [ 469.315486][T18014] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 469.315502][T18014] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 469.315519][T18014] kvm_vcpu_ioctl+0x5eb/0x1690 [ 469.315535][T18014] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 469.315549][T18014] ? preempt_count_add+0x76/0x150 [ 469.315560][T18014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 469.315574][T18014] ? do_vfs_ioctl+0x128/0x14f0 [ 469.315590][T18014] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 469.315607][T18014] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 469.315626][T18014] ? rcu_is_watching+0x12/0xc0 [ 469.315640][T18014] ? __fget_files+0x204/0x3c0 [ 469.315652][T18014] ? hook_file_ioctl_common+0x145/0x410 [ 469.315665][T18014] ? selinux_file_ioctl+0x180/0x270 [ 469.315680][T18014] ? selinux_file_ioctl+0xb4/0x270 [ 469.315702][T18014] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 469.315717][T18014] __x64_sys_ioctl+0x18b/0x210 [ 469.315734][T18014] do_syscall_64+0xcd/0x4c0 [ 469.315747][T18014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.315758][T18014] RIP: 0033:0x7f5932d8ebe9 [ 469.315768][T18014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.315779][T18014] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.315790][T18014] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 469.315798][T18014] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 469.315805][T18014] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 469.315811][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.315818][T18014] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 469.315829][T18014] [ 469.324551][T18022] dlm: Unknown command passed to DLM device : 255 [ 469.324551][T18022] [ 469.382503][T18023] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7395'. [ 469.610738][T18062] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 469.865812][T18098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.999766][T18111] binder: 18110:18111 ioctl c0306201 200000000040 returned -22 [ 470.003323][T18111] binder: 18110:18111 ioctl c0306201 200000000380 returned -22 [ 470.038421][T18122] fuse: Unknown parameter 'fV44z*iU:ف 0x0000000000000008' [ 470.055620][T18122] netlink: 'syz.5.7418': attribute type 21 has an invalid length. [ 470.445581][T18157] geneve2: entered promiscuous mode [ 470.448132][T18157] geneve2: entered allmulticast mode [ 470.656896][T18187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.669473][T18187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.674863][T18187] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 470.688908][T18187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.812154][T18237] FAULT_INJECTION: forcing a failure. [ 470.812154][T18237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.817708][T18237] CPU: 1 UID: 0 PID: 18237 Comm: syz.5.7436 Not tainted syzkaller #0 PREEMPT(full) [ 470.817725][T18237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 470.817732][T18237] Call Trace: [ 470.817736][T18237] [ 470.817740][T18237] dump_stack_lvl+0x16c/0x1f0 [ 470.817756][T18237] should_fail_ex+0x512/0x640 [ 470.817771][T18237] _copy_from_iter+0x29f/0x16f0 [ 470.817787][T18237] ? __alloc_skb+0x200/0x380 [ 470.817798][T18237] ? __pfx__copy_from_iter+0x10/0x10 [ 470.817813][T18237] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 470.817828][T18237] netlink_sendmsg+0x829/0xdd0 [ 470.817841][T18237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.817857][T18237] ____sys_sendmsg+0xa95/0xc70 [ 470.817872][T18237] ? copy_msghdr_from_user+0x10a/0x160 [ 470.817883][T18237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.817898][T18237] ? __pfx__kstrtoull+0x10/0x10 [ 470.817910][T18237] ___sys_sendmsg+0x134/0x1d0 [ 470.817921][T18237] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.817935][T18237] ? rcu_is_watching+0x12/0xc0 [ 470.817955][T18237] __sys_sendmmsg+0x200/0x420 [ 470.817967][T18237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 470.817978][T18237] ? lock_release+0x201/0x2f0 [ 470.817997][T18237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.818014][T18237] ? fput+0x9b/0xd0 [ 470.818029][T18237] ? ksys_write+0x1ac/0x250 [ 470.818040][T18237] ? __pfx_ksys_write+0x10/0x10 [ 470.818052][T18237] __x64_sys_sendmmsg+0x9c/0x100 [ 470.818063][T18237] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 470.818077][T18237] do_syscall_64+0xcd/0x4c0 [ 470.818090][T18237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.818101][T18237] RIP: 0033:0x7f5932d8ebe9 [ 470.818111][T18237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.818122][T18237] RSP: 002b:00007f5933b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 470.818133][T18237] RAX: ffffffffffffffda RBX: 00007f5932fb5fa0 RCX: 00007f5932d8ebe9 [ 470.818140][T18237] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 470.818148][T18237] RBP: 00007f5933b49090 R08: 0000000000000000 R09: 0000000000000000 [ 470.818155][T18237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.818161][T18237] R13: 00007f5932fb6038 R14: 00007f5932fb5fa0 R15: 00007ffdccbcd578 [ 470.818173][T18237] [ 471.084000][ T7985] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 471.260452][ T7985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.264937][ T7985] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.269071][ T7985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.274760][ T7985] usb 5-1: config 0 descriptor?? [ 471.326089][T18266] warn_alloc: 1 callbacks suppressed [ 471.326101][T18266] syz.6.7443: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 471.336174][T18266] CPU: 3 UID: 0 PID: 18266 Comm: syz.6.7443 Not tainted syzkaller #0 PREEMPT(full) [ 471.336193][T18266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.336201][T18266] Call Trace: [ 471.336206][T18266] [ 471.336211][T18266] dump_stack_lvl+0x16c/0x1f0 [ 471.336228][T18266] warn_alloc+0x248/0x3a0 [ 471.336240][T18266] ? __pfx_warn_alloc+0x10/0x10 [ 471.336289][T18266] ? alloc_pages_mpol+0x25a/0x550 [ 471.336309][T18266] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 471.336347][T18266] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 471.336377][T18266] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 471.336410][T18266] ? vhost_task_create+0x1d2/0x2e0 [ 471.336424][T18266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 471.336442][T18266] ? memcpy_and_pad+0x2b/0x90 [ 471.336462][T18266] ? vhost_task_create+0x1d2/0x2e0 [ 471.336472][T18266] __vmalloc_node_noprof+0xad/0xf0 [ 471.336488][T18266] ? vhost_task_create+0x1d2/0x2e0 [ 471.336499][T18266] copy_process+0x2c70/0x7690 [ 471.336519][T18266] ? __pfx_copy_process+0x10/0x10 [ 471.336535][T18266] ? lockdep_init_map_type+0x5c/0x280 [ 471.336546][T18266] ? __raw_spin_lock_init+0x3a/0x110 [ 471.336557][T18266] ? lockdep_init_map_type+0x5c/0x280 [ 471.336567][T18266] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 471.336583][T18266] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 471.336602][T18266] vhost_task_create+0x1d2/0x2e0 [ 471.336612][T18266] ? __pfx_vhost_task_create+0x10/0x10 [ 471.336625][T18266] ? __pfx_vhost_task_fn+0x10/0x10 [ 471.336636][T18266] ? rcu_is_watching+0x12/0xc0 [ 471.336650][T18266] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 471.336665][T18266] kvm_mmu_post_init_vm+0x1b7/0x380 [ 471.336679][T18266] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 471.336695][T18266] ? rcu_is_watching+0x12/0xc0 [ 471.336713][T18266] ? lock_release+0x201/0x2f0 [ 471.336731][T18266] kvm_vcpu_ioctl+0x5eb/0x1690 [ 471.336748][T18266] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 471.336768][T18266] ? preempt_count_add+0x76/0x150 [ 471.336786][T18266] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 471.336807][T18266] ? do_vfs_ioctl+0x128/0x14f0 [ 471.336833][T18266] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 471.336856][T18266] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 471.336884][T18266] ? rcu_is_watching+0x12/0xc0 [ 471.336904][T18266] ? __fget_files+0x204/0x3c0 [ 471.336924][T18266] ? hook_file_ioctl_common+0x145/0x410 [ 471.336944][T18266] ? selinux_file_ioctl+0x180/0x270 [ 471.336960][T18266] ? selinux_file_ioctl+0xb4/0x270 [ 471.336976][T18266] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 471.336991][T18266] __x64_sys_ioctl+0x18b/0x210 [ 471.337008][T18266] do_syscall_64+0xcd/0x4c0 [ 471.337022][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.337033][T18266] RIP: 0033:0x7faa9538ebe9 [ 471.337043][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.337054][T18266] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.337066][T18266] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 471.337073][T18266] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 471.337080][T18266] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 471.337087][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.337094][T18266] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 471.337106][T18266] [ 471.337110][T18266] Mem-Info: [ 471.460326][T18266] active_anon:19487 inactive_anon:33 isolated_anon:0 [ 471.460326][T18266] active_file:12793 inactive_file:8670 isolated_file:0 [ 471.460326][T18266] unevictable:1768 dirty:490 writeback:0 [ 471.460326][T18266] slab_reclaimable:10242 slab_unreclaimable:94650 [ 471.460326][T18266] mapped:27919 shmem:10615 pagetables:1501 [ 471.460326][T18266] sec_pagetables:323 bounce:0 [ 471.460326][T18266] kernel_misc_reclaimable:0 [ 471.460326][T18266] free:435358 free_pcp:16300 free_cma:0 [ 471.477354][T18266] Node 0 active_anon:64444kB inactive_anon:132kB active_file:51172kB inactive_file:34544kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111676kB dirty:1960kB writeback:0kB shmem:25420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17584kB pagetables:5500kB sec_pagetables:1292kB all_unreclaimable? no Balloon:0kB [ 471.489529][T18266] Node 1 active_anon:13504kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:17040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 471.496719][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.499760][T18266] Node 0 DMA free:14500kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:760kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 471.504950][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.512069][T18266] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 471.516476][T18266] Node 0 DMA32 free:135852kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63684kB inactive_anon:132kB active_file:51172kB inactive_file:34544kB unevictable:3536kB writepending:1960kB present:2080628kB managed:1263492kB mlocked:0kB bounce:0kB free_pcp:53800kB local_pcp:16884kB free_cma:0kB [ 471.527376][T18266] lowmem_reserve[]: 0 0 0 0 0 [ 471.528943][T18266] Node 1 Normal free:1590832kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13504kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:11632kB local_pcp:752kB free_cma:0kB [ 471.540037][T18266] lowmem_reserve[]: 0 0 0 0 0 [ 471.542016][T18266] Node 0 DMA: 9*4kB (UM) 8*8kB (U) 10*16kB (U) 9*32kB (U) 8*64kB (U) 11*128kB (UM) 9*256kB (UM) 5*512kB (UM) 3*1024kB (U) 2*2048kB (U) 0*4096kB = 14500kB [ 471.543616][T23411] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 471.548687][T18266] Node 0 DMA32: 245*4kB (UME) 254*8kB (UME) 463*16kB (UME) 369*32kB (UME) 185*64kB (UME) 236*128kB (UME) 117*256kB (UM) 43*512kB (UME) 11*1024kB (UM) 4*2048kB (M) 0*4096kB = 135700kB [ 471.558571][T18266] Node 1 Normal: 272*4kB (UME) 295*8kB (UME) 282*16kB (UME) 363*32kB (UME) 237*64kB (UME) 165*128kB (UME) 102*256kB (UME) 47*512kB (UM) 40*1024kB (UM) 23*2048kB (UM) 341*4096kB (UM) = 1590840kB [ 471.566860][T18266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.570555][T18266] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 471.573446][T18266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 471.576597][T18266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 471.579744][T18266] 32107 total pagecache pages [ 471.581273][T18266] 32 pages in swap cache [ 471.582617][T18266] Free swap = 124868kB [ 471.583922][T18266] Total swap = 124996kB [ 471.585285][T18266] 1048443 pages RAM [ 471.586716][T18266] 0 pages HighMem/MovableOnly [ 471.588243][T18266] 283257 pages reserved [ 471.589582][T18266] 0 pages cma reserved [ 471.682867][T23411] usb 10-1: device descriptor read/64, error -71 [ 471.733454][ T7985] usbhid 5-1:0.0: can't add hid device: -71 [ 471.736915][ T7985] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.740754][ T7985] usb 5-1: USB disconnect, device number 41 [ 471.960808][T23411] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 472.068723][ T10] hid-generic 0000:0001:0007.000F: unknown main item tag 0x0 [ 472.071316][ T10] hid-generic 0000:0001:0007.000F: unexpected long global item [ 472.074308][ T10] hid-generic 0000:0001:0007.000F: probe with driver hid-generic failed with error -22 [ 472.099529][T23411] usb 10-1: device descriptor read/64, error -71 [ 472.108263][T18334] __nla_validate_parse: 4 callbacks suppressed [ 472.108280][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7455'. [ 472.228019][T23411] usb usb10-port1: attempt power cycle [ 472.336850][T18351] FAULT_INJECTION: forcing a failure. [ 472.336850][T18351] name failslab, interval 1, probability 0, space 0, times 0 [ 472.341716][T18351] CPU: 0 UID: 0 PID: 18351 Comm: syz.6.7459 Not tainted syzkaller #0 PREEMPT(full) [ 472.341732][T18351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.341739][T18351] Call Trace: [ 472.341743][T18351] [ 472.341748][T18351] dump_stack_lvl+0x16c/0x1f0 [ 472.341764][T18351] should_fail_ex+0x512/0x640 [ 472.341779][T18351] should_failslab+0xc2/0x120 [ 472.341793][T18351] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 472.341804][T18351] ? fpstate_reset+0x112/0x3b0 [ 472.341819][T18351] ? alloc_pid+0xc7/0xbc0 [ 472.341844][T18351] alloc_pid+0xc7/0xbc0 [ 472.341856][T18351] copy_process+0x466f/0x7690 [ 472.341875][T18351] ? __pfx_copy_process+0x10/0x10 [ 472.341891][T18351] ? lockdep_init_map_type+0x5c/0x280 [ 472.341901][T18351] ? __raw_spin_lock_init+0x3a/0x110 [ 472.341913][T18351] ? lockdep_init_map_type+0x5c/0x280 [ 472.341923][T18351] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 472.341938][T18351] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 472.341956][T18351] vhost_task_create+0x1d2/0x2e0 [ 472.341968][T18351] ? __pfx_vhost_task_create+0x10/0x10 [ 472.341981][T18351] ? __pfx_vhost_task_fn+0x10/0x10 [ 472.341993][T18351] ? rcu_is_watching+0x12/0xc0 [ 472.342008][T18351] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 472.342025][T18351] kvm_mmu_post_init_vm+0x1b7/0x380 [ 472.342040][T18351] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 472.342057][T18351] ? rcu_is_watching+0x12/0xc0 [ 472.342072][T18351] ? lock_release+0x201/0x2f0 [ 472.342091][T18351] kvm_vcpu_ioctl+0x5eb/0x1690 [ 472.342108][T18351] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.342124][T18351] ? preempt_count_add+0x76/0x150 [ 472.342135][T18351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.342150][T18351] ? do_vfs_ioctl+0x128/0x14f0 [ 472.342168][T18351] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.342186][T18351] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 472.342206][T18351] ? rcu_is_watching+0x12/0xc0 [ 472.342221][T18351] ? __fget_files+0x204/0x3c0 [ 472.342234][T18351] ? hook_file_ioctl_common+0x145/0x410 [ 472.342248][T18351] ? selinux_file_ioctl+0x180/0x270 [ 472.342265][T18351] ? selinux_file_ioctl+0xb4/0x270 [ 472.342282][T18351] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.342298][T18351] __x64_sys_ioctl+0x18b/0x210 [ 472.342317][T18351] do_syscall_64+0xcd/0x4c0 [ 472.342331][T18351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.342343][T18351] RIP: 0033:0x7faa9538ebe9 [ 472.342354][T18351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.342366][T18351] RSP: 002b:00007faa9625f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.342379][T18351] RAX: ffffffffffffffda RBX: 00007faa955b5fa0 RCX: 00007faa9538ebe9 [ 472.342388][T18351] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 472.342396][T18351] RBP: 00007faa9625f090 R08: 0000000000000000 R09: 0000000000000000 [ 472.342404][T18351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.342411][T18351] R13: 00007faa955b6038 R14: 00007faa955b5fa0 R15: 00007ffcdb708f78 [ 472.342424][T18351] [ 472.450044][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.463854][ T40] kauditd_printk_skb: 1481 callbacks suppressed [ 472.463873][ T40] audit: type=1400 audit(1756310558.204:64561): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=56950 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 472.493861][ T40] audit: type=1400 audit(1756310558.223:64562): avc: denied { read write } for pid=18365 comm="syz.0.7464" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.505710][ T40] audit: type=1400 audit(1756310558.223:64563): avc: denied { open } for pid=18365 comm="syz.0.7464" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.513670][ T40] audit: type=1400 audit(1756310558.223:64564): avc: denied { ioctl } for pid=18365 comm="syz.0.7464" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.514772][T18366] ------------[ cut here ]------------ [ 472.524471][T18366] WARNING: CPU: 3 PID: 18366 at arch/x86/kvm/lapic.c:3367 kvm_apic_accept_events+0x444/0x4c0 [ 472.532030][T18366] Modules linked in: [ 472.532174][ T40] audit: type=1400 audit(1756310558.270:64565): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=36474 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 472.537068][T18366] CPU: 3 UID: 0 PID: 18366 Comm: syz.0.7464 Not tainted syzkaller #0 PREEMPT(full) [ 472.537105][T18366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.537123][T18366] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 472.545472][ T40] audit: type=1400 audit(1756310558.270:64566): avc: denied { recv } for pid=5931 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56950 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 472.545504][ T40] audit: type=1400 audit(1756310558.270:64567): avc: denied { ioctl } for pid=18258 comm="syz.5.7442" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.571252][ T40] audit: type=1400 audit(1756310558.298:64568): avc: denied { read } for pid=18365 comm="syz.0.7464" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.571773][T18366] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 61 78 db 00 e9 33 fc ff ff e8 27 78 db 00 e9 17 fd ff ff e8 7d 21 75 00 90 <0f> 0b 90 e9 24 fd ff ff e8 3f 78 db 00 e9 de fb ff ff e8 05 78 db [ 472.581343][ T40] audit: type=1400 audit(1756310558.298:64569): avc: denied { open } for pid=18365 comm="syz.0.7464" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.589344][T18366] RSP: 0018:ffffc9000df3fc48 EFLAGS: 00010283 [ 472.598000][ T40] audit: type=1400 audit(1756310558.298:64570): avc: denied { ioctl } for pid=18365 comm="syz.0.7464" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.599671][T18366] RAX: 0000000000000723 RBX: 0000000000000002 RCX: ffffc900251a9000 [ 472.608327][T23411] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 472.613310][T18366] RDX: 0000000000080000 RSI: ffffffff81466fc3 RDI: 0000000000000005 [ 472.615960][T18366] RBP: ffff888037778000 R08: 0000000000000005 R09: 0000000000000002 [ 472.618624][T18366] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 472.621206][T18366] R13: ffff8880377780e0 R14: ffff88802af32970 R15: 0000000000000001 [ 472.623845][T18366] FS: 00007f9cae0d86c0(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000 [ 472.626749][T18366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.628968][T18366] CR2: 0000000000000000 CR3: 000000004a25d000 CR4: 0000000000352ef0 [ 472.631590][T18366] DR0: 0000000000000000 DR1: 0000000000000007 DR2: 0000000000000000 [ 472.634203][T18366] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 472.634802][T23411] usb 10-1: device descriptor read/8, error -71 [ 472.636789][T18366] Call Trace: [ 472.636799][T18366] [ 472.636805][T18366] kvm_arch_vcpu_ioctl_get_mpstate+0x129/0x510 [ 472.643393][T18366] kvm_vcpu_ioctl+0x7b8/0x1690 [ 472.645258][T18366] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.647127][T18366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.649016][T18366] ? do_vfs_ioctl+0x128/0x14f0 [ 472.650556][T18366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.652141][T18366] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 472.654597][T18366] ? rcu_is_watching+0x12/0xc0 [ 472.656215][T18366] ? __fget_files+0x204/0x3c0 [ 472.657790][T18366] ? hook_file_ioctl_common+0x145/0x410 [ 472.659503][T18366] ? selinux_file_ioctl+0x180/0x270 [ 472.661165][T18366] ? selinux_file_ioctl+0xb4/0x270 [ 472.662760][T18366] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.664568][T18366] __x64_sys_ioctl+0x18b/0x210 [ 472.666219][T18366] do_syscall_64+0xcd/0x4c0 [ 472.667706][T18366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.669601][T18366] RIP: 0033:0x7f9cad18ebe9 [ 472.671062][T18366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.677183][T18366] RSP: 002b:00007f9cae0d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.679806][T18366] RAX: ffffffffffffffda RBX: 00007f9cad3b5fa0 RCX: 00007f9cad18ebe9 [ 472.682298][T18366] RDX: 0000200000000280 RSI: 000000008004ae98 RDI: 0000000000000006 [ 472.684778][T18366] RBP: 00007f9cad211e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.687296][T18366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.689848][T18366] R13: 00007f9cad3b6038 R14: 00007f9cad3b5fa0 R15: 00007fffa158f568 [ 472.692345][T18366] [ 472.693355][T18366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.695648][T18366] CPU: 3 UID: 0 PID: 18366 Comm: syz.0.7464 Not tainted syzkaller #0 PREEMPT(full) [ 472.698570][T18366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.701951][T18366] Call Trace: [ 472.703022][T18366] [ 472.703972][T18366] dump_stack_lvl+0x3d/0x1f0 [ 472.705447][T18366] vpanic+0x6e8/0x7a0 [ 472.706737][T18366] ? __pfx_vpanic+0x10/0x10 [ 472.708189][T18366] ? kvm_apic_accept_events+0x444/0x4c0 [ 472.710002][T18366] panic+0xca/0xd0 [ 472.711218][T18366] ? __pfx_panic+0x10/0x10 [ 472.712675][T18366] check_panic_on_warn+0xab/0xb0 [ 472.714304][T18366] __warn+0xf6/0x3c0 [ 472.715701][T18366] ? kvm_apic_accept_events+0x444/0x4c0 [ 472.717489][T18366] report_bug+0x3c3/0x580 [ 472.718892][T18366] ? kvm_apic_accept_events+0x444/0x4c0 [ 472.720721][T18366] handle_bug+0x184/0x210 [ 472.722187][T18366] exc_invalid_op+0x17/0x50 [ 472.723748][T18366] asm_exc_invalid_op+0x1a/0x20 [ 472.725423][T18366] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 472.727534][T18366] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 61 78 db 00 e9 33 fc ff ff e8 27 78 db 00 e9 17 fd ff ff e8 7d 21 75 00 90 <0f> 0b 90 e9 24 fd ff ff e8 3f 78 db 00 e9 de fb ff ff e8 05 78 db [ 472.733781][T18366] RSP: 0018:ffffc9000df3fc48 EFLAGS: 00010283 [ 472.735649][T18366] RAX: 0000000000000723 RBX: 0000000000000002 RCX: ffffc900251a9000 [ 472.738152][T18366] RDX: 0000000000080000 RSI: ffffffff81466fc3 RDI: 0000000000000005 [ 472.740685][T18366] RBP: ffff888037778000 R08: 0000000000000005 R09: 0000000000000002 [ 472.743192][T18366] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000001 [ 472.745701][T18366] R13: ffff8880377780e0 R14: ffff88802af32970 R15: 0000000000000001 [ 472.748202][T18366] ? kvm_apic_accept_events+0x443/0x4c0 [ 472.749998][T18366] ? kvm_apic_accept_events+0x443/0x4c0 [ 472.751764][T18366] kvm_arch_vcpu_ioctl_get_mpstate+0x129/0x510 [ 472.753728][T18366] kvm_vcpu_ioctl+0x7b8/0x1690 [ 472.755253][T18366] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.756857][T18366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.758688][T18366] ? do_vfs_ioctl+0x128/0x14f0 [ 472.760476][T18366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.762211][T18366] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 472.764828][T18366] ? rcu_is_watching+0x12/0xc0 [ 472.766772][T18366] ? __fget_files+0x204/0x3c0 [ 472.768747][T18366] ? hook_file_ioctl_common+0x145/0x410 [ 472.771013][T18366] ? selinux_file_ioctl+0x180/0x270 [ 472.773042][T18366] ? selinux_file_ioctl+0xb4/0x270 [ 472.775176][T18366] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.777329][T18366] __x64_sys_ioctl+0x18b/0x210 [ 472.779287][T18366] do_syscall_64+0xcd/0x4c0 [ 472.781209][T18366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.783795][T18366] RIP: 0033:0x7f9cad18ebe9 [ 472.785683][T18366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.793423][T18366] RSP: 002b:00007f9cae0d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.796943][T18366] RAX: ffffffffffffffda RBX: 00007f9cad3b5fa0 RCX: 00007f9cad18ebe9 [ 472.800346][T18366] RDX: 0000200000000280 RSI: 000000008004ae98 RDI: 0000000000000006 [ 472.803945][T18366] RBP: 00007f9cad211e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.807137][T18366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.810347][T18366] R13: 00007f9cad3b6038 R14: 00007f9cad3b5fa0 R15: 00007fffa158f568 [ 472.813544][T18366] [ 472.815841][T18366] Kernel Offset: disabled [ 472.817660][T18366] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:20:36 Registers: info registers vcpu 0 CPU#0 RAX=00000000004f4bcc RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9cae0d5b80 CR3=00000000343f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000007 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005564ae777600 00005564ae777600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf429380 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2d2d2d205d3636 333831545b5d3237 373431352e323734 20205b203a6c656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d65747379733d 747865746e6f6374 20745f6d64617379 733a725f6d646173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79733a746f6f723d 747865746e6f6373 203530656178303d 646d636c74636f69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2034383d6f6e6920 227366706d747665 64223d7665642022 6d766b2f7665642f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 223d687461702022 343634372e302e7a 7973223d6d6d6f63 2035363338313d64 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000000000fe RCX=ffffffff819acd92 RDX=ffff88801c340000 RSI=ffffffff819acd80 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000f1f75 R13=0000000000000200 R14=ffff8880136b2440 R15=ffffc9000078fc60 RIP=ffffffff819acd82 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9cae0d6568 CR3=00000000343f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005564ae777600 00005564ae777600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf429380 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 766b20373633333a 632e636970616c2f 6d766b2f3638782f 6863726120746120 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d65747379733d 747865746e6f6374 20745f6d64617379 733a725f6d646173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79733a746f6f723d 747865746e6f6373 203530656178303d 646d636c74636f69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2034383d6f6e6920 227366706d747665 64223d7665642022 6d766b2f7665642f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 223d687461702022 343634372e302e7a 7973223d6d6d6f63 2035363338313d64 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003e155c RBX=0000000000000002 RCX=ffffffff8b939c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000cffc CR3=0000000031ad3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555684a4b50 00005555684a3da0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555684aadb3 00005555684aa4d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2444c70000860c00 2444c701d4080480 0304800408900340 1000088003001000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002444c77b8075ba 0ff0c422fde2c424 1c010f0000000006 2444c700004a2002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 090fc979b681e2c4 241c010f00000000 062444c70000807e 022444c7b5e805f2 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ed660cfcba66ef 8b8a6be6b80cf8ba 66320f00000ab7b9 e7220fc4010f3636 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102100009800428 1000021000088004 0183c08004010000 0a08060100001008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06100174a2048010 0009900302100009 800301d4100008a0 03ed660cfcba66ef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b8a6be6b80cf8ba 66320f00000ab7b9 e7220fc4010f3636 090fc979b681e2c4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 241c010f00000000 062444c70000807e 022444c7b5e805f2 002444c77b8075ba ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a35322e7965 6b5f5f2062203036 3739303362396666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3739303362396666 6666666666660a36 322e79656b5f5f20 6220306137393033 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303238393033 6239666666666666 66660a37322e7965 6b5f5f2062203065 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220306365643033 6239666666666666 66660a302e79656b 5f5f206220303865 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e616820622030 3066643033623966 666666666666660a 302e79656b5f5f20 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203034666430 3362396666666666 6666660a64695f74 656e5f656b616873 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6530336239666666 66666666660a6c62 7468736168725f65 6b616873646e6168 info registers vcpu 3 CPU#3 RAX=000000000005769d RBX=000000000000002c RCX=ffffc900251a9000 RDX=0000000000080000 RSI=ffffffff819acd80 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000df3f8c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=3a474e494e524157 R12=1ffff92001be7f1a R13=0000000000000200 R14=ffff88801c340000 R15=ffffc9000df3f988 RIP=ffffffff819acd89 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9cae0d86c0 ffffffff 00c01300 GS =0000 ffff8880d69bc000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004a25d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000007 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cad212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cad212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cad3874a8 00007f9cad3874a0 00007f9cad387498 00007f9cad387470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cadeed100 00007f9cad387460 00007f9cad387478 00007f9cadadc0de ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9cad3874b8 00007f9cad3874b0 00007f9cad3874a8 00007f9cad3874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000