last executing test programs: 1m19.029800243s ago: executing program 0 (id=542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m18.969873894s ago: executing program 0 (id=544): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003600)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000003640), &(0x7f0000003680)=0x0, &(0x7f00000036c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f0000003780)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000680)="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", 0xff}], 0x1, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r2, r2, r2, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x88, 0x8100}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000880)="ecce58ad39b54befd35c83e4f42ef85b28a4d131c4c90d57c32b043280a455d7c1bffc8fdde0755c1a4f145c71961a2be0471f1860b341", 0x37}, {&(0x7f00000008c0)="3e194066ce617678eb87d865bbc6e7769310b30f01bcb0eb1502e084d6002512f6e228b8603cb68f33d6557ac57f4634b4bef977d9508719ff89c37e78345d136a84ff5a515675e1cae141d77e3b4a0f6ec21fe19b250e25a93324a87e8d846259c0558eca7549a6c502bdc9f499", 0x6e}, {&(0x7f0000000940)="5a4068fc707aa140c79c3b542d13d8cd605f0824e6d573682a69e9ebc197c7f22cb349e4f489e566f0ab30907ba8c15056d4f02a406491dbed48b0a525e15eaf63d11c9e5d479a036c0275371c357b07e86f129414f3ab8698bb4cf8d61972ca6eeeb7057993e148537f739889d11735f6ae1d0f117d6c12d0b8", 0x7a}, {&(0x7f00000009c0)="ad6f5cafad00cfcbec9a5570f9a498bd63215329b7aef3a529ebbadd21e2a1cf569841183d8b6f7b42b7b5f741eef9bdf4", 0x31}], 0x4, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b40)="43417a95", 0x4}, {&(0x7f0000000b80)="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", 0xfd}, {&(0x7f0000000c80)="7467583ac45ef5f3d4e4b99d95e48d936e3f445c53e8d55ac41262a89046a50c84d5ef9870fde4f32d8bd5a1e6349e5bbbbc851a722a6439f36c7193eec388b984d518", 0x43}, {&(0x7f0000000d00)="eb02b92889d4c5252284eba5a89416fbb9ee710f545f7a554cfbc78fd39adc20d44dd23644f6a3eccc1d120b48b0cd201e7f93c4059d440f6a315478e3b6c1db30c30c6cadf906ac8c62e8f250620813c06c19e8dcec4e89c0a72be12246d49e9dab6eec261c04e1afb8d817efa6d39247e9a5a94530d310741b14c04a18c77b1bbd54e16ab0", 0x86}, {&(0x7f0000000dc0)="92ed43d57df0fa7dd906af1bd3bbde789d4dff2bb5d811466505ac11b941aff3ed88b58580573d92ede4614516b0e44e6e4836d75c4fa59f875764c875f656e12df1743624265fb366ec797d7601b638b74a1d33e9863ea2b27ca6b432ff2988bd4a10456bda28b2db351c8492959b5938ad32cc6dffe03ea0", 0x79}], 0x5, &(0x7f0000003080)=[@rights={{0x30, 0x1, 0x1, [r2, r1, r2, r0, r2, r2, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r2, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x90, 0x4000}}, {{&(0x7f0000003140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f00000031c0)="1c20006270b569f341440f5f345538808288cabd76b4821dc35e5402e6dfd147fe96762a60c4eaccc602aa519badff56ea5916499f60192b76cdd4c1f83a00336150370ba39a8c943b74231e8f2098c19b1fb1d04ce3da153e26720865101d969e9264ed4aa3ffe0e7b695254eeb039aa9528703cb5fcdf05b7ec3863e51d3a1b5748da088c2fa51ac0d3571fff80405fab67f16a5b22d754f8a442cb314229e15929751d3ff983803dc8f910af2786b331fb3232b734697736b7a1e910c96fa55783ba3863d4f1b38a149b035278b3fb2633f25728cb97c79b7d5f05d015f435f58eff8071135b0c48b", 0xea}, {&(0x7f00000032c0)="dac1962dd55d33619ca480741ac01885fc0a2481258f0132b621e7f0477de5e5ad13a30a3a9f94267552ad02ab7563d7170bf95bb24cd62923ae89ca4fc13df53642da5abe0390133cb0395586a9d533bdf4d4f588048535c67c1d0c2685ad", 0x5f}, {&(0x7f0000003340)="d4c5a839dcb4e8cb60a5af8f37ded9385f3cb6dd06b2b69430c2b8b85f4c3b8d0e911b6b6a9d6677babf6053e22579a1dcacefb78dafdc190f9f4f6b4c3cc4d22bde47627201cdd9aa35fa7c7ea8d75454ab993dd67b6d2824cb31b835a1e93948fec8f984cb51759aee3c93d9af3ddcffa9d6d22fcadfa545c0fc28c52ed7777023075470bf0bd0e5b791daf7e302948b1ff103ae0a0156c67c310292d737b8fce8dc4834f3aa3084ace756fea677250bef8cee6dd068c96bed0ed6dc150f549e6cf720f6af67b923d5e5c01e56b13512a83d41babab42b80c96e335f1fdaf179", 0xe1}, {&(0x7f0000003440)="d43715c216556909f36a75685e481c104bd5185b7efea67cd2457b1f4516248475af79c9f77de000ea11aed2fdf4c60ba9911edb0ca5b40ec38d175abbe8077454ba34d4578f16bb9f3f1e828ba50746cc2f88323dbc69b2ef9025d08b35c23857edc90790dc741063863cf7337b1552050c8e62141f59190b9f4198f0745d6a89ba5683664a3e3a1d45bf80d7db62b643", 0x91}, {&(0x7f0000003500)="5d518362e2c4b2d7855231d99d8f98d000c38483661602782de4b0a8dc33b95c7cf2ec03daefe8088e419e07a9613877a650", 0x32}], 0x5, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x40, 0x5256f86b7d8e7453}}], 0x4, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f00000004c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r10 = socket(0x1, 0x803, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r13, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000640)={'sit0\x00', r14, 0x80, 0x8000, 0x948f, 0xb1f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0xe31, 0xd2, 0x29, 0x0, @broadcast, @multicast2}}}}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001800030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r15, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r16 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r16, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r16, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) 1m18.81968409s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x10000, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x2000000}, 0x28) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xad4}, 0xfffffffffffffecc) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fc0000000500006e0f75856857f5848d61f066dcdd37e80d00080009000200000008000c00a80a01"], 0x34}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket(0xa, 0x5, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r9, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x7347, @empty, 0xf4}}}, 0x3a) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002380)=ANY=[@ANYBLOB="1c000000190003002abd7000ffdbdf250a001408fe02000500000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) 1m18.020515146s ago: executing program 2 (id=561): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x48c, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20048081}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x89}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x4c00000000000000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1m17.959544928s ago: executing program 0 (id=562): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @remote, 0x0, [@default, @rose, @null, @null, @null, @default]}, &(0x7f0000000100)=0x40, 0xc0000) accept4$rose(r0, &(0x7f0000000140)=@short={0xb, @dev, @remote, 0x1, @null}, &(0x7f0000000180)=0x1c, 0x800) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x441}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'wlan1\x00', {0x2, 0x0, @empty}}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x106, 0x8, @buffer={0x0, 0x8d, &(0x7f0000000500)=""/141}, &(0x7f00000005c0)="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", 0x0, 0x2, 0x2, 0x4, 0x0}) 1m17.149355943s ago: executing program 2 (id=567): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwritev(r0, &(0x7f0000002640)=[{&(0x7f0000000200)="fa", 0x1}], 0x1, 0x4, 0x5) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='htcp', 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x200000, 0x0, 0x334e8b}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a0012000a002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x0, 0x1, @thr={&(0x7f0000000500)="4520f14715e3f61dd709417d3a3930a66c91c80f6b24347d38e67dd6f9d51ed6a6176aec8a9a0e39a0adc7be980668afcf7f6d5223a9ac0bc9ff08908b2f1ab1f0c09ef21e76bb86c9e06a563d7d05bb5f0a297fba8a683bd0d67d65f05cbb4174a73999f3a18c8b86effa94dc04c76cb72f894153e5faa5a2b5984fee35008f8291d434c910262bef6612cc77c2b9ab948345b44b15a33f5539500c56587ad99b93ca39e3078f510518be5cc0208b886d3cfc78f7ef6b5b1e8712e7553f18ae65f39418335bb5e3fcc7960eab1045740df5ae640965887f397f75929ebeb39e41e8744b4209e7968bd77cdef42ea9dc24fbadce467557997064b66e611c4b7ee21a1decb0b88bf69afb16682b473ecc434534c808ac58a06113f3fde29053472947fb1f464ee7ef454e6aece4a0c90eedb0714ed3b4b9db0456d9f75e7fcfeaf6d94c069880a4871688a855d16d59c799df0bc6edaeee041af4b6e32a593e49df1eeb40f802e42bd73779efd74802a913149a70e02e16b6deb11e899abb8d2d1a468b669ea7ca01834e793e1a80ed4b79fb8d6bc2ca7c712cdd0f16f16025977e9c8c0d18f51b581ab728ab76856acd83bb392062e72a7861f5d7413bb823f13ec8ddfb7ec90c886ff57214de7d7b167710d0e5fd11eb29b36a936f0aa628988937c41dfbd26b1d2c10b3fdee205e48ddf09537a2cc626225aa4e39ff1649711a4e0bf233af50fe4bc6ee2687d47dd97e2173eab5d25c31d5581f0077a6ecd68badae3a83d92821d59f2d83541c28b7fcbafb544b80d3349495575fced67555f77fb9a6b8fa53753b6d87b14cd575a3d63552e36986aa3cf94ab9bea5b1649fe88a2620a9e4ccc60d5c72f11c5a00abdaa72e57642d801d11550d73c4f51ea8c17e00250aef67b763a670b68f036b5dad8898af104ab393018bde046d3432de0c17edace27d50455196334c93f71b85a1a71b46988031ec2e971d190732c6de74bc542cc1ef72b1685c8ab3460325db21c80930e0786fae3e08456049df0dfea84c4599f6243ddb8fc6360a32c351bd1cceeb0f329e11c0577c1d095668f9fadca829793e311e687be4070f598a9fb7ad17c603e19f0b6f865dad4366a083e3cd123aa7466bb659f96b66cb10bd1af9cb3912b79f0c5861a04b31cc4108bb6aa070063d5e33175f0c11744c8e77b29951a44d001c1094c4daf1dce9cd975458bdf321039bf47c44380fb3e405e37da7e51d532ecd02842eda0159548170a129f2d6c775a54c1cc66c7c41f2138e030b5932ccd4d9c4ca6c0d3c9dce365fed6237fa8e302fb4d2ca1baae0b072c7fcccbd18dedb5ad1826b3a08795da6d140fba48de814497dac0823a787f4620adcdaf30f2c355bd7a5516286e5246ed3314021ac2fa7d8ab7af2fdb7465fe1362a86fa35b80764729669b99fdc276a585bd059a8dc04054df72c788027948fc0367cb616c88c6068a9805d522542c77d7cdd7f8b1244cdee287a65f8718bc1e1b7fbf39df838b932946ac38cdb70713855a43090560e8a0b2a8472544820ed9f51995b36a7a80ac0963c095a4a7363d7e8cde75c9781af6c0edf8ac81764be4a71d27a31ddd7d6f726529d570f2a8bf2ba08559358d708f5235acd0884ae71aa289de4ee2a13f67981b15bc3dc0fc989e3fb8b12d884cf2c3a05da95eeeaa3ac02c39789ddf7b7daf1cb14d5688561d667e556e33888bf269890c7acf996b8a67c1ba3d2e54d41ca9abd5d301a4bea80b29d58f3343725c38e08f7d23d7528da31dec8ba5c3ff18c3e7b7edcbcb4941414369ee7e19b85b4b8e8ffeceb701f86ddfd7875ef7584363925c495992fc6569fab390a43897bd21911dce7056c46ed589da688bcf3bd3c9d6683aa59ba6acfe05f473937ee5cf60d2430f9970d34c3f671731ca089ad9bcb81018f5e9e89e69a2d4185afe5da282811211069a4fe028e96e4ae607821badc943d370b7d04412d3ee4b4d924428c501fbd042220e8a6eb8541674bf8e46056c4a5ffd5c5b62c14c90eea2c88460dd88ec2d00f6a877c2334a0d913f49463f014f6b67ebc81f704c0b6b98d79ec341f29dbc7ba6e69de7d4c02aa12058a4455729121007b0659d06ff16b478b9a5e90063a9f232edaee8c0bcf24c70dfcef309c4595a173d4163c68d857eb8cf4c3565a255e8c2f7c91e0d14e7cc33c6c0720f2f0794a92416082818a608938f2303f5ccd4b8afb39a23092ba65409e6120247c97c20c7440772e7a4ad62f959e372f9a1ec90a3bf19556da9500419b61f25fc6c30c2101658f93501a5020a6d7a4c844012923ed5fbf6250430911104e83a88563465331227be00e22f7f32d664935418daec3cd5fbb3c21dcdded9256d7f614ac997594583d4b1b169875d5030ee5c819ee1fc26507c56fffb5933649dc49e2e80d43724170490b91375bc261a3427bdc0e1b3c06f3c97ef2949164711386bc81eaf2456023e6d2e05b821afaae9f227a15cf72252ef7b55e1c7e3d041b0fecca16afecb8bde9181ea8a9963a36f50a31347f441fd7d9d3f2b64ea366e58f6b2f8ee4ee05e37637b5870482630598e79eea0f0239be7b25536faecb028cee9d8de897757cec408886ef9d6562f0291b4ed437344e7156f735a7152121ddb3ad76db7e9e4f05ccf4c2779bc65019da5fb3af7c4088438c0cc509c5a4dd10c98cd99b59ea43fe6b9c5b87938de26795856d69b3991f7b198696deebb06a04b0b8ebe7692e9c401b845a13cb4a8963fc270d43a6a9584fafbe38b6222271cf8fe658788da9a8ff3507f4af9b6d5f71ee6af252b24274d0072eb9f2b07d7d3d377fb3e88c1f7e3431ae33ccb8d4f1c23244c0a40bdaec4ba9283a2c53667a517345214fdb859e3af7059f8aa5c54adda9d2bcda803668dbf289f2319d3dfa2b4becc1b0f0003c2398908d7f2f3bd7850f6a32e9fc4dcc833079e2c78d8fc6b87729089f65165c092e6d909bfb48299393293cb016716309f810ad4efd9955928c6fb1ef480c4a8ad92f4e213309e57738d90b030afa3030d71b7186b308ce700ccbd9fd41bea00ac4176c4f42b7d51c6d96d76496938d739126029c25f4ad07e32c4879def3114ef6635cc6748ae8999ecf82f6225ac3f31bb1849bae2d3de92abf332e440c39eb9fc90f585cf9c63913910f7c65ec690b50791006bfe9f008f751b14684d5bd54de2925ac2016c7b27ec52e76b6ecdbba560d8b205e0fabe7d6dedd363864183767bfc1af0156755f1a8d334112418d64a9f7bb33c1eea294bf92e0004cc2a7b1e684c14ef3fee13ca627fadcecf7f405a28a241ee4a14e5e429055252f5d70b35610d464e1883e65daf23fd8118b4553be8c8a0fd9ff6339805d3feb9ccf2f4d2216b857e538d04a9dbea3303467e3245ecbe59dc499ef74e26767f0f110dea6678da27508170d6658aab6e9007b7d1c2f18871a1b4544c4b9fb7f6eda137fcefc17159f0188e4d72332017fae2c6467452b0a72e895689c4615ab0194726090e7de282062ff461849de6fb06fcc50c6f765d3d5fd3a0a8fc6ed2c6867a9ead4a7ab00a393a251858d65ba64e0a450d6db7408115d8a1b776b6aac98a5532cf73eb121576be872a80ee32284df90b3c7f6a076e3d1732605467305c0eaba40c26b9ea657a0216090ffb2e59242c192aedfa07771cb713c18bc591086fc6a2b25b4d556ddf2d56381a2033560001ca91adc903d28cb5cd9b1aafc421a5db0c53d595e172fd423dd0d0b3d37c02205aa21d715475595df631b365e6e9331708b7bb4ec4b15d99b1ffedf1551643dbe940e204a542f05cfcf8590604a1bff5c84ab89c0b4826245d8d7edf6ac95e03d1c77deaa651339571b7146d4224a8cf9b73e96934c3e7ccd0da0755218b5fcc4a338ab5864dc28316f52e422dbb16f0fd614dd64b4158dd25677269d51c3fbf51d7bfaa947269841a935b2d5de9958f1f2463a383b7c9b4624b947ee60cff3694647a8c34dd084a8d29d6742126690197c529106f8d3dd98ad399656ef6aac54c6903b7ba46641912957e2b0f86a67001670d8054d97889324bbdeebd0c773d82582333ff6b5ec9ebc39607f396ec4185311d99e3f3e7f40bcf33ede3e545beb146e341491d91e77b89ca0eb3d8482c9b691a698633b54761b0a43313a5a8a25762d06d90a2fb627fa618f343b81c2ae71ea1ff5ae36b84335aa77cf395ca644af433714cf8d82c67e59342ce149650f8b3e8d96014a4b09a1b82fea0456b16f1e16097b3110d76b42f007dd4209c6da6b0bc54ece6cf33698c7fd9a0cdb2cec2c062d657fcf5ad1971073a50c2bd67bc31a93104949ae7c18cc67b4558dc6bd58377145ab231203e26bcef2f0f54254f92d26d1e3b0cfcbc01b7bd7f38133e0df74b864dbf50de7287326c3be571497286e3c3b1f37089217b6bc9d15d80eb8d6f2e5e016ab22a30a90268a84761a9fcf64335497619e5f46cb1d820419ff77df4ab1508211b2a5450367439e290f9cad7f0ddb6c32fa7e07b74e867e8045147896321d092fac918ed86353b737c5b64b2a035cb7fd041aa99c65c4943b9d6bc84e7a5c1e7a9391f4e0a7baea970c6c8109a24f43a4b15fd489966ced044e0f316353d5ec9629ae24d7169d7d36c73debd30255910aacf669210659427fc75ae98c551a7ed33cc3bb282848b50b38b197b6c6e2e8e21433a984061f3bec69f3f3a1c4f92382a0c9ed5fa089ffe1877dfbeecbbe8327f11fa358bde6a8ecbae58ca5868aad0ce13e1ea43e578862910af5bdd96c7a68c8635f4e117886ba4c311322188361b779b1c7ca8c9b366ec901fe112b215db2f1465c527e865977df61e7772781251c0970fdae0e2fe994327bca7150aa235faa5fdedc5956ae4b7dd52de9fbb141adc323d6e96747f0e5805c85519c7fb491c2d04c6cc4341b2b0fea397e6af912a39bc154091c9e325853f17da2edba9b9dbb508533bee50e458220dbb61e3428611b69fc7575d4f06fcd05a1d7fcb710400d45b8680851f8085b3d6bf1ac0d844832a658f85641da052e3945088204513616716e33f861a45c50e8f4cfca966f6aa9938ddeb1e869a0fcf5318038c6436f8c41811d49a5e0b051a5940469fdcf5b933410ab36fff06ec626f152f354f6a14279061b3e4a33b54ebd112323593cd53a5f74d2f41da45d360f4ba73362cd1034917e2f7fe129fc2b21397057d6446fb5d3b12b446e7c9ccbd98f0d480b31f4e7ca8b788501b01d7512f082d62c9f3046d2d304a018adc2e3a54469251be94a40dbda92877d1fff9e574e6b31b22ad735cd6072f748aa35cadf4e6cd3025ab002e28d718b20b731d0333b2ef26fcc4d420153ec765d0f1de230a0e8928a6623e023214afcf3553584469bd3f506e6bdd29c1e1cbcc088bdbfa6686e4e630a8962db43bdbdea7c7871f787bf64a07fe5c70b5215ede2f8b0c8d2f1961f0e3a21ca7e1c244a9eecb7b02d588556245d6d1eb11998bac7dba7ee3c78965afb077b52fd561605787fb7c9afb3466d71283365fea22e63f4566b66e673d7050b3b5109e3e47af2300a0d5029b010a056e46dda22f11fb97ec3b17a2610042fdafe368f592c6f11ed5a3781587e1597f6181233056fcacf0e6441276bcfcaef51946894a521e47c27d2f9f3f7c85ded86d263fb08a5662ebdebe9009d687a8c8f651c1e911fdff951bf8a97b25676edf81e6421ff909ca174b5eaad9ba48cd815cf76ad20deac4325a98cf30f199c9ad3382a47b60d8992edd9d6920a973853aa", &(0x7f0000000240)="1e08e251d7eb98a8f825d3676007a64bb6e45f5cef43d069ee99757a003d3a354d3f10fbfc287bd1a3890fca486f568ac6f392f93a0ebabc5105553c67656ab3d71922e9b2d036e4592d25a4df433a22aaf6ac58df7daef10eb8354bbfa73fa4d3329a900751a7535ab63d6e7576e4e496c195635bd0060382a9e8d7e4c571af5b3f3bc4992f14560e2b7a02fe36"}}, &(0x7f00000000c0)) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000480)={0xfffffe9e, 0x7, r4, 0x0, 0x10000, 0x0, 0x200001, 0x37302b, 0x334e8b, 0x200000000000}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fd}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x1}}) 1m17.149024243s ago: executing program 0 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10182, 0x85) 1m17.045387194s ago: executing program 0 (id=569): r0 = memfd_secret(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000000301042cbd7000000009"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ftruncate(r0, 0x7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x50, r0, 0x7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m17.045211624s ago: executing program 2 (id=570): socket$alg(0x26, 0x5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086201, &(0x7f0000000540)=0x2) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x277) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r3}, 0x0, 0x0) 1m16.200848487s ago: executing program 2 (id=576): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r3, 0x8, 0xd, 0x6}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0xfff, 0x1, 0x5, 0x5, 0x3, 0x0, 0x9, r3}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7f}, 0x76e0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000180)=0x7de, 0x4) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r9, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) fsetxattr$security_capability(r6, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x10, 0x4}]}, 0xc, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) dup2(r9, r6) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) close_range(r11, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800003, 0x11, r10, 0x2f9d7000) 1m15.559358113s ago: executing program 2 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10182, 0x85) 1m15.552189704s ago: executing program 2 (id=579): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x5, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x1, 0x3, 0xffffffff, 0x100}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1m2.083680684s ago: executing program 32 (id=569): r0 = memfd_secret(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000000301042cbd7000000009"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ftruncate(r0, 0x7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x50, r0, 0x7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m0.532155825s ago: executing program 33 (id=579): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x5, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x1, 0x3, 0xffffffff, 0x100}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 39.766913775s ago: executing program 4 (id=1140): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x766, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/crash_elfcorehdr_size', 0x121040, 0xa0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000009000000020000000500000020920000", @ANYRES32, @ANYBLOB="04000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000050000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) pwrite64(r1, &(0x7f0000000600)="65951561196a999b8d6ec5604e45a6c698456b54729d79eb39aca0622067165c24665b5db0ea7cedc6c29f1030f17d49ec1c2850dc7e44bcce3f03eb2a118a952f6575b2f0a4b8dcd3e1c306e1902a1dacf8bc4617b5db84f8967258414d1cb483fe9b25b51366c5d89eddd45139987c2bf44daf", 0x74, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='GPL\x00', 0x47d, 0x15, &(0x7f00000000c0)=""/21, 0x40f00, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xd, 0x0, 0x3ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r0, r1, r2, r3, r4], &(0x7f00000004c0)=[{0x3, 0x1, 0xf}, {0x2, 0x5, 0x0, 0x1}, {0x5, 0x3, 0x3, 0xa}, {0x1, 0x3, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x4}], 0x10, 0x80}, 0x94) 39.679056881s ago: executing program 4 (id=1142): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100009"], 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) (async) shutdown(r0, 0x1) 39.675261122s ago: executing program 4 (id=1143): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) 39.480910477s ago: executing program 4 (id=1144): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x40}, 0x20040880) 39.369998564s ago: executing program 4 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10182, 0x85) (fail_nth: 3) 39.274826441s ago: executing program 4 (id=1146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000000308030000000000000000000100000805000300060000002c00048008000b"], 0x48}, 0x1, 0x0, 0x0, 0x20048}, 0x80) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xa, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r4}, 0x38) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="a67279c2087812a4db9a52d09c8c712849c51a40ab24cb6864a5cf85cd11367fac7a43360c61c7c6eaea9a305a946a09986a7362203d12bfa1a17899d14842a8e47ca808e6d3a1e30e2d720bd5d45588c0d072e31e540001341a1ece40cba6062ff3c5b4c0328d3348cdf6e13660eedc057ffd8f7ca0068128c597d44e90fc6bbde1fe3ca9ab236ee7bf58def2bb3fb542343a4572ca029a4039d6a358b50351323013ffd3693affb83ff172795f341e32b3af4080fab498dd0f62279782d9c09dfee6b8bc62b1d11984d360a46d53e619fb03ed5203b432bac2f0ffb566", 0xde}], 0x1) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000300)=0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x7, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x80047455, 0x0) gettid() 24.092125468s ago: executing program 34 (id=1146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000000308030000000000000000000100000805000300060000002c00048008000b"], 0x48}, 0x1, 0x0, 0x0, 0x20048}, 0x80) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xa, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r4}, 0x38) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="a67279c2087812a4db9a52d09c8c712849c51a40ab24cb6864a5cf85cd11367fac7a43360c61c7c6eaea9a305a946a09986a7362203d12bfa1a17899d14842a8e47ca808e6d3a1e30e2d720bd5d45588c0d072e31e540001341a1ece40cba6062ff3c5b4c0328d3348cdf6e13660eedc057ffd8f7ca0068128c597d44e90fc6bbde1fe3ca9ab236ee7bf58def2bb3fb542343a4572ca029a4039d6a358b50351323013ffd3693affb83ff172795f341e32b3af4080fab498dd0f62279782d9c09dfee6b8bc62b1d11984d360a46d53e619fb03ed5203b432bac2f0ffb566", 0xde}], 0x1) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000300)=0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x7, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x80047455, 0x0) gettid() 13.358292416s ago: executing program 6 (id=1351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x12}}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa3) 2.77675382s ago: executing program 5 (id=1537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x2f}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x72, 0x1, 0x1, "cd8062b0315adeae257e94008af32115f2bcc46f0aa13dc28ee2cfa8fc8d46c62f62cc16eba40127af9778add4e131fdf01372d57e3d4100654ecc4e41a8edd297b2ca7883b42732d42bf1536f0dfada0fa9df6d4e6a1ad99bf535014890d7df5723225611bfd48c4cc9d35603461e1d76ca"}) 2.709016311s ago: executing program 5 (id=1538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1.759150368s ago: executing program 5 (id=1553): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x200) (async, rerun: 64) r1 = io_uring_setup(0x278b, &(0x7f0000000440)={0x0, 0x537a, 0x2000, 0x42, 0xf2}) (rerun: 64) sendfile(r0, r1, &(0x7f0000000400)=0x9, 0x3980) pwritev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000240)="173359c8ca80f0f083ee7e0256039314a398419e2b7d6d8d407f6ece912c96d14c43e530241e208d9e508ebe53397dd78ca755c7ebbf4ede696b521f1df66a8aab04166fffc93716d1f3727c5ae8251ba516b9767e875b677d961c", 0x5b}, {&(0x7f00000004c0)="3185787e3f72712091d90e29e01b7bce4f221a04a069d3b694665f4efd29d9c41dc857182ffe90a2b9b44401ee1352c69a93830110bb39fd4d4b8015ff", 0x3d}, {&(0x7f0000000680)="6e0dc3946a3c3da208d8a11b7643a35d33fc709252714d332a1fe6a962e1f0d06b44f5d4e88cc2dc8dabba0f07588d1e68d8f85e7c2f071a8687d8470e19676b2ddd86", 0x43}, {&(0x7f0000000700)="ec2e89d4338ffae3911d14c75c9582eae3a360507c3e367eb17a708ceeebdf49461fc9b103a52db429ad067acd81a90a89a0598aef84c5deec4bb23573aa3152997ef02be185940e48ad51b87d8e5282bbcc1c97d3ac788541936f5e34de5012d37d622f0e1655e263bba592249d3c49363390e6be4dbe5afc57a12a08a5a91334d69d728a87b5c707e66128e26be32744ed60ed403733bd3b26ad70a1d1e5f7347a226b78303b2bd6b5d370f8504b2523f2062eaeddaf65219a85", 0xbb}, {&(0x7f00000007c0)="f425de669db6b081ce1d49fa41756cfc2b0c4ba1f7c8c2f858f9ab51037d05313bdd5a77459c1d8d98801c1670893f806b4d85a033ecf353edac0fe384d0f96b579d0673b51d8b6a9adf1a561a3b0966a9892306fbb22323f03d656463be214ecdb8a5ebb71895ac523e44006863be0105b27adf2234353fefd45c1d71c8d6de52d6c5fb7bae46515c073fb7a8cb3e001bf1bd2d5e8f57a5f84d1e4aabc57880cb7c1065cd1ee45a2ab3aa87f13d248acfe6b59b677751b179cfb82f17bdc67e6606c9262414d53c50145e906b45c34944d491a164ddf1f95647f39db7ad6cc8", 0xe0}, {&(0x7f00000008c0)="647bfe3dcff587f7b8fe3918f699d0b783588cd6ca505822413f7e740ebf4aef5b08d721205a0a4d46b52a36785673ad39cd1a4ccd395e5a7a7fb9f4ac6e9d2cdd7b05f2a314", 0x46}, {&(0x7f0000000940)="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", 0xfa}, {&(0x7f0000000a40)="4044bba36225d8d3b38b8ccabb3d26604ffa766b15ef679dcf89b75a55d525468d2718aad718ed94a2edf66d03559d4788daf8ca35e8c62f05f6380a6fb800a8567364ffd0dafb80ee8823f4a195269412e59e1565058d511a91316b282b5a78ab597f3884dea2f31368c2f47e3131e9a7607695efd57ff014cda6680ebf9034861a8da79e9563ecdf0f1af825b4108eeeedcef233", 0x95}, {&(0x7f0000000b00)="109ad7894af6af581ddc967dd2e12db64ef429b282aa0c53c2bfee8780c391454dea22d1f865f5a15af407dc03df0ae7590bb11123eb5ad326e9a00acdb6073a5cbda281e0a8d569febe0ca33abde74fbf09b59204181cfb65e32b869ae282b7221da293160375f4d9e7cd33340815b41d2cae279e52f84989ddfc690f2ac1e11a18068a078a33ad5708f9b0830c89375553e1433020257e69cf66971fe6d83883fdf5ce8e24afa795cf902301ad3e39dc3ec4", 0xb3}], 0x9, 0x8, 0x101) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r6, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) sendto$packet(r4, &(0x7f00000002c0)="81cda90d42fe07fd39d59781d600f0c8818581f005767743bf618dc9501cecea403da56dc1fb2369aec749834e988a53b08af0e52ca28e4145e0514a98865d83e4cb36ea8c7410071a1e720d57a675fc74fbad00b6e836f84149f2be10b06de27c102c6214b99ff25851109e0f6a4988de403f04535c2e0ff315421a1fb2877490f381cd3653598b042c8b0afc947d768f8c7804c8c91e45b108a64cd5bddd6089785c2dbfe220c92b884a107b8723fd3e6150f7727aadb7bd9b723bb9ffb21acef13deff9a4448ca90f97ce92dea86826c165c08c0a", 0xd6, 0x1, &(0x7f0000000140)={0x11, 0x5, r6, 0x1, 0x5}, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000010400000000feffffff00480000", @ANYRES32=r3, @ANYBLOB="af1f0126756f3a26a01efb8a9664f8de565f4899debc000f6354c0ea"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20005000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.669228074s ago: executing program 5 (id=1555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100c0017000fbd3df25020000060900010073797a3200000000050004000200000089000b0073797a3000000000"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x1, 0x401, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7800, 0x40, 0x7, 0x6}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x128, r9, 0x710, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5}]}) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r12, 0xaea2, 0x42c830f1) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0xad}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) 1.45716724s ago: executing program 5 (id=1558): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x301a}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.338185612s ago: executing program 3 (id=1560): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x1, 0x0, 0x60, 0x0, [{@initdev}, {}, {}, {@multicast1}, {@remote}, {@empty}]}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x24, &(0x7f0000000000), &(0x7f0000000140)=0x8) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000240)) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x8, @sdr={0x3432564e, 0xfffff001}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r8, 0x2f00, 0x0, 0x0, 0x97c79cd4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}}) 1.169744502s ago: executing program 3 (id=1561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1.066334353s ago: executing program 6 (id=1351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x12}}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa3) 828.893532ms ago: executing program 1 (id=1563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000001c0)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x602002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002240)=ANY=[], 0x48) socket$inet6(0xa, 0x80002, 0x0) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x1a27, 0x200, 0x2, 0x196, 0x0, r4}) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x820000, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000000)) (async) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 700.62754ms ago: executing program 1 (id=1564): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x23, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000000)={0x1d, "67d60edc3620031d451e5aa44d3cdb5637321451672f37163f5c64b821c4b14563"}}) 548.089936ms ago: executing program 5 (id=1565): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x10001}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f00000002c0)={0x1, @pix_mp={0xfffffff8, 0xc, 0x44495658, 0x2, 0x9, [{0x2, 0x2cf1}, {0xf644, 0x3ff}, {0xb2eb, 0x101}, {0x0, 0x39a}, {0x1ff, 0x6}, {0x8}, {0x1}, {0x8, 0x5}], 0x6c, 0x5, 0x2, 0x1, 0x7}}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) write$6lowpan_enable(r8, &(0x7f00000003c0)='0', 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x44}}, 0x4008044) 419.932694ms ago: executing program 1 (id=1566): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000088002200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001400b59500000000000000000a407800", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080074030000f97ee412da14b6518a61e978e76fd141b6f47500fa3518a8fb73b425ccb18504ac107f768388e260c94a52027bfda827f3773514b3b25c2c26dd65032a23ede34bf1c27d648945"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="1400020000000000000000000100ffff00000000", @ANYRES16=r0, @ANYRESOCT=0x0, @ANYBLOB="30f677554cfdd31e256491972472fe6cc470db54a12576c165402214161b55a30abdd313c59cff18e2963682f7c24887cff5e7b814e064882b2659834af063835fb8a0dc14ed43537fa35e642dfac784fbaf94c24327a7c900ba02704811a09dac6e21177ff83d342d6d12d02aba783294c0e53d0c3f4127a94d5d59412f3ab0d5554da160453136e8387f6b53f36d92364407b4d504e019fd2ba397ef24aabc332eb34e1e8dcb1688ee2cce7ceef37c00b20fa7935d305fa4d3ba81e81676816c6594eb5ebabd084ea68670d10e233813cdd533097af3e3efa549728dcccb86d1aefb"], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000480)={0x1, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x38, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x27, r8, 0xc0c0c0c0}) r11 = syz_io_uring_setup(0x57f, &(0x7f0000000000)={0x0, 0x807734, 0x80, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0xc0, &(0x7f0000000580)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r14 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$SG_SET_COMMAND_Q(r15, 0x2271, 0x0) getsockopt$rose(r15, 0x104, 0x3, &(0x7f0000000300), &(0x7f00000004c0)=0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r11, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r8], &(0x7f00000003c0)=[0x7], &(0x7f0000000440)=[r10], &(0x7f0000000340)}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) 247.68967ms ago: executing program 3 (id=1567): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 157.570773ms ago: executing program 1 (id=1568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r1, 0xfff) getpeername(r1, 0x0, &(0x7f0000000000)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be97"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000800"/24], 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) recvfrom$inet(r3, &(0x7f00000000c0)=""/34, 0x22, 0x40002101, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x87, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) 156.803908ms ago: executing program 3 (id=1569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x13, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 100.190561ms ago: executing program 1 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2c100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8c20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)=@arm64) 99.907784ms ago: executing program 3 (id=1571): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12480, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000ac0)={0x4, r1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r6}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r7, r8) 99.06953ms ago: executing program 1 (id=1572): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf252600000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000080026006c0900000a0006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000180)={0x1}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f30375c7442400a69b4f33c7442402d3000000c7442406000000000f011424c0c00f0f6758580f01ca660f38817700c4c2459d78ad", 0x4e}], 0x1, 0xc, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f30375c7442400a69b4f33c7442402d3000000c7442406000000000f011424c0c00f0f6758580f01ca660f38817700c4c2459d78ad", 0x4e}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) (async) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 3 (id=1573): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') lseek(r0, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) kernel console output (not intermixed with test programs): r): interface not active [ 140.401667][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.403898][ T40] audit: type=1400 audit(1759345220.684:508): avc: denied { create } for pid=8538 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 140.404003][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.422129][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.434894][ T40] audit: type=1400 audit(1759345220.714:509): avc: denied { module_load } for pid=8541 comm="syz.1.811" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=22450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 140.441003][ T46] IPVS: stop unused estimator thread 0... [ 140.448698][ T8542] Invalid ELF header magic: != ELF [ 140.567518][ T8389] hsr_slave_0: entered promiscuous mode [ 140.570874][ T8389] hsr_slave_1: entered promiscuous mode [ 140.573704][ T8389] debugfs: 'hsr0' already exists in 'hsr' [ 140.576305][ T8389] Cannot create hsr debugfs directory [ 140.595732][ T8560] autofs: Bad value for 'fd' [ 140.812995][ T8334] veth0_vlan: entered promiscuous mode [ 140.840881][ T8334] veth1_vlan: entered promiscuous mode [ 140.845239][ T8389] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.859700][ T8389] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.866771][ T8389] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.874757][ T8389] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.913194][ T8334] veth0_macvtap: entered promiscuous mode [ 140.924153][ T8334] veth1_macvtap: entered promiscuous mode [ 140.932826][ T8581] uprobe: syz.3.821:8581 failed to unregister, leaking uprobe [ 140.962975][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.973635][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.985707][ T94] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.002129][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.005456][ T94] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.008921][ T94] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.022697][ T94] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.043692][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.075445][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.077831][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.087564][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.090343][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.115460][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.119446][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.148858][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.154252][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.172184][ T40] audit: type=1400 audit(1759345221.454:510): avc: denied { mounton } for pid=8334 comm="syz-executor" path="/syzkaller.dD2CbV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.188040][ T40] audit: type=1400 audit(1759345221.474:511): avc: denied { mounton } for pid=8334 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 141.194316][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 141.342193][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.514492][ T8389] veth0_vlan: entered promiscuous mode [ 141.522036][ T8389] veth1_vlan: entered promiscuous mode [ 141.545160][ T8389] veth0_macvtap: entered promiscuous mode [ 141.552772][ T8389] veth1_macvtap: entered promiscuous mode [ 141.564412][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.573660][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.579253][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.584594][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.594098][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.597449][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.618450][ T40] audit: type=1400 audit(1759345221.894:512): avc: denied { connect } for pid=8637 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.670185][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.674313][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.697985][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.702536][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.709888][ T5954] Bluetooth: hci0: command tx timeout [ 141.823641][ T8644] FAULT_INJECTION: forcing a failure. [ 141.823641][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 141.829002][ T8644] CPU: 1 UID: 0 PID: 8644 Comm: syz.5.827 Not tainted syzkaller #0 PREEMPT(full) [ 141.829021][ T8644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.829029][ T8644] Call Trace: [ 141.829034][ T8644] [ 141.829040][ T8644] dump_stack_lvl+0x16c/0x1f0 [ 141.829061][ T8644] should_fail_ex+0x512/0x640 [ 141.829076][ T8644] ? __kmalloc_node_noprof+0xc5/0x500 [ 141.829097][ T8644] should_failslab+0xc2/0x120 [ 141.829109][ T8644] __kmalloc_node_noprof+0xd8/0x500 [ 141.829127][ T8644] ? ___slab_alloc+0x5f/0x1750 [ 141.829141][ T8644] ? alloc_slab_obj_exts+0x41/0xa0 [ 141.829159][ T8644] alloc_slab_obj_exts+0x41/0xa0 [ 141.829175][ T8644] __memcg_slab_post_alloc_hook+0x255/0x960 [ 141.829198][ T8644] ? kasan_unpoison+0x27/0x60 [ 141.829216][ T8644] __kmalloc_cache_noprof+0x33b/0x3e0 [ 141.829233][ T8644] ? nf_tables_addchain.constprop.0+0x2ee/0x1c90 [ 141.829254][ T8644] nf_tables_addchain.constprop.0+0x2ee/0x1c90 [ 141.829275][ T8644] ? nft_chain_lookup+0x204/0x3e0 [ 141.829297][ T8644] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 141.829316][ T8644] ? __pfx_nft_chain_lookup+0x10/0x10 [ 141.829334][ T8644] ? __lock_acquire+0x62e/0x1ce0 [ 141.829359][ T8644] ? nla_strcmp+0xff/0x130 [ 141.829378][ T8644] ? nft_table_lookup.part.0+0x1e3/0x230 [ 141.829397][ T8644] nf_tables_newchain+0x2072/0x2da0 [ 141.829413][ T8644] ? find_held_lock+0x1/0x80 [ 141.829429][ T8644] ? net_generic+0xea/0x2a0 [ 141.829446][ T8644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.829465][ T8644] ? __nla_validate_parse+0x600/0x2880 [ 141.829485][ T8644] ? __pfx_nf_tables_newchain+0x10/0x10 [ 141.829502][ T8644] ? __pfx___nla_validate_parse+0x10/0x10 [ 141.829527][ T8644] ? __nla_parse+0x40/0x60 [ 141.829547][ T8644] nfnetlink_rcv_batch+0x18e9/0x2330 [ 141.829568][ T8644] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 141.829607][ T8644] ? avc_has_perm_noaudit+0x149/0x3b0 [ 141.829646][ T8644] ? __nla_parse+0x40/0x60 [ 141.829666][ T8644] nfnetlink_rcv+0x3c1/0x430 [ 141.829678][ T8644] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 141.829694][ T8644] netlink_unicast+0x5a7/0x870 [ 141.829714][ T8644] ? __pfx_netlink_unicast+0x10/0x10 [ 141.829730][ T8644] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 141.829752][ T8644] netlink_sendmsg+0x8d1/0xdd0 [ 141.829773][ T8644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.829798][ T8644] ____sys_sendmsg+0xa98/0xc70 [ 141.829818][ T8644] ? copy_msghdr_from_user+0x10a/0x160 [ 141.829833][ T8644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.829859][ T8644] ___sys_sendmsg+0x134/0x1d0 [ 141.829875][ T8644] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.829911][ T8644] __sys_sendmsg+0x16d/0x220 [ 141.829927][ T8644] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.829953][ T8644] do_syscall_64+0xcd/0x4e0 [ 141.829978][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.829991][ T8644] RIP: 0033:0x7f21af98eec9 [ 141.830002][ T8644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.830015][ T8644] RSP: 002b:00007f21b07bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.830045][ T8644] RAX: ffffffffffffffda RBX: 00007f21afbe5fa0 RCX: 00007f21af98eec9 [ 141.830053][ T8644] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 141.830062][ T8644] RBP: 00007f21b07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 141.830069][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.830076][ T8644] R13: 00007f21afbe6038 R14: 00007f21afbe5fa0 R15: 00007ffc4ee74f08 [ 141.830094][ T8644] [ 142.132500][ T8658] sctp: [Deprecated]: syz.3.830 (pid 8658) Use of int in max_burst socket option deprecated. [ 142.132500][ T8658] Use struct sctp_assoc_value instead [ 142.189877][ T5954] Bluetooth: hci4: command tx timeout [ 142.482665][ T8677] vxcan1: entered allmulticast mode [ 142.597121][ T6036] IPVS: starting estimator thread 0... [ 142.601278][ T8685] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 142.709843][ T8684] IPVS: using max 30 ests per chain, 72000 per kthread [ 142.726330][ T8697] netlink: 'syz.5.844': attribute type 1 has an invalid length. [ 142.783008][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 142.783020][ T40] audit: type=1400 audit(1759345223.064:517): avc: denied { mount } for pid=8696 comm="syz.5.844" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.783328][ T8701] devtmpfs: Cannot change global quota limit on remount [ 142.784971][ T40] audit: type=1400 audit(1759345223.064:518): avc: denied { remount } for pid=8696 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 142.859887][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 142.972106][ T8716] vlan0: entered promiscuous mode [ 142.974406][ T8716] vlan0: entered allmulticast mode [ 142.976362][ T8716] hsr_slave_1: entered allmulticast mode [ 143.071404][ T8723] netlink: 'syz.5.851': attribute type 2 has an invalid length. [ 143.126819][ T8725] input: syz0 as /devices/virtual/input/input13 [ 143.455901][ T40] audit: type=1400 audit(1759345223.734:519): avc: denied { accept } for pid=8749 comm="syz.4.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.519486][ T8756] overlayfs: failed to resolve './file1': -2 [ 143.547539][ T8760] autofs: Unknown parameter '0x0000000000000000' [ 143.561024][ T8762] loop3: detected capacity change from 0 to 7 [ 143.565797][ T6301] Dev loop3: unable to read RDB block 7 [ 143.568149][ T6301] loop3: unable to read partition table [ 143.572971][ T6301] loop3: partition table beyond EOD, truncated [ 143.576826][ T8762] Dev loop3: unable to read RDB block 7 [ 143.579190][ T8762] loop3: unable to read partition table [ 143.582455][ T8762] loop3: partition table beyond EOD, truncated [ 143.585938][ T8762] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 143.643357][ T8773] support for cryptoloop has been removed. Use dm-crypt instead. [ 143.651633][ T40] audit: type=1400 audit(1759345223.924:520): avc: denied { map } for pid=8772 comm="syz.1.870" path="/dev/sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 143.661580][ T40] audit: type=1400 audit(1759345223.934:521): avc: denied { execute } for pid=8772 comm="syz.1.870" path="/dev/sr0" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 143.724587][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.874'. [ 143.728975][ T8786] QAT: Invalid ioctl -2144835806 [ 143.745538][ T8786] loop5: detected capacity change from 0 to 7 [ 143.751839][ T6301] Dev loop5: unable to read RDB block 7 [ 143.753964][ T6301] loop5: unable to read partition table [ 143.756234][ T6301] loop5: partition table beyond EOD, truncated [ 143.765168][ T8786] Dev loop5: unable to read RDB block 7 [ 143.768167][ T8786] loop5: unable to read partition table [ 143.770745][ T8786] loop5: partition table beyond EOD, truncated [ 143.772982][ T8786] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 143.787111][ T40] audit: type=1400 audit(1759345224.064:522): avc: denied { setopt } for pid=8770 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 143.793045][ T5954] Bluetooth: hci0: command tx timeout [ 143.848229][ T8793] Mount JFS Failure: -22 [ 143.992343][ T8798] FAULT_INJECTION: forcing a failure. [ 143.992343][ T8798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.996450][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.5.878 Not tainted syzkaller #0 PREEMPT(full) [ 143.996467][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.996473][ T8798] Call Trace: [ 143.996478][ T8798] [ 143.996483][ T8798] dump_stack_lvl+0x16c/0x1f0 [ 143.996520][ T8798] should_fail_ex+0x512/0x640 [ 143.996537][ T8798] _copy_from_iter+0x29f/0x1720 [ 143.996553][ T8798] ? skb_set_owner_w+0x31f/0x710 [ 143.996565][ T8798] ? __pfx__copy_from_iter+0x10/0x10 [ 143.996577][ T8798] ? __pfx_skb_set_owner_w+0x10/0x10 [ 143.996587][ T8798] ? pppol2tp_sock_to_session+0x249/0x570 [ 143.996605][ T8798] ? __pfx_pppol2tp_sock_to_session+0x10/0x10 [ 143.996625][ T8798] pppol2tp_sendmsg+0x438/0x5f0 [ 143.996643][ T8798] sock_write_iter+0x563/0x610 [ 143.996660][ T8798] ? __pfx_sock_write_iter+0x10/0x10 [ 143.996680][ T8798] ? __pfx_file_has_perm+0x10/0x10 [ 143.996693][ T8798] do_iter_readv_writev+0x662/0x9e0 [ 143.996709][ T8798] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 143.996723][ T8798] ? selinux_file_permission+0x126/0x660 [ 143.996737][ T8798] ? bpf_lsm_file_permission+0x9/0x10 [ 143.996748][ T8798] ? security_file_permission+0x71/0x210 [ 143.996762][ T8798] ? rw_verify_area+0xcf/0x6c0 [ 143.996776][ T8798] vfs_writev+0x35f/0xde0 [ 143.996792][ T8798] ? __lock_acquire+0x62e/0x1ce0 [ 143.996803][ T8798] ? __pfx_vfs_writev+0x10/0x10 [ 143.996826][ T8798] ? __fget_files+0x20e/0x3c0 [ 143.996841][ T8798] ? __fget_files+0x130/0x3c0 [ 143.996858][ T8798] ? do_writev+0x28c/0x340 [ 143.996871][ T8798] do_writev+0x28c/0x340 [ 143.996885][ T8798] ? __pfx_do_writev+0x10/0x10 [ 143.996902][ T8798] do_syscall_64+0xcd/0x4e0 [ 143.996916][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.996927][ T8798] RIP: 0033:0x7f21af98eec9 [ 143.996936][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.996946][ T8798] RSP: 002b:00007f21b07bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 143.996956][ T8798] RAX: ffffffffffffffda RBX: 00007f21afbe5fa0 RCX: 00007f21af98eec9 [ 143.996962][ T8798] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 143.996968][ T8798] RBP: 00007f21b07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 143.996974][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.996980][ T8798] R13: 00007f21afbe6038 R14: 00007f21afbe5fa0 R15: 00007ffc4ee74f08 [ 143.996992][ T8798] [ 144.051745][ T40] audit: type=1400 audit(1759345224.324:523): avc: denied { create } for pid=8801 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 144.079344][ T8807] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.881'. [ 144.268311][ T8827] EXT4-fs: Conflicting test_dummy_encryption options [ 144.269699][ T5954] Bluetooth: hci4: command tx timeout [ 144.272012][ T40] audit: type=1400 audit(1759345224.554:524): avc: denied { map } for pid=8826 comm="syz.5.888" path="/dev/loop3" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.331417][ T8838] netlink: 'syz.5.892': attribute type 4 has an invalid length. [ 144.334075][ T8838] netlink: 152 bytes leftover after parsing attributes in process `syz.5.892'. [ 144.341604][ T8838] : renamed from bond0 (while UP) [ 144.418540][ T40] audit: type=1400 audit(1759345224.694:525): avc: denied { mount } for pid=8843 comm="syz.4.895" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 144.423193][ T8847] XFS (nullb0): Invalid superblock magic number [ 144.508242][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 144.512019][ T40] audit: type=1400 audit(1759345224.794:526): avc: denied { append } for pid=8857 comm="syz.4.899" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 144.512986][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 144.535634][ T8860] FAULT_INJECTION: forcing a failure. [ 144.535634][ T8860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.541840][ T8860] CPU: 3 UID: 0 PID: 8860 Comm: syz.5.900 Not tainted syzkaller #0 PREEMPT(full) [ 144.541861][ T8860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.541871][ T8860] Call Trace: [ 144.541877][ T8860] [ 144.541883][ T8860] dump_stack_lvl+0x16c/0x1f0 [ 144.541908][ T8860] should_fail_ex+0x512/0x640 [ 144.541929][ T8860] _copy_to_user+0x32/0xd0 [ 144.541964][ T8860] simple_read_from_buffer+0xcb/0x170 [ 144.541988][ T8860] proc_fail_nth_read+0x197/0x240 [ 144.542003][ T8860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.542021][ T8860] ? rw_verify_area+0xcf/0x6c0 [ 144.542041][ T8860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.542057][ T8860] vfs_read+0x1e4/0xcf0 [ 144.542083][ T8860] ? __pfx___mutex_lock+0x10/0x10 [ 144.542099][ T8860] ? __pfx_vfs_read+0x10/0x10 [ 144.542122][ T8860] ? __fget_files+0x20e/0x3c0 [ 144.542152][ T8860] ksys_read+0x12a/0x250 [ 144.542174][ T8860] ? __pfx_ksys_read+0x10/0x10 [ 144.542204][ T8860] do_syscall_64+0xcd/0x4e0 [ 144.542224][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.542241][ T8860] RIP: 0033:0x7f21af98d8dc [ 144.542255][ T8860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.542270][ T8860] RSP: 002b:00007f21b07bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.542286][ T8860] RAX: ffffffffffffffda RBX: 00007f21afbe5fa0 RCX: 00007f21af98d8dc [ 144.542297][ T8860] RDX: 000000000000000f RSI: 00007f21b07bd0a0 RDI: 0000000000000005 [ 144.542306][ T8860] RBP: 00007f21b07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 144.542315][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.542325][ T8860] R13: 00007f21afbe6038 R14: 00007f21afbe5fa0 R15: 00007ffc4ee74f08 [ 144.542343][ T8860] [ 144.645523][ T8865] autofs: Unknown parameter 'fd0x0000000000000000' [ 144.708169][ T8872] binder: 8870:8872 ioctl c0306201 200000000080 returned -22 [ 144.787615][ T8889] FAULT_INJECTION: forcing a failure. [ 144.787615][ T8889] name failslab, interval 1, probability 0, space 0, times 0 [ 144.795008][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.4.910 Not tainted syzkaller #0 PREEMPT(full) [ 144.795033][ T8889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.795043][ T8889] Call Trace: [ 144.795049][ T8889] [ 144.795056][ T8889] dump_stack_lvl+0x16c/0x1f0 [ 144.795084][ T8889] should_fail_ex+0x512/0x640 [ 144.795105][ T8889] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 144.795130][ T8889] should_failslab+0xc2/0x120 [ 144.795148][ T8889] __kmalloc_cache_noprof+0x6a/0x3e0 [ 144.795170][ T8889] ? nfnl_err_add+0x4e/0x350 [ 144.795200][ T8889] nfnl_err_add+0x4e/0x350 [ 144.795235][ T8889] nfnetlink_rcv_batch+0xc94/0x2330 [ 144.795265][ T8889] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 144.795299][ T8889] ? avc_has_perm_noaudit+0x149/0x3b0 [ 144.795350][ T8889] ? __nla_parse+0x40/0x60 [ 144.795379][ T8889] nfnetlink_rcv+0x3c1/0x430 [ 144.795395][ T8889] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 144.795419][ T8889] netlink_unicast+0x5a7/0x870 [ 144.795446][ T8889] ? __pfx_netlink_unicast+0x10/0x10 [ 144.795467][ T8889] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 144.795497][ T8889] netlink_sendmsg+0x8d1/0xdd0 [ 144.795547][ T8889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.795579][ T8889] ____sys_sendmsg+0xa98/0xc70 [ 144.795607][ T8889] ? copy_msghdr_from_user+0x10a/0x160 [ 144.795627][ T8889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.795664][ T8889] ___sys_sendmsg+0x134/0x1d0 [ 144.795686][ T8889] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.795738][ T8889] __sys_sendmsg+0x16d/0x220 [ 144.795760][ T8889] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.795797][ T8889] do_syscall_64+0xcd/0x4e0 [ 144.795822][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.795839][ T8889] RIP: 0033:0x7f441b78eec9 [ 144.795854][ T8889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.795869][ T8889] RSP: 002b:00007f441c609038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.795886][ T8889] RAX: ffffffffffffffda RBX: 00007f441b9e5fa0 RCX: 00007f441b78eec9 [ 144.795897][ T8889] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 144.795907][ T8889] RBP: 00007f441c609090 R08: 0000000000000000 R09: 0000000000000000 [ 144.795917][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.795927][ T8889] R13: 00007f441b9e6038 R14: 00007f441b9e5fa0 R15: 00007fff53483ab8 [ 144.795951][ T8889] [ 144.796291][ T8892] ubi31: attaching mtd0 [ 144.890073][ T8892] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 144.922640][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 144.935602][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 145.021934][ T8913] netlink: 'syz.4.919': attribute type 2 has an invalid length. [ 145.027085][ T8913] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 145.063024][ T8920] io-wq is not configured for unbound workers [ 145.063594][ T8923] FAULT_INJECTION: forcing a failure. [ 145.063594][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 145.072011][ T8923] CPU: 2 UID: 0 PID: 8923 Comm: syz.4.922 Not tainted syzkaller #0 PREEMPT(full) [ 145.072029][ T8923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.072036][ T8923] Call Trace: [ 145.072041][ T8923] [ 145.072045][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 145.072066][ T8923] should_fail_ex+0x512/0x640 [ 145.072081][ T8923] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 145.072104][ T8923] should_failslab+0xc2/0x120 [ 145.072117][ T8923] __kmalloc_cache_noprof+0x6a/0x3e0 [ 145.072140][ T8923] ? nfnl_err_add+0x4e/0x350 [ 145.072161][ T8923] nfnl_err_add+0x4e/0x350 [ 145.072181][ T8923] nfnetlink_rcv_batch+0xc94/0x2330 [ 145.072200][ T8923] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 145.072222][ T8923] ? avc_has_perm_noaudit+0x149/0x3b0 [ 145.072257][ T8923] ? __nla_parse+0x40/0x60 [ 145.072277][ T8923] nfnetlink_rcv+0x3c1/0x430 [ 145.072288][ T8923] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 145.072304][ T8923] netlink_unicast+0x5a7/0x870 [ 145.072323][ T8923] ? __pfx_netlink_unicast+0x10/0x10 [ 145.072339][ T8923] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 145.072360][ T8923] netlink_sendmsg+0x8d1/0xdd0 [ 145.072378][ T8923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.072400][ T8923] ____sys_sendmsg+0xa98/0xc70 [ 145.072419][ T8923] ? copy_msghdr_from_user+0x10a/0x160 [ 145.072434][ T8923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.072459][ T8923] ___sys_sendmsg+0x134/0x1d0 [ 145.072475][ T8923] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.072540][ T8923] __sys_sendmsg+0x16d/0x220 [ 145.072558][ T8923] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.072582][ T8923] do_syscall_64+0xcd/0x4e0 [ 145.072599][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.072612][ T8923] RIP: 0033:0x7f441b78eec9 [ 145.072622][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.072634][ T8923] RSP: 002b:00007f441c609038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.072646][ T8923] RAX: ffffffffffffffda RBX: 00007f441b9e5fa0 RCX: 00007f441b78eec9 [ 145.072653][ T8923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 145.072660][ T8923] RBP: 00007f441c609090 R08: 0000000000000000 R09: 0000000000000000 [ 145.072667][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.072673][ T8923] R13: 00007f441b9e6038 R14: 00007f441b9e5fa0 R15: 00007fff53483ab8 [ 145.072689][ T8923] [ 145.159405][ C2] vkms_vblank_simulate: vblank timer overrun [ 145.257175][ T8936] netlink: 'syz.4.924': attribute type 2 has an invalid length. [ 145.310861][ T8943] loop6: detected capacity change from 0 to 7 [ 145.324262][ T8943] Dev loop6: unable to read RDB block 7 [ 145.326377][ T8943] loop6: unable to read partition table [ 145.328312][ T8943] loop6: partition table beyond EOD, truncated [ 145.331653][ T8943] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 145.388571][ T8946] MINIX-fs: blocksize too small for device [ 145.454285][ T8950] netlink: ct family unspecified [ 145.456406][ T8950] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.817115][ T8965] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 145.874139][ T8970] netlink: 14 bytes leftover after parsing attributes in process `syz.1.938'. [ 145.880291][ T5954] Bluetooth: hci0: command tx timeout [ 145.936895][ T8975] netlink: 14 bytes leftover after parsing attributes in process `syz.1.938'. [ 145.958554][ T8977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8977 comm=syz.5.940 [ 145.978503][ T8977] block nbd5: not configured, cannot reconfigure [ 145.998868][ T8970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.005738][ T8970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.011913][ T8970] bond0 (unregistering): Released all slaves [ 146.023452][ T8977] netlink: 'syz.5.940': attribute type 1 has an invalid length. [ 146.041291][ T8977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.070222][ T8973] bond0: (slave veth3): Enslaving as an active interface with a down link [ 146.086974][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.091242][ T8973] bond0: (slave team0): making interface the new active one [ 146.095518][ T8973] team0: entered promiscuous mode [ 146.097185][ T8973] team_slave_0: entered promiscuous mode [ 146.099421][ T8973] team_slave_1: entered promiscuous mode [ 146.103051][ T8973] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.204766][ T8993] kAFS: unparsable volume name [ 146.285061][ T9004] overlayfs: failed to resolve './bus': -2 [ 146.331441][ T9008] fuse: Bad value for 'fd' [ 146.336017][ T9008] overlayfs: failed to resolve './file1': -2 [ 146.509693][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 146.519807][ T9018] netlink: 'syz.1.953': attribute type 21 has an invalid length. [ 146.522647][ T9018] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.528161][ T9018] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 146.530977][ T9018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.533599][ T9018] IPv6: NLM_F_CREATE should be set when creating new route [ 146.535918][ T9018] IPv6: NLM_F_CREATE should be set when creating new route [ 146.664015][ T24] usb 8-1: config 0 has no interfaces? [ 146.669133][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 146.675049][ T24] usb 8-1: New USB device strings: Mfr=0, Product=28, SerialNumber=0 [ 146.678128][ T24] usb 8-1: Product: syz [ 146.683563][ T24] usb 8-1: config 0 descriptor?? [ 146.736085][ T9027] bond1 (unregistering): Released all slaves [ 146.904315][ T8999] netlink: 'syz.3.948': attribute type 13 has an invalid length. [ 146.912273][ T24] usb 8-1: USB disconnect, device number 2 E2Ig!*dN N"Aoa$nT9od?b<;D ^[ 147.103993][ T9057] netlink: zone id is out of range [ 147.124251][ T9057] netlink: set zone limit has 4 unknown bytes [ 147.364405][ T9067] Bluetooth: MGMT ver 1.23 [ 147.732462][ T9086] netlink: 'syz.3.972': attribute type 13 has an invalid length. [ 147.840760][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 147.840806][ T40] audit: type=1400 audit(1759345228.189:606): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.861055][ T9093] No control pipe specified [ 147.904538][ T40] audit: type=1400 audit(1759345228.249:607): avc: denied { create } for pid=9097 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.906045][ T9098] vivid-001: ================= START STATUS ================= [ 147.910735][ T40] audit: type=1400 audit(1759345228.249:608): avc: denied { write } for pid=9097 comm="syz.3.977" name="radio2" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 147.910770][ T40] audit: type=1400 audit(1759345228.249:609): avc: denied { ioctl } for pid=9097 comm="syz.3.977" path="/dev/radio2" dev="devtmpfs" ino=992 ioctlcmd=0x5646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 147.911137][ T40] audit: type=1400 audit(1759345228.259:610): avc: denied { map_read map_write } for pid=9097 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.914740][ T9098] vivid-001: Radio HW Seek Mode: Bounded [ 147.946486][ T9098] vivid-001: Radio Programmable HW Seek: false [ 147.949311][ T9098] vivid-001: RDS Rx I/O Mode: Block I/O [ 147.953369][ T9098] vivid-001: Generate RBDS Instead of RDS: false [ 147.956171][ T9098] vivid-001: RDS Reception: true [ 147.958380][ T9098] vivid-001: RDS Program Type: 0 inactive [ 147.958577][ T5954] Bluetooth: hci4: Malformed Event: 0x2f [ 147.960443][ T40] audit: type=1400 audit(1759345228.299:611): avc: denied { read write } for pid=9105 comm="syz.4.978" name="sg1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.960497][ T40] audit: type=1400 audit(1759345228.299:612): avc: denied { open } for pid=9105 comm="syz.4.978" path="/dev/sg1" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.960522][ T40] audit: type=1400 audit(1759345228.299:613): avc: denied { ioctl } for pid=9105 comm="syz.4.978" path="/dev/sg1" dev="devtmpfs" ino=726 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 147.961318][ T9098] vivid-001: RDS PS Name: [ 147.986711][ T40] audit: type=1400 audit(1759345228.329:614): avc: denied { mount } for pid=9102 comm="syz.1.975" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 147.994504][ T9098] [ 147.998001][ T40] audit: type=1400 audit(1759345228.329:615): avc: denied { remount } for pid=9102 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.005659][ T9098] inactive [ 148.016524][ T9098] vivid-001: RDS Radio Text: inactive [ 148.018516][ T9098] vivid-001: RDS Traffic Announcement: false inactive [ 148.021250][ T9098] vivid-001: RDS Traffic Program: false inactive [ 148.029929][ T9098] vivid-001: RDS Music: false inactive [ 148.032257][ T9098] vivid-001: ================== END STATUS ================== [ 148.100573][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.140422][ T9112] usb usb8: usbfs: process 9112 (syz.1.980) did not claim interface 0 before use [ 148.255486][ T9125] xt_socket: unknown flags 0xe4 [ 148.265448][ T9125] __nla_validate_parse: 2 callbacks suppressed [ 148.265469][ T9125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.984'. [ 148.302416][ T9128] No control pipe specified [ 148.422045][ T9131] block nbd1: not configured, cannot reconfigure [ 148.431903][ T9131] netlink: 32 bytes leftover after parsing attributes in process `syz.1.986'. [ 148.528308][ T9141] deleting an unspecified loop device is not supported. [ 148.977125][ T9154] netlink: 56 bytes leftover after parsing attributes in process `syz.4.994'. [ 149.157212][ T9162] netlink: 'syz.4.998': attribute type 10 has an invalid length. [ 149.166778][ T9162] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 149.279172][ T9169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.353153][ T9174] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 149.368713][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 149.501217][ T9179] FAULT_INJECTION: forcing a failure. [ 149.501217][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 149.505205][ T9179] CPU: 1 UID: 0 PID: 9179 Comm: syz.1.1003 Not tainted syzkaller #0 PREEMPT(full) [ 149.505226][ T9179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.505235][ T9179] Call Trace: [ 149.505241][ T9179] [ 149.505248][ T9179] dump_stack_lvl+0x16c/0x1f0 [ 149.505302][ T9179] should_fail_ex+0x512/0x640 [ 149.505329][ T9179] ? fs_reclaim_acquire+0xae/0x150 [ 149.505351][ T9179] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 149.505370][ T9179] should_failslab+0xc2/0x120 [ 149.505388][ T9179] __kmalloc_noprof+0xd2/0x510 [ 149.505414][ T9179] tomoyo_realpath_from_path+0xc2/0x6e0 [ 149.505429][ T9179] ? tomoyo_profile+0x47/0x60 [ 149.505445][ T9179] tomoyo_path_number_perm+0x245/0x580 [ 149.505455][ T9179] ? tomoyo_path_number_perm+0x237/0x580 [ 149.505467][ T9179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.505479][ T9179] ? find_held_lock+0x2b/0x80 [ 149.505505][ T9179] ? find_held_lock+0x2b/0x80 [ 149.505517][ T9179] ? hook_file_ioctl_common+0x145/0x410 [ 149.505535][ T9179] ? __fget_files+0x20e/0x3c0 [ 149.505553][ T9179] security_file_ioctl+0x9b/0x240 [ 149.505566][ T9179] __x64_sys_ioctl+0xb7/0x210 [ 149.505581][ T9179] do_syscall_64+0xcd/0x4e0 [ 149.505595][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.505606][ T9179] RIP: 0033:0x7fed68d8eec9 [ 149.505615][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.505625][ T9179] RSP: 002b:00007fed69cb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.505636][ T9179] RAX: ffffffffffffffda RBX: 00007fed68fe5fa0 RCX: 00007fed68d8eec9 [ 149.505642][ T9179] RDX: 0000000000000000 RSI: 0000000080047455 RDI: 0000000000000004 [ 149.505648][ T9179] RBP: 00007fed69cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 149.505653][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.505659][ T9179] R13: 00007fed68fe6038 R14: 00007fed68fe5fa0 R15: 00007fff865b8bd8 [ 149.505672][ T9179] [ 149.505676][ T9179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.611532][ T9183] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 149.650594][ T9183] bond0: entered promiscuous mode [ 149.654895][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.674467][ T9183] bond0: (slave bridge4): making interface the new active one [ 149.678843][ T9183] bridge4: entered promiscuous mode [ 149.688493][ T9183] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 149.877450][ T9209] tipc: Started in network mode [ 149.879575][ T9209] tipc: Node identity ac14142f, cluster identity 4711 [ 149.886749][ T9209] tipc: Enabling of bearer rejected, failed to enable media [ 150.063165][ T9221] input: syz1 as /devices/virtual/input/input15 [ 150.134363][ T9230] /dev/loop0: Can't lookup blockdev [ 150.140758][ T9231] overlay: ./file0 is not a directory [ 150.149280][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1018'. [ 150.152719][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1018'. [ 150.422097][ T9246] FAULT_INJECTION: forcing a failure. [ 150.422097][ T9246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.426632][ T9246] CPU: 2 UID: 0 PID: 9246 Comm: syz.4.1024 Not tainted syzkaller #0 PREEMPT(full) [ 150.426648][ T9246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.426655][ T9246] Call Trace: [ 150.426660][ T9246] [ 150.426665][ T9246] dump_stack_lvl+0x16c/0x1f0 [ 150.426706][ T9246] should_fail_ex+0x512/0x640 [ 150.426728][ T9246] _copy_to_user+0x32/0xd0 [ 150.426743][ T9246] simple_read_from_buffer+0xcb/0x170 [ 150.426759][ T9246] proc_fail_nth_read+0x197/0x240 [ 150.426770][ T9246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.426781][ T9246] ? rw_verify_area+0xcf/0x6c0 [ 150.426794][ T9246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.426804][ T9246] vfs_read+0x1e4/0xcf0 [ 150.426821][ T9246] ? __pfx___mutex_lock+0x10/0x10 [ 150.426835][ T9246] ? __pfx_vfs_read+0x10/0x10 [ 150.426853][ T9246] ? __fget_files+0x20e/0x3c0 [ 150.426872][ T9246] ksys_read+0x12a/0x250 [ 150.426887][ T9246] ? __pfx_ksys_read+0x10/0x10 [ 150.426905][ T9246] ? fput+0x9b/0xd0 [ 150.426918][ T9246] do_syscall_64+0xcd/0x4e0 [ 150.426932][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.426943][ T9246] RIP: 0033:0x7f441b78d8dc [ 150.426953][ T9246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.426963][ T9246] RSP: 002b:00007f441c609030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.426973][ T9246] RAX: ffffffffffffffda RBX: 00007f441b9e5fa0 RCX: 00007f441b78d8dc [ 150.426980][ T9246] RDX: 000000000000000f RSI: 00007f441c6090a0 RDI: 0000000000000005 [ 150.426985][ T9246] RBP: 00007f441c609090 R08: 0000000000000000 R09: 0000000000000000 [ 150.426991][ T9246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.426997][ T9246] R13: 00007f441b9e6038 R14: 00007f441b9e5fa0 R15: 00007fff53483ab8 [ 150.427010][ T9246] [ 150.475873][ T9241] sp0: Synchronizing with TNC [ 150.480545][ C2] vkms_vblank_simulate: vblank timer overrun [ 150.517754][ T9243] [U] [ 150.753626][ T9266] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1030'. [ 150.892560][ T9279] vlan0: entered promiscuous mode [ 150.899468][ T9279] team0: Port device vlan0 added [ 150.906149][ T9279] netlink: 'syz.5.1035': attribute type 2 has an invalid length. [ 150.941332][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1037'. [ 150.945993][ T9285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1037'. [ 151.037954][ T9291] netlink: 'syz.3.1039': attribute type 11 has an invalid length. [ 151.141749][ T9299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9299 comm=syz.3.1040 [ 151.898149][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 151.916747][ T9312] ip6gre1: entered allmulticast mode [ 151.980706][ T9312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.098658][ T9344] Failed to initialize the IGMP autojoin socket (err -2) [ 152.151125][ T9353] netlink: 'syz.4.1053': attribute type 10 has an invalid length. [ 152.155542][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.161344][ T9353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.168498][ T9353] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 152.229703][ T6036] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 152.272014][ T9362] tap0: tun_chr_ioctl cmd 1074025672 [ 152.273843][ T9362] tap0: ignored: set checksum enabled [ 152.412237][ T6036] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 152.415537][ T6036] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.422836][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.635307][ T9389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 152.638089][ T9389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.643541][ T9389] vhci_hcd vhci_hcd.0: Device attached [ 152.664687][ T9391] vhci_hcd: connection closed [ 152.664965][ T54] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 152.666927][ T61] vhci_hcd: stop threads [ 152.673038][ T61] vhci_hcd: release socket [ 152.674543][ T61] vhci_hcd: disconnect device [ 152.825030][ T54] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.830602][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.834750][ T54] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.841002][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.848307][ T54] usb 10-1: config 0 descriptor?? [ 152.854439][ T54] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 152.857534][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 152.873667][ T54] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.878488][ T54] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.878593][ T54] usb 10-1: media controller created [ 152.881209][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.893755][ T54] dvb-usb: bulk message failed: -22 (6/0) [ 152.902062][ T54] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.908853][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input17 [ 152.910721][ T9406] ip6gre1: entered allmulticast mode [ 152.918790][ T54] dvb-usb: schedule remote query interval to 150 msecs. [ 152.922030][ T54] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 153.081944][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 153.083937][ T54] dvb-usb: error while querying for an remote control event. [ 153.111256][ T9416] dvb-usb: bulk message failed: -22 (4/0) [ 153.240616][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 153.242845][ T54] dvb-usb: error while querying for an remote control event. [ 153.359711][ T9424] netlink: 'syz.1.1048': attribute type 2 has an invalid length. [ 153.400528][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 153.403090][ T54] dvb-usb: error while querying for an remote control event. [ 153.559941][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 153.562585][ T54] dvb-usb: error while querying for an remote control event. [ 153.729772][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 153.733206][ T54] dvb-usb: error while querying for an remote control event. [ 153.899892][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 153.902806][ T54] dvb-usb: error while querying for an remote control event. [ 153.942319][ T9437] tmpfs: Bad value for 'mpol' [ 153.945553][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 153.945565][ T40] audit: type=1400 audit(1759345234.289:727): avc: denied { write } for pid=9436 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.947536][ T9437] __nla_validate_parse: 6 callbacks suppressed [ 153.947552][ T9437] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1074'. [ 154.003284][ T9440] netlink: 'syz.4.1075': attribute type 10 has an invalid length. [ 154.007028][ T9440] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 154.011802][ T9440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.069058][ T9444] vlan2: entered promiscuous mode [ 154.070067][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 154.072988][ T40] audit: type=1400 audit(1759345234.419:728): avc: denied { ioctl } for pid=9445 comm="syz.4.1077" path="socket:[27202]" dev="sockfs" ino=27202 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.073340][ T9444] bridge0: entered promiscuous mode [ 154.075597][ T54] dvb-usb: error while querying for an remote control event. [ 154.183222][ T40] audit: type=1400 audit(1759345234.529:729): avc: denied { open } for pid=9457 comm="syz.4.1080" path="/dev/ptyqc" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 154.239905][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1081'. [ 154.249893][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 154.252713][ T54] dvb-usb: error while querying for an remote control event. [ 154.257389][ T40] audit: type=1400 audit(1759345234.599:730): avc: denied { ioctl } for pid=9457 comm="syz.4.1080" path="/dev/ptyqc" dev="devtmpfs" ino=138 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 154.409898][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 154.412865][ T54] dvb-usb: error while querying for an remote control event. [ 154.579831][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 154.584637][ T54] dvb-usb: error while querying for an remote control event. [ 154.739810][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 154.741772][ T54] dvb-usb: error while querying for an remote control event. [ 154.985329][ T6402] dvb-usb: bulk message failed: -22 (1/0) [ 154.987385][ T6402] dvb-usb: error while querying for an remote control event. [ 154.996492][ T6973] usb 6-1: USB disconnect, device number 8 [ 155.007291][ T40] audit: type=1400 audit(1759345235.349:731): avc: denied { create } for pid=9470 comm="syz.1.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.062790][ T40] audit: type=1400 audit(1759345235.409:732): avc: denied { setopt } for pid=9473 comm="syz.1.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.073910][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1086'. [ 155.154191][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 155.156541][ T54] dvb-usb: error while querying for an remote control event. [ 155.224193][ T40] audit: type=1400 audit(1759345235.569:733): avc: denied { lock } for pid=9484 comm="syz.3.1088" path="socket:[26464]" dev="sockfs" ino=26464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.312044][ T6402] dvb-usb: bulk message failed: -22 (1/0) [ 155.314062][ T6402] dvb-usb: error while querying for an remote control event. [ 155.449001][ T53] usb 10-1: USB disconnect, device number 2 [ 155.481997][ T9494] /dev/sg0: Can't lookup blockdev [ 155.484597][ T40] audit: type=1326 audit(1759345235.829:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.1089" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4b78eec9 code=0x7ffc0000 [ 155.492656][ T40] audit: type=1326 audit(1759345235.839:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.1089" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f4e4b78eec9 code=0x7ffc0000 [ 155.502105][ T40] audit: type=1326 audit(1759345235.839:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.3.1089" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4b78eec9 code=0x7ffc0000 [ 155.521267][ T53] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 155.531470][ T9499] NILFS (nbd4): device size too small [ 155.579437][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 155.754877][ T9518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=9518 comm=syz.4.1096 [ 155.783619][ T9520] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1097'. [ 155.789184][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1097'. [ 155.844999][ T9528] trusted_key: encrypted_key: insufficient parameters specified [ 155.849328][ T9528] trusted_key: encrypted_key: insufficient parameters specified [ 156.004251][ T9533] netfs: Couldn't get user pages (rc=-14) [ 156.007184][ T9533] netfs: Zero-sized read [R=3] [ 156.094541][ T9539] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 156.158636][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 156.806522][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 156.822785][ T9577] Failed to initialize the IGMP autojoin socket (err -2) [ 157.083594][ T9595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'. [ 157.270472][ T1220] team0: left promiscuous mode [ 157.272772][ T1220] team_slave_0: left promiscuous mode [ 157.275248][ T1220] team_slave_1: left promiscuous mode [ 157.285657][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1128'. [ 157.920561][ T9631] netlink: 'syz.4.1134': attribute type 16 has an invalid length. [ 157.923726][ T9631] netlink: 'syz.4.1134': attribute type 17 has an invalid length. [ 157.942323][ T9631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.282282][ T9659] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 158.440148][ T1460] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 158.497737][ T9698] FAULT_INJECTION: forcing a failure. [ 158.497737][ T9698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.505405][ T9698] CPU: 1 UID: 0 PID: 9698 Comm: syz.4.1145 Not tainted syzkaller #0 PREEMPT(full) [ 158.505430][ T9698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.505441][ T9698] Call Trace: [ 158.505448][ T9698] [ 158.505455][ T9698] dump_stack_lvl+0x16c/0x1f0 [ 158.505515][ T9698] should_fail_ex+0x512/0x640 [ 158.505550][ T9698] strncpy_from_user+0x3b/0x2e0 [ 158.505573][ T9698] getname_flags.part.0+0x8f/0x550 [ 158.505599][ T9698] getname_flags+0x93/0xf0 [ 158.505623][ T9698] do_sys_openat2+0xb8/0x1d0 [ 158.505644][ T9698] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.505665][ T9698] ? __fget_files+0x20e/0x3c0 [ 158.505694][ T9698] __x64_sys_openat+0x174/0x210 [ 158.505714][ T9698] ? __pfx___x64_sys_openat+0x10/0x10 [ 158.505752][ T9698] ? ksys_write+0x1ac/0x250 [ 158.505785][ T9698] do_syscall_64+0xcd/0x4e0 [ 158.505809][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.505826][ T9698] RIP: 0033:0x7f441b78eec9 [ 158.505841][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.505858][ T9698] RSP: 002b:00007f441c609038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.505876][ T9698] RAX: ffffffffffffffda RBX: 00007f441b9e5fa0 RCX: 00007f441b78eec9 [ 158.505887][ T9698] RDX: 0000000000010182 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 158.505898][ T9698] RBP: 00007f441c609090 R08: 0000000000000000 R09: 0000000000000000 [ 158.505908][ T9698] R10: 0000000000000085 R11: 0000000000000246 R12: 0000000000000001 [ 158.505919][ T9698] R13: 00007f441b9e6038 R14: 00007f441b9e5fa0 R15: 00007fff53483ab8 [ 158.505941][ T9698] [ 158.661365][ T1460] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 158.664126][ T1460] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.668187][ T1460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.674315][ T1460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.679151][ T1460] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.687660][ T1460] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.690933][ T1460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.696123][ T1460] usb 8-1: config 0 descriptor?? [ 158.699231][ T9649] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.106609][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 159.106628][ T40] audit: type=1400 audit(1759345239.449:780): avc: denied { ioctl } for pid=9648 comm="syz.3.1141" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 159.110495][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.126502][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.129096][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.132873][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.135345][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.138863][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.141626][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.144199][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.147128][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.150307][ T1460] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 159.165870][ T1460] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.230700][ T40] audit: type=1400 audit(1759345239.579:781): avc: denied { create } for pid=9712 comm="syz.5.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.236856][ T40] audit: type=1400 audit(1759345239.579:782): avc: denied { write } for pid=9712 comm="syz.5.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.315044][ T9719] program syz.5.1152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.323529][ T9719] usb 8-1: USB disconnect, device number 3 [ 159.380828][ T40] audit: type=1400 audit(1759345239.729:783): avc: denied { append } for pid=9648 comm="syz.3.1141" name="2:0:0:0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.381016][ T9649] syz.3.1141: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 159.394514][ T9649] syz.3.1141 uses old SIOCAX25GETINFO [ 159.396024][ T40] audit: type=1400 audit(1759345239.739:784): avc: denied { ioctl } for pid=9648 comm="syz.3.1141" path="socket:[29307]" dev="sockfs" ino=29307 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 159.402798][ T9720] hub 8-0:1.0: USB hub found [ 159.412092][ T9720] hub 8-0:1.0: 1 port detected [ 159.503544][ T9724] wireguard: wg2: Could not create IPv4 socket [ 159.505988][ T9724] wg2: entered promiscuous mode [ 159.507824][ T9724] wg2: entered allmulticast mode [ 159.936859][ T40] audit: type=1400 audit(1759345240.279:785): avc: denied { connect } for pid=9729 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 160.124263][ T9738] FAULT_INJECTION: forcing a failure. [ 160.124263][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.130584][ T9738] CPU: 2 UID: 0 PID: 9738 Comm: syz.3.1158 Not tainted syzkaller #0 PREEMPT(full) [ 160.130610][ T9738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.130638][ T9738] Call Trace: [ 160.130646][ T9738] [ 160.130652][ T9738] dump_stack_lvl+0x16c/0x1f0 [ 160.130682][ T9738] should_fail_ex+0x512/0x640 [ 160.130711][ T9738] _copy_from_user+0x2e/0xd0 [ 160.130736][ T9738] copy_msghdr_from_user+0x98/0x160 [ 160.130760][ T9738] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.130793][ T9738] ___sys_sendmsg+0xfe/0x1d0 [ 160.130816][ T9738] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.130869][ T9738] __sys_sendmsg+0x16d/0x220 [ 160.130891][ T9738] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.130925][ T9738] do_syscall_64+0xcd/0x4e0 [ 160.130949][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.130968][ T9738] RIP: 0033:0x7f4e4b78eec9 [ 160.130982][ T9738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.130999][ T9738] RSP: 002b:00007f4e4c6a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.131016][ T9738] RAX: ffffffffffffffda RBX: 00007f4e4b9e5fa0 RCX: 00007f4e4b78eec9 [ 160.131036][ T9738] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 160.131047][ T9738] RBP: 00007f4e4c6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 160.131058][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.131069][ T9738] R13: 00007f4e4b9e6038 R14: 00007f4e4b9e5fa0 R15: 00007ffca3c47918 [ 160.131094][ T9738] [ 160.689783][ T56] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 160.849962][ T56] usb 10-1: Invalid ep0 maxpacket: 32 [ 160.999744][ T56] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 161.145151][ T9755] netlink: 16624 bytes leftover after parsing attributes in process `syz.3.1165'. [ 161.149910][ T56] usb 10-1: Invalid ep0 maxpacket: 32 [ 161.154680][ T56] usb usb10-port1: attempt power cycle [ 161.155898][ T40] audit: type=1800 audit(1759345241.499:786): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1165" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 161.499865][ T56] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 161.522479][ T56] usb 10-1: Invalid ep0 maxpacket: 32 [ 161.652118][ T56] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 161.676591][ T56] usb 10-1: Invalid ep0 maxpacket: 32 [ 161.678837][ T56] usb usb10-port1: unable to enumerate USB device [ 162.010418][ T40] audit: type=1400 audit(1759345242.359:787): avc: denied { setattr } for pid=9784 comm="syz.3.1175" name="/" dev="9p" ino=71827867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.164508][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 162.198369][ T9787] loop5: detected capacity change from 0 to 7 [ 162.206837][ T9787] Dev loop5: unable to read RDB block 7 [ 162.209201][ T9787] loop5: unable to read partition table [ 162.212160][ T9787] loop5: partition table beyond EOD, truncated [ 162.214852][ T9787] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 162.232224][ T9787] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 162.235139][ T9787] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.238600][ T9787] vhci_hcd vhci_hcd.0: Device attached [ 162.243078][ T9791] vhci_hcd: connection closed [ 162.243341][ T9691] vhci_hcd: stop threads [ 162.247308][ T9691] vhci_hcd: release socket [ 162.249046][ T9691] vhci_hcd: disconnect device [ 162.459235][ T9794] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 162.481457][ T9794] bond2: (slave bridge5): making interface the new active one [ 162.484612][ T9794] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 162.544485][ T40] audit: type=1400 audit(1759345242.889:788): avc: denied { append } for pid=9798 comm="syz.1.1179" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.669834][ T63] Bluetooth: hci4: command 0x0406 tx timeout [ 162.825310][ T9821] kvm: user requested TSC rate below hardware speed [ 162.830719][ T9821] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 162.853330][ T40] audit: type=1400 audit(1759345243.199:789): avc: denied { map } for pid=9807 comm="syz.1.1182" path="socket:[28608]" dev="sockfs" ino=28608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.073964][ T9830] ip6tnl0: Caught tx_queue_len zero misconfig [ 163.303258][ T9845] 9pnet_fd: Insufficient options for proto=fd [ 163.305592][ T9845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1192'. [ 163.308608][ T9845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1192'. [ 163.350250][ T9847] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 163.682691][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1198'. [ 163.721217][ T9872] comedi comedi0: Cannot bond this driver to itself! [ 163.845226][ T9875] (syz.3.1200,9875,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 163.849387][ T9875] (syz.3.1200,9875,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 163.893058][ T9884] netlink: 'syz.5.1203': attribute type 4 has an invalid length. [ 163.895822][ T9882] netlink: 'syz.5.1203': attribute type 4 has an invalid length. [ 163.898949][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1203'. [ 163.902499][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1203'. [ 164.049095][ T9894] netlink: 'syz.5.1206': attribute type 1 has an invalid length. [ 164.053427][ T9894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.088095][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1207'. [ 164.143467][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 164.143481][ T40] audit: type=1400 audit(1759345244.489:796): avc: denied { write } for pid=9900 comm="syz.5.1209" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.143630][ T9901] random: crng reseeded on system resumption [ 164.145495][ T40] audit: type=1400 audit(1759345244.489:797): avc: denied { open } for pid=9900 comm="syz.5.1209" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.177791][ T40] audit: type=1400 audit(1759345244.519:798): avc: denied { firmware_load } for pid=9691 comm="kworker/u32:18" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 164.192863][ T40] audit: type=1400 audit(1759345244.539:799): avc: denied { ioctl } for pid=9900 comm="syz.5.1209" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.753064][ T9925] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 164.772838][ T9925] CUSE: unknown device info "&b%ZW)3\my " [ 164.775437][ T9925] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 164.782364][ T9925] CUSE: DEVNAME unspecified [ 164.823613][ T40] audit: type=1400 audit(1759345245.169:800): avc: denied { create } for pid=9926 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 164.890311][ T40] audit: type=1400 audit(1759345245.229:801): avc: denied { mounton } for pid=9929 comm="syz.1.1218" path="/syzcgroup/unified/syz1" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 164.903298][ T9930] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 164.906105][ T9930] UDF-fs: Scanning with blocksize 2048 failed [ 164.912738][ T9930] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 164.915917][ T9930] UDF-fs: Scanning with blocksize 4096 failed [ 164.983583][ T40] audit: type=1400 audit(1759345245.329:802): avc: denied { write } for pid=9931 comm="syz.1.1219" name="cgroup.controllers" dev="9p" ino=71827937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.010298][ T9932] comedi comedi4: bad chanlist[0]=0x00000400 chan=1024 range length=2 [ 165.174388][ T9935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 165.177209][ T9935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.180456][ T9935] vhci_hcd vhci_hcd.0: Device attached [ 165.186914][ T9935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 165.189782][ T9935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.193908][ T9935] vhci_hcd vhci_hcd.0: Device attached [ 165.196715][ T9938] vhci_hcd: connection closed [ 165.197093][ T9936] vhci_hcd: connection closed [ 165.201079][ T12] vhci_hcd: stop threads [ 165.205401][ T12] vhci_hcd: release socket [ 165.207455][ T12] vhci_hcd: disconnect device [ 165.209663][ T12] vhci_hcd: stop threads [ 165.211477][ T12] vhci_hcd: release socket [ 165.213347][ T12] vhci_hcd: disconnect device [ 165.304539][ T40] audit: type=1400 audit(1759345245.649:803): avc: denied { bind } for pid=9942 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.429025][ T40] audit: type=1400 audit(1759345245.769:804): avc: denied { ioctl } for pid=9948 comm="syz.5.1224" path="socket:[30888]" dev="sockfs" ino=30888 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.508398][ T9933] input: syz1 as /devices/virtual/input/input18 [ 165.615473][ T9965] netlink: 212388 bytes leftover after parsing attributes in process `syz.5.1228'. [ 165.620741][ T9965] openvswitch: netlink: Message has 5 unknown bytes. [ 165.732282][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 166.024391][ T9981] (syz.3.1233,9981,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 166.027397][ T9981] (syz.3.1233,9981,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 166.203927][ T40] audit: type=1400 audit(1759345246.549:805): avc: denied { write } for pid=9990 comm="syz.3.1237" name="renderD128" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.243889][ T9993] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 166.273671][ T9993] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 166.280373][ T9993] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 166.281187][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 166.322913][ T9995] gretap1: entered promiscuous mode [ 166.326978][ T9995] bond2: (slave gretap1): making interface the new active one [ 166.330338][ T9995] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 166.343942][ T9993] macvlan0: entered promiscuous mode [ 166.345730][ T9993] macvlan0: entered allmulticast mode [ 166.348004][ T9993] bond2: entered promiscuous mode [ 166.350471][ T9993] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 166.355674][ T9993] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 166.363700][ T9993] bond2: left promiscuous mode [ 166.429823][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 166.435918][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 166.440002][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 166.446178][ T24] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 166.449800][ T24] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.453050][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.457265][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.40 [ 166.462388][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.465593][ T24] usb 6-1: Product: syz [ 166.466995][ T24] usb 6-1: Manufacturer: syz [ 166.468519][ T24] usb 6-1: SerialNumber: syz [ 166.471461][ T24] usb 6-1: config 0 descriptor?? [ 166.580687][T10003] FAT-fs (nullb0): bogus number of reserved sectors [ 166.584398][T10003] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 166.646269][T10005] autofs4:pid:10005:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 166.706722][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 166.708762][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 166.726765][ T24] usb 6-1: USB disconnect, device number 9 [ 166.727109][T10015] ufs: You didn't specify the type of your ufs filesystem [ 166.727109][T10015] [ 166.727109][T10015] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 166.727109][T10015] [ 166.727109][T10015] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 166.750252][T10015] ufs: failed to set blocksize [ 166.805822][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1249'. [ 167.540605][T10057] openvswitch: netlink: Unknown key attributes 2 [ 167.784774][T10063] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 167.790506][T10063] overlayfs: failed to set uuid (97/file1, err=-13); falling back to uuid=null. [ 167.881779][T10067] tipc: Failed to remove unknown binding: 66,1,1/0:1345174260/1345174262 [ 167.885251][T10067] tipc: Failed to remove unknown binding: 66,1,1/0:1345174260/1345174262 [ 168.568033][T10114] program syz.1.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.579287][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1276'. [ 168.696414][T10121] binder: binder_mmap: 10120 200000ffc000-200001000000 bad vm_flags failed -1 [ 168.713050][T10121] tipc: Started in network mode [ 168.714876][T10121] tipc: Node identity c, cluster identity 4711 [ 168.716906][T10121] tipc: Node number set to 12 [ 168.721063][T10121] MINIX-fs: unable to read superblock [ 168.894383][T10123] CIFS mount error: No usable UNC path provided in device string! [ 168.894383][T10123] [ 168.898451][T10123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.151738][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 169.151749][ T40] audit: type=1400 audit(1759345249.499:822): avc: denied { audit_read } for pid=10128 comm="syz.3.1281" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.168017][ T40] audit: type=1800 audit(1759345249.509:823): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1282" name="file0" dev="overlay" ino=578 res=0 errno=0 [ 169.196532][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1282'. [ 169.202777][T10131] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1282'. [ 169.434011][T10153] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 169.442266][T10153] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 169.478016][T10158] : entered promiscuous mode [ 170.004779][ T40] audit: type=1400 audit(1759345250.349:824): avc: denied { ioctl } for pid=10184 comm="syz.1.1298" path="socket:[31433]" dev="sockfs" ino=31433 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.168494][ T40] audit: type=1400 audit(1759345250.509:825): avc: denied { connect } for pid=10190 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.175982][ T40] audit: type=1400 audit(1759345250.519:826): avc: denied { bind } for pid=10190 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.182842][T10191] cgroup: none used incorrectly [ 170.205359][ T40] audit: type=1400 audit(1759345250.549:827): avc: denied { read } for pid=10190 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.257117][ T40] audit: type=1400 audit(1759345250.599:828): avc: denied { write } for pid=10190 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.491945][T10208] netlink: 'syz.1.1306': attribute type 21 has an invalid length. [ 170.495173][T10208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1306'. [ 170.516417][T10210] lo: Caught tx_queue_len zero misconfig [ 170.520094][T10210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 170.579351][ T40] audit: type=1400 audit(1759345250.919:829): avc: denied { mount } for pid=10215 comm="syz.3.1308" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 170.599676][ T40] audit: type=1400 audit(1759345250.929:830): avc: denied { mounton } for pid=10215 comm="syz.3.1308" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 170.621197][ T40] audit: type=1400 audit(1759345250.969:831): avc: denied { unmount } for pid=5960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 170.702421][T10222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10222 comm=syz.1.1310 [ 170.751464][T10224] netlink: 'syz.1.1311': attribute type 11 has an invalid length. [ 170.756449][T10224] netlink: 'syz.1.1311': attribute type 11 has an invalid length. [ 171.122260][T10239] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.936086][T10266] mmap: syz.5.1323 (10266): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 172.072312][T10274] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1326'. [ 172.475354][T10289] netlink: zone id is out of range [ 172.477696][T10289] netlink: zone id is out of range [ 172.482022][T10289] netlink: zone id is out of range [ 172.484869][T10289] netlink: zone id is out of range [ 172.487538][T10289] netlink: zone id is out of range [ 172.490401][T10289] netlink: zone id is out of range [ 172.492680][T10289] netlink: zone id is out of range [ 172.495078][T10289] netlink: zone id is out of range [ 172.497667][T10289] netlink: zone id is out of range [ 172.652904][T10294] erofs (device nbd1): cannot find valid erofs superblock [ 172.794603][T10296] team0: Port device team_slave_0 removed [ 172.965938][T10313] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 172.991065][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 173.051642][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1341'. [ 173.181552][T10328] binder: 10326:10328 ioctl c018620b 0 returned -14 [ 173.967561][ T8334] bond0: (slave syz_tun): Releasing backup interface [ 174.016578][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.021999][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.030744][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.035401][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.039421][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.063509][T10358] Failed to initialize the IGMP autojoin socket (err -2) [ 174.106239][ T1220] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.300619][ T1220] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.411791][ T1220] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.418268][T10366] overlayfs: failed to resolve 'verity=require': -2 [ 174.449953][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 174.453215][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 174.474525][T10358] chnl_net:caif_netlink_parms(): no params data found [ 174.574836][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 174.574848][ T40] audit: type=1400 audit(1759345254.909:847): avc: denied { ioctl } for pid=10385 comm="syz.1.1359" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0x7434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 174.601466][ T40] audit: type=1400 audit(1759345254.949:848): avc: denied { append } for pid=10394 comm="syz.5.1361" name="001" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.622556][ T1220] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.639177][T10390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1359'. [ 174.655104][T10390] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 174.657677][T10390] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 174.660593][T10390] vhci_hcd vhci_hcd.0: Device attached [ 174.726408][T10391] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 174.727659][T10358] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.733988][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.734786][T10391] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1357'. [ 174.737839][T10358] bridge_slave_0: entered allmulticast mode [ 174.746916][T10358] bridge_slave_0: entered promiscuous mode [ 174.755186][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.758013][T10358] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.762631][T10358] bridge_slave_1: entered allmulticast mode [ 174.763066][T10400] vhci_hcd: connection closed [ 174.765443][T10358] bridge_slave_1: entered promiscuous mode [ 174.766962][ T71] vhci_hcd: stop threads [ 174.766978][ T71] vhci_hcd: release socket [ 174.773327][ T71] vhci_hcd: disconnect device [ 174.904091][T10358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.985031][T10358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.195272][T10358] team0: Port device team_slave_0 added [ 175.206445][T10358] team0: Port device team_slave_1 added [ 175.353197][T10358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.356639][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.368387][T10358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.381027][T10358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.383557][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.395275][T10358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.395542][ T40] audit: type=1400 audit(1759345255.739:849): avc: denied { listen } for pid=10415 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.402253][ T1220] bridge_slave_1: left allmulticast mode [ 175.411354][ T40] audit: type=1400 audit(1759345255.739:850): avc: denied { accept } for pid=10415 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.413475][ T1220] bridge_slave_1: left promiscuous mode [ 175.424988][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.430942][ T1220] bridge_slave_0: left allmulticast mode [ 175.433233][ T1220] bridge_slave_0: left promiscuous mode [ 175.435152][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.670840][ T40] audit: type=1400 audit(1759345256.009:851): avc: denied { read } for pid=10421 comm="syz.5.1365" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.681448][ T40] audit: type=1400 audit(1759345256.009:852): avc: denied { open } for pid=10421 comm="syz.5.1365" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.682183][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1365'. [ 175.696375][ T40] audit: type=1400 audit(1759345256.039:853): avc: denied { map } for pid=10421 comm="syz.5.1365" path="socket:[34957]" dev="sockfs" ino=34957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.704154][ T40] audit: type=1400 audit(1759345256.039:854): avc: denied { ioctl } for pid=10421 comm="syz.5.1365" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.725076][T10424] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1366'. [ 175.725090][T10425] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1366'. [ 175.728081][T10424] net_ratelimit: 27 callbacks suppressed [ 175.728094][T10424] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 175.739141][T10425] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 175.953608][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.959433][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.965938][ T1220] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 175.971275][ T1220] bond0 (unregistering): Released all slaves [ 176.120497][ T63] Bluetooth: hci3: command tx timeout [ 176.129102][T10439] capability: warning: `syz.1.1371' uses 32-bit capabilities (legacy support in use) [ 176.155726][T10441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.158929][T10441] IPv6: NLM_F_CREATE should be set when creating new route [ 176.162114][T10441] IPv6: NLM_F_CREATE should be set when creating new route [ 176.203667][ T1220] tipc: Left network mode [ 176.242234][T10358] hsr_slave_0: entered promiscuous mode [ 176.246697][T10358] hsr_slave_1: entered promiscuous mode [ 176.255725][T10358] debugfs: 'hsr0' already exists in 'hsr' [ 176.258184][T10358] Cannot create hsr debugfs directory [ 176.356831][ T40] audit: type=1400 audit(1759345256.699:855): avc: denied { write } for pid=10451 comm="syz.1.1377" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 176.382851][ T40] audit: type=1400 audit(1759345256.719:856): avc: denied { listen } for pid=10449 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.399780][ T1460] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 176.552320][ T1460] usb 8-1: unable to get BOS descriptor or descriptor too short [ 176.557241][ T1460] usb 8-1: not running at top speed; connect to a high speed hub [ 176.571822][ T1460] usb 8-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.578096][ T1460] usb 8-1: config 1 interface 0 has no altsetting 0 [ 176.600338][ T1460] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.605894][ T1460] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.613881][ T1460] usb 8-1: Product: syz [ 176.617491][ T1460] usb 8-1: Manufacturer: syz [ 176.634718][ T1460] usb 8-1: SerialNumber: syz [ 176.882577][T10443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.885506][T10443] IPv6: NLM_F_CREATE should be set when creating new route [ 176.889388][T10443] IPv6: NLM_F_CREATE should be set when creating new route [ 176.897779][T10443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.956711][ T1460] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 176.981328][ T1460] usb 8-1: USB disconnect, device number 4 [ 177.237795][ T1220] hsr_slave_0: left promiscuous mode [ 177.249910][ T1220] hsr_slave_1: left promiscuous mode [ 177.252396][ T1220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.256072][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.310215][ T1220] veth1_macvtap: left promiscuous mode [ 177.314801][ T1220] veth0_macvtap: left promiscuous mode [ 177.317601][ T1220] veth1_vlan: left promiscuous mode [ 177.320126][ T1220] veth0_vlan: left promiscuous mode [ 177.933684][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.938663][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.950086][ T6973] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 178.019210][T10505] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 178.122307][ T6973] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 178.126791][ T6973] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.133108][ T6973] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 178.137022][ T6973] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 178.140725][ T6973] usb 10-1: Manufacturer: syz [ 178.145833][ T6973] usb 10-1: config 0 descriptor?? [ 178.170315][ T837] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 178.189754][ T63] Bluetooth: hci3: command tx timeout [ 178.249682][ T6973] rc_core: IR keymap rc-hauppauge not found [ 178.253759][ T6973] Registered IR keymap rc-empty [ 178.262508][ T6973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 178.278051][ T6973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input20 [ 178.342653][ T837] usb 8-1: config index 0 descriptor too short (expected 65274, got 45) [ 178.363333][ T837] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.367281][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.370485][T10491] netlink: 'syz.5.1386': attribute type 2 has an invalid length. [ 178.372912][T10491] __nla_validate_parse: 2 callbacks suppressed [ 178.372921][T10491] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1386'. [ 178.378031][T10491] nbd: must specify a device to reconfigure [ 178.380320][ T837] usb 8-1: Product: syz [ 178.384405][ T837] usb 8-1: Manufacturer: syz [ 178.385562][T10491] cgroup2: Unknown parameter 'euid' [ 178.398664][ T837] usb 8-1: SerialNumber: syz [ 178.607819][ T837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 178.612660][ T837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 178.616097][ T837] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 178.627908][ T837] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 178.650503][ T837] usb 8-1: USB disconnect, device number 5 [ 178.832505][ T837] usb 10-1: USB disconnect, device number 7 [ 179.017042][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 179.179197][ T1220] team0 (unregistering): Port device team_slave_0 removed [ 179.594960][T10515] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1392'. [ 180.102736][T10500] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 180.119404][T10512] netlink: 'syz.3.1391': attribute type 4 has an invalid length. [ 180.128271][T10358] netdevsim netdevsim6 netdevsim0: renamed from eth10 [ 180.139432][T10358] netdevsim netdevsim6 netdevsim1: renamed from eth11 [ 180.176313][T10358] netdevsim netdevsim6 netdevsim2: renamed from eth12 [ 180.186433][T10358] netdevsim netdevsim6 netdevsim3: renamed from eth13 [ 180.188919][T10522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10522 comm=syz.1.1393 [ 180.269708][ T63] Bluetooth: hci3: command tx timeout [ 180.300894][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 180.300904][ T40] audit: type=1400 audit(1759345260.649:862): avc: denied { ioctl } for pid=10532 comm="syz.3.1396" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 180.501197][T10358] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.541957][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.545276][ T1260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.571782][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.574362][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.702075][T10547] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 180.767767][ T40] audit: type=1400 audit(1759345261.109:863): avc: denied { append } for pid=10552 comm="syz.1.1401" name="event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.819725][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1401'. [ 180.912288][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 180.953485][T10358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.071179][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 181.075677][ T24] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 181.079061][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.088558][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.097364][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.100941][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.105937][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.111714][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.323955][ T24] usb 10-1: usb_control_msg returned -32 [ 181.338061][ T24] usbtmc 10-1:16.0: can't read capabilities [ 181.426343][T10358] veth0_vlan: entered promiscuous mode [ 181.438794][T10358] veth1_vlan: entered promiscuous mode [ 181.454444][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 181.501295][T10358] veth0_macvtap: entered promiscuous mode [ 181.515419][T10358] veth1_macvtap: entered promiscuous mode [ 181.524378][ T40] audit: type=1400 audit(1759345261.869:864): avc: denied { bind } for pid=10568 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.527572][T10572] Unsupported ieee802154 address type: 0 [ 181.569188][T10575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1404'. [ 181.589417][T10358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.621320][T10358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.630838][T10358] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.646161][T10358] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 181.655773][T10358] wireguard: wg0: Could not create IPv4 socket [ 181.663495][T10358] wireguard: wg1: Could not create IPv4 socket [ 181.671282][T10358] wireguard: wg2: Could not create IPv4 socket [ 181.682686][T10578] usbtmc 10-1:16.0: stb usb_control_msg returned -32 [ 181.719137][ T6045] usb 10-1: USB disconnect, device number 8 [ 181.783308][ T40] audit: type=1400 audit(1759345262.129:865): avc: denied { create } for pid=10576 comm="syz.3.1405" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 181.807607][ T40] audit: type=1400 audit(1759345262.149:866): avc: denied { remove_name } for pid=10576 comm="syz.3.1405" name="control" dev="9p" ino=71827941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.817728][ T40] audit: type=1400 audit(1759345262.149:867): avc: denied { rmdir } for pid=10576 comm="syz.3.1405" name="control" dev="9p" ino=71827941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.877333][ T40] audit: type=1400 audit(1759345262.219:868): avc: denied { relabelfrom } for pid=10580 comm="syz.1.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 181.885916][ T40] audit: type=1400 audit(1759345262.219:869): avc: denied { relabelto } for pid=10580 comm="syz.1.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 182.273677][ T40] audit: type=1400 audit(1759345262.619:870): avc: denied { ioctl } for pid=10589 comm="syz.5.1408" path="socket:[36055]" dev="sockfs" ino=36055 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.276338][T10590] loop4: detected capacity change from 0 to 2560 [ 182.284776][ T40] audit: type=1400 audit(1759345262.619:871): avc: denied { append } for pid=10589 comm="syz.5.1408" name="loop4" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.317573][T10376] Buffer I/O error on dev loop4, logical block 0, async page read [ 182.332037][T10376] Buffer I/O error on dev loop4, logical block 0, async page read [ 182.334955][T10376] Buffer I/O error on dev loop4, logical block 0, async page read [ 182.337862][T10376] Buffer I/O error on dev loop4, logical block 0, async page read [ 182.342094][T10376] Buffer I/O error on dev loop4, logical block 0, async page read [ 182.502858][T10593] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 182.505934][T10593] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 182.508970][T10593] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 182.512302][T10593] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 182.515744][T10593] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 184.137780][T10618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1415'. [ 184.155514][ T9691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.284820][T10632] netlink: 'syz.3.1420': attribute type 6 has an invalid length. [ 184.288383][T10632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1420'. [ 184.319929][ T9691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.366938][T10632] veth3: entered promiscuous mode [ 184.399373][ T9691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.543353][ T9691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.722358][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 184.726392][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 184.788226][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.825624][ T9691] bridge_slave_0: left allmulticast mode [ 184.839797][ T9691] bridge_slave_0: left promiscuous mode [ 184.842261][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.963144][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.975086][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.980685][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.986025][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.997411][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.085250][T10675] tmpfs: Unknown parameter 'mr^fer' [ 185.126477][T10677] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 185.503457][ T9691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.508551][ T9691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.515168][ T9691] bond0 (unregistering): Released all slaves [ 185.526993][ T9691] bond1 (unregistering): Released all slaves [ 185.556680][T10672] Failed to initialize the IGMP autojoin socket (err -2) [ 185.579876][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 185.597529][ T9691] : left promiscuous mode [ 185.659119][T10690] fuse: Bad value for 'group_id' [ 185.661818][T10690] fuse: Bad value for 'group_id' [ 185.714903][T10699] gfs2: error -5 reading superblock [ 185.760195][ T9691] tipc: Left network mode [ 186.075696][T10721] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 186.302692][ T9691] hsr_slave_0: left promiscuous mode [ 186.307663][ T9691] hsr_slave_1: left promiscuous mode [ 186.314525][ T9691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.318465][ T9691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.330453][ T9691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.333503][ T9691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.393190][ T9691] veth1_macvtap: left promiscuous mode [ 186.395842][ T9691] veth0_macvtap: left promiscuous mode [ 186.402696][ T9691] veth1_vlan: left promiscuous mode [ 186.404848][ T9691] veth0_vlan: left promiscuous mode [ 187.069833][ T5954] Bluetooth: hci3: command tx timeout [ 187.877364][ T9691] team0 (unregistering): Port device team_slave_1 removed [ 188.057810][ T9691] team0 (unregistering): Port device team_slave_0 removed [ 188.194573][T10716] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 188.198154][T10716] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 188.201048][T10716] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1444'. [ 188.415898][T10796] nfs4: Unknown parameter 'noaclZe]T H)Ү\n|Tap.*^$´i騷2д bJEf3W) щ.vOGTC\\8krcMg7QѲKcXY' [ 189.152815][ T5954] Bluetooth: hci3: command tx timeout [ 189.298982][T10834] uprobe: syz.1.1454:10834 failed to unregister, leaking uprobe [ 189.406388][T10839] FAULT_INJECTION: forcing a failure. [ 189.406388][T10839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.417027][T10839] CPU: 3 UID: 0 PID: 10839 Comm: syz.1.1455 Not tainted syzkaller #0 PREEMPT(full) [ 189.417053][T10839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.417063][T10839] Call Trace: [ 189.417069][T10839] [ 189.417076][T10839] dump_stack_lvl+0x16c/0x1f0 [ 189.417103][T10839] should_fail_ex+0x512/0x640 [ 189.417130][T10839] _copy_from_iter+0x29f/0x1720 [ 189.417154][T10839] ? __alloc_skb+0x200/0x380 [ 189.417175][T10839] ? __pfx__copy_from_iter+0x10/0x10 [ 189.417199][T10839] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 189.417231][T10839] netlink_sendmsg+0x829/0xdd0 [ 189.417258][T10839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.417289][T10839] ____sys_sendmsg+0xa98/0xc70 [ 189.417317][T10839] ? copy_msghdr_from_user+0x10a/0x160 [ 189.417337][T10839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.417373][T10839] ___sys_sendmsg+0x134/0x1d0 [ 189.417395][T10839] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.417445][T10839] __sys_sendmsg+0x16d/0x220 [ 189.417466][T10839] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.417501][T10839] do_syscall_64+0xcd/0x4e0 [ 189.417525][T10839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.417542][T10839] RIP: 0033:0x7fed68d8eec9 [ 189.417556][T10839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.417573][T10839] RSP: 002b:00007fed69cb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.417589][T10839] RAX: ffffffffffffffda RBX: 00007fed68fe5fa0 RCX: 00007fed68d8eec9 [ 189.417601][T10839] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 189.417612][T10839] RBP: 00007fed69cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 189.417622][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.417632][T10839] R13: 00007fed68fe6038 R14: 00007fed68fe5fa0 R15: 00007fff865b8bd8 [ 189.417656][T10839] [ 189.528675][T10843] netlink: 'syz.5.1456': attribute type 12 has an invalid length. [ 189.594957][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 189.594968][ T40] audit: type=1400 audit(1759345269.939:877): avc: denied { append } for pid=10849 comm="syz.1.1459" name="usbmon7" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.788595][T10864] bond0: Caught tx_queue_len zero misconfig [ 189.840329][T10864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'. [ 189.844286][ T40] audit: type=1400 audit(1759345270.179:878): avc: denied { getopt } for pid=10863 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.869690][ T40] audit: type=1400 audit(1759345270.199:879): avc: denied { ioctl } for pid=10865 comm="syz.5.1464" path="/dev/nullb0" dev="devtmpfs" ino=706 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 189.904179][T10871] FAULT_INJECTION: forcing a failure. [ 189.904179][T10871] name failslab, interval 1, probability 0, space 0, times 0 [ 189.912104][T10871] CPU: 3 UID: 0 PID: 10871 Comm: syz.3.1465 Not tainted syzkaller #0 PREEMPT(full) [ 189.912128][T10871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.912138][T10871] Call Trace: [ 189.912143][T10871] [ 189.912149][T10871] dump_stack_lvl+0x16c/0x1f0 [ 189.912176][T10871] should_fail_ex+0x512/0x640 [ 189.912199][T10871] should_failslab+0xc2/0x120 [ 189.912214][T10871] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 189.912236][T10871] ? skb_clone+0x190/0x3f0 [ 189.912261][T10871] skb_clone+0x190/0x3f0 [ 189.912281][T10871] netlink_deliver_tap+0xabd/0xd30 [ 189.912305][T10871] netlink_unicast+0x64c/0x870 [ 189.912328][T10871] ? __pfx_netlink_unicast+0x10/0x10 [ 189.912348][T10871] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 189.912373][T10871] netlink_sendmsg+0x8d1/0xdd0 [ 189.912398][T10871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.912428][T10871] ____sys_sendmsg+0xa98/0xc70 [ 189.912452][T10871] ? copy_msghdr_from_user+0x10a/0x160 [ 189.912471][T10871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.912505][T10871] ___sys_sendmsg+0x134/0x1d0 [ 189.912527][T10871] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.912573][T10871] __sys_sendmsg+0x16d/0x220 [ 189.912594][T10871] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.912627][T10871] do_syscall_64+0xcd/0x4e0 [ 189.912650][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.912668][T10871] RIP: 0033:0x7f4e4b78eec9 [ 189.912682][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.912697][T10871] RSP: 002b:00007f4e4c6a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.912713][T10871] RAX: ffffffffffffffda RBX: 00007f4e4b9e5fa0 RCX: 00007f4e4b78eec9 [ 189.912724][T10871] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 189.912733][T10871] RBP: 00007f4e4c6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 189.912743][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.912752][T10871] R13: 00007f4e4b9e6038 R14: 00007f4e4b9e5fa0 R15: 00007ffca3c47918 [ 189.912774][T10871] E2Ig!*dN N"Aoa$nT9od?b<;D ^[ 190.144491][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1469'. [ 190.211286][ T40] audit: type=1400 audit(1759345270.559:880): avc: denied { append } for pid=10892 comm="syz.1.1472" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 190.275126][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1473'. [ 190.387220][T10911] netlink: 'syz.1.1474': attribute type 4 has an invalid length. [ 190.390641][T10911] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1474'. [ 190.629748][ T1460] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 190.783871][ T1460] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.788257][ T1460] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.792964][ T1460] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.797569][ T1460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.806536][T10910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.825296][ T1460] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.898626][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 190.996140][T10934] FAULT_INJECTION: forcing a failure. [ 190.996140][T10934] name failslab, interval 1, probability 0, space 0, times 0 [ 191.002366][T10934] CPU: 1 UID: 0 PID: 10934 Comm: syz.1.1477 Not tainted syzkaller #0 PREEMPT(full) [ 191.002392][T10934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.002405][T10934] Call Trace: [ 191.002411][T10934] [ 191.002419][T10934] dump_stack_lvl+0x16c/0x1f0 [ 191.002481][T10934] should_fail_ex+0x512/0x640 [ 191.002511][T10934] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 191.002544][T10934] should_failslab+0xc2/0x120 [ 191.002562][T10934] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 191.002589][T10934] ? __alloc_skb+0x2b2/0x380 [ 191.002615][T10934] __alloc_skb+0x2b2/0x380 [ 191.002636][T10934] ? __pfx___alloc_skb+0x10/0x10 [ 191.002667][T10934] netlink_ack+0x15d/0xb80 [ 191.002710][T10934] ? avc_has_perm_noaudit+0x149/0x3b0 [ 191.002748][T10934] netlink_rcv_skb+0x332/0x420 [ 191.002773][T10934] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.002795][T10934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.002833][T10934] ? ns_capable+0xd7/0x110 [ 191.002860][T10934] nfnetlink_rcv+0x1b3/0x430 [ 191.002879][T10934] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.002897][T10934] ? netlink_deliver_tap+0x1ae/0xd30 [ 191.002926][T10934] netlink_unicast+0x5a7/0x870 [ 191.002955][T10934] ? __pfx_netlink_unicast+0x10/0x10 [ 191.002981][T10934] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 191.003013][T10934] netlink_sendmsg+0x8d1/0xdd0 [ 191.003043][T10934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.003079][T10934] ____sys_sendmsg+0xa98/0xc70 [ 191.003109][T10934] ? copy_msghdr_from_user+0x10a/0x160 [ 191.003131][T10934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.003172][T10934] ___sys_sendmsg+0x134/0x1d0 [ 191.003197][T10934] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.003254][T10934] __sys_sendmsg+0x16d/0x220 [ 191.003277][T10934] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.003319][T10934] do_syscall_64+0xcd/0x4e0 [ 191.003346][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.003366][T10934] RIP: 0033:0x7fed68d8eec9 [ 191.003382][T10934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.003400][T10934] RSP: 002b:00007fed69cb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.003419][T10934] RAX: ffffffffffffffda RBX: 00007fed68fe5fa0 RCX: 00007fed68d8eec9 [ 191.003430][T10934] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 191.003441][T10934] RBP: 00007fed69cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 191.003453][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.003463][T10934] R13: 00007fed68fe6038 R14: 00007fed68fe5fa0 R15: 00007fff865b8bd8 [ 191.003489][T10934] [ 191.026451][ T1460] usb 8-1: USB disconnect, device number 6 [ 191.224565][T10910] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[10910] [ 191.235612][ T5954] Bluetooth: hci3: command tx timeout [ 191.248144][T10938] kvm: MONITOR instruction emulated as NOP! [ 191.297809][T10943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 191.301131][T10943] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.306255][T10943] vhci_hcd vhci_hcd.0: Device attached [ 191.551229][ T56] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 191.581908][T10672] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 191.589037][T10672] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 191.598244][T10672] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 191.608800][T10672] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 191.908532][T10951] vhci_hcd: connection reset by peer [ 191.921373][ T9691] vhci_hcd: stop threads [ 191.923319][ T9691] vhci_hcd: release socket [ 191.927553][ T9691] vhci_hcd: disconnect device [ 191.986308][T10672] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.996688][T10672] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 192.004850][T10672] wireguard: wg0: Could not create IPv4 socket [ 192.012758][T10672] wireguard: wg1: Could not create IPv4 socket [ 192.018180][T10672] wireguard: wg2: Could not create IPv4 socket [ 192.164941][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.171205][T11007] batadv_slave_0: entered promiscuous mode [ 192.174581][T11007] batadv_slave_0: entered allmulticast mode [ 192.293385][T11014] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 192.382058][T11031] FAULT_INJECTION: forcing a failure. [ 192.382058][T11031] name failslab, interval 1, probability 0, space 0, times 0 [ 192.385964][T11031] CPU: 3 UID: 0 PID: 11031 Comm: syz.5.1492 Not tainted syzkaller #0 PREEMPT(full) [ 192.385980][T11031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.385986][T11031] Call Trace: [ 192.385991][T11031] [ 192.385995][T11031] dump_stack_lvl+0x16c/0x1f0 [ 192.386013][T11031] should_fail_ex+0x512/0x640 [ 192.386029][T11031] should_failslab+0xc2/0x120 [ 192.386039][T11031] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 192.386055][T11031] ? skb_clone+0x190/0x3f0 [ 192.386070][T11031] skb_clone+0x190/0x3f0 [ 192.386083][T11031] netlink_deliver_tap+0xabd/0xd30 [ 192.386099][T11031] netlink_unicast+0x71f/0x870 [ 192.386114][T11031] ? __pfx_netlink_unicast+0x10/0x10 [ 192.386132][T11031] netlink_ack+0x696/0xb80 [ 192.386150][T11031] netlink_rcv_skb+0x332/0x420 [ 192.386163][T11031] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 192.386174][T11031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.386194][T11031] ? ns_capable+0xd7/0x110 [ 192.386209][T11031] nfnetlink_rcv+0x1b3/0x430 [ 192.386218][T11031] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 192.386228][T11031] ? netlink_deliver_tap+0x1ae/0xd30 [ 192.386243][T11031] netlink_unicast+0x5a7/0x870 [ 192.386258][T11031] ? __pfx_netlink_unicast+0x10/0x10 [ 192.386271][T11031] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 192.386288][T11031] netlink_sendmsg+0x8d1/0xdd0 [ 192.386304][T11031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.386322][T11031] ____sys_sendmsg+0xa98/0xc70 [ 192.386338][T11031] ? copy_msghdr_from_user+0x10a/0x160 [ 192.386351][T11031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.386372][T11031] ___sys_sendmsg+0x134/0x1d0 [ 192.386385][T11031] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.386413][T11031] __sys_sendmsg+0x16d/0x220 [ 192.386426][T11031] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.386446][T11031] do_syscall_64+0xcd/0x4e0 [ 192.386461][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.386471][T11031] RIP: 0033:0x7f21af98eec9 [ 192.386481][T11031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.386491][T11031] RSP: 002b:00007f21b07bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.386501][T11031] RAX: ffffffffffffffda RBX: 00007f21afbe5fa0 RCX: 00007f21af98eec9 [ 192.386507][T11031] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 192.386513][T11031] RBP: 00007f21b07bd090 R08: 0000000000000000 R09: 0000000000000000 [ 192.386519][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.386528][T11031] R13: 00007f21afbe6038 R14: 00007f21afbe5fa0 R15: 00007ffc4ee74f08 [ 192.386541][T11031] [ 192.413757][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 192.551627][ T40] audit: type=1400 audit(1759345272.889:881): avc: denied { load_policy } for pid=11035 comm="syz.5.1494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 192.564357][T11038] SELinux: ebitmap start bit (20) is not a multiple of the map unit size (64) [ 192.575053][T11038] SELinux: failed to load policy [ 192.683850][ T40] audit: type=1400 audit(1759345273.029:882): avc: denied { module_load } for pid=11059 comm="syz.1.1498" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 192.736805][ T40] audit: type=1400 audit(1759345273.079:883): avc: denied { mount } for pid=11063 comm="syz.1.1499" name="/" dev="hugetlbfs" ino=36493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 192.796659][T11070] netlink: 'syz.1.1500': attribute type 13 has an invalid length. [ 192.898133][ T40] audit: type=1400 audit(1759345273.239:884): avc: denied { mount } for pid=11077 comm="syz.1.1503" name="/" dev="configfs" ino=3105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 193.010836][T11085] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 193.013807][T11085] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1503'. [ 193.036727][ T40] audit: type=1400 audit(1759345273.379:885): avc: denied { block_suspend } for pid=11087 comm="syz.3.1504" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.344706][T11106] bridge_slave_0: left allmulticast mode [ 193.346928][T11106] bridge_slave_0: left promiscuous mode [ 193.349078][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.366443][T11106] bridge_slave_1: left allmulticast mode [ 193.367897][T11108] tmpfs: Group quota block hardlimit too large. [ 193.370971][T11106] bridge_slave_1: left promiscuous mode [ 193.376768][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.387167][T11106] bond0: (slave bond_slave_0): Releasing backup interface [ 193.395236][T11106] bond0: (slave bond_slave_1): Releasing backup interface [ 193.407131][T11106] team0: Port device team_slave_1 removed [ 193.409485][T11106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.413721][T11106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.419016][T11106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.422561][T11106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.433022][T11106] bond2: (slave gretap1): Releasing active interface [ 193.446241][ T24] syz1: Port: 1 Link DOWN [ 193.450081][T11106] vlan0: left allmulticast mode [ 193.453434][T11106] hsr_slave_1: left allmulticast mode [ 193.458155][T11106] team0: Port device vlan0 added [ 193.530669][T11122] netlink: 'syz.5.1512': attribute type 8 has an invalid length. [ 193.710877][ T40] audit: type=1400 audit(1759345274.059:886): avc: denied { create } for pid=11135 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 193.918200][T11160] loop5: detected capacity change from 0 to 7 [ 193.975443][ T147] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.979482][T11166] overlayfs: conflicting options: userxattr,metacopy=on [ 193.982367][ T147] buffer_io_error: 315 callbacks suppressed [ 193.982385][ T147] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.983772][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.999804][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.006861][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.010905][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.014295][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.018055][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.022123][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.027063][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.031876][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.035614][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.039126][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.044728][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.050169][T11160] ldm_validate_partition_table(): Disk read failed. [ 194.053400][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.057069][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.060731][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.064348][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.068364][T11160] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.074415][T11160] Buffer I/O error on dev loop5, logical block 0, async page read [ 194.077948][T11160] Dev loop5: unable to read RDB block 0 [ 194.080822][T11160] loop5: unable to read partition table [ 194.083288][T11160] loop5: partition table beyond EOD, truncated [ 194.086119][T11160] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 194.135145][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 194.149237][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 194.235232][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'. [ 194.497854][T11205] openvswitch: netlink: Key 27 has unexpected len 612 expected 40 [ 195.156608][T11221] team0 (unregistering): Port device vlan0 removed [ 195.353941][T11259] binder: BINDER_SET_CONTEXT_MGR already set [ 195.356939][T11259] binder: 11256:11259 ioctl 4018620d 200000000100 returned -16 [ 195.360445][T11259] binder: BINDER_SET_CONTEXT_MGR already set [ 195.363171][T11259] binder: 11256:11259 ioctl 4018620d 200000000100 returned -16 [ 195.366768][T11259] binder: BINDER_SET_CONTEXT_MGR already set [ 195.371358][T11259] binder: 11256:11259 ioctl 4018620d 200000000100 returned -16 [ 195.377073][T11259] binder: BINDER_SET_CONTEXT_MGR already set [ 195.379076][T11259] binder: 11256:11259 ioctl 4018620d 200000000100 returned -16 [ 195.384434][T11262] ucma_write: process 1223 (syz.3.1542) changed security contexts after opening file descriptor, this is not allowed. [ 195.507232][T11270] syz.3.1545 (11270) used obsolete PPPIOCDETACH ioctl [ 195.520234][T11270] libceph: resolve '4' (ret=-3): failed [ 195.688267][T11288] netlink: 'syz.1.1547': attribute type 2 has an invalid length. [ 195.692970][T11288] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 195.696946][T11288] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 195.738604][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 195.738627][ T40] audit: type=1400 audit(1759345276.079:890): avc: denied { setopt } for pid=11287 comm="syz.1.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.885122][T11294] __nla_validate_parse: 1 callbacks suppressed [ 195.885141][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 196.048819][ T40] audit: type=1400 audit(1759345276.389:891): avc: denied { read write } for pid=11305 comm="syz.1.1552" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 196.065802][ T40] audit: type=1400 audit(1759345276.389:892): avc: denied { open } for pid=11305 comm="syz.1.1552" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 196.080707][ T40] audit: type=1400 audit(1759345276.429:893): avc: denied { ioctl } for pid=11305 comm="syz.1.1552" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 196.107889][ T40] audit: type=1400 audit(1759345276.449:894): avc: denied { write } for pid=11316 comm="syz.5.1553" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 196.212876][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1555'. [ 196.244453][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1555'. [ 196.458136][ T40] audit: type=1400 audit(1759345276.799:895): avc: denied { bind } for pid=11335 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.563542][ T40] audit: type=1400 audit(1759345276.909:896): avc: denied { ioctl } for pid=11355 comm="syz.3.1560" path="socket:[38404]" dev="sockfs" ino=38404 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 196.580369][ T40] audit: type=1400 audit(1759345276.929:897): avc: denied { map } for pid=11355 comm="syz.3.1560" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.592676][ T40] audit: type=1400 audit(1759345276.929:898): avc: denied { execute } for pid=11355 comm="syz.3.1560" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.659718][ T56] vhci_hcd: vhci_device speed not set [ 197.138512][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.145191][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.151771][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.158701][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.163373][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.177267][T11385] Failed to initialize the IGMP autojoin socket (err -2) [ 197.420115][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 197.973863][ T8523] [ 197.975747][ T8523] ============================================ [ 197.978831][ T8523] WARNING: possible recursive locking detected [ 197.981429][ T8523] syzkaller #0 Not tainted [ 197.983522][ T40] audit: type=1400 audit(1759345278.319:899): avc: denied { write } for pid=5939 comm="syz-executor" path="pipe:[7215]" dev="pipefs" ino=7215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 197.984439][ T8523] -------------------------------------------- [ 197.984448][ T8523] kworker/u32:12/8523 is trying to acquire lock: [ 198.002653][ T8523] ffffe8fefc78ef70 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x7bd/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.006459][ T8523] [ 198.006459][ T8523] but task is already holding lock: [ 198.009856][ T8523] ffffe8fefc88efc0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x697/0xd20 [ 198.014233][ T8523] [ 198.014233][ T8523] other info that might help us debug this: [ 198.018088][ T8523] Possible unsafe locking scenario: [ 198.018088][ T8523] [ 198.021929][ T8523] CPU0 [ 198.023478][ T8523] ---- [ 198.024866][ T8523] lock(&pd_list->lock); [ 198.026704][ T8523] lock(&pd_list->lock); [ 198.028552][ T8523] [ 198.028552][ T8523] *** DEADLOCK *** [ 198.028552][ T8523] [ 198.032638][ T8523] May be due to missing lock nesting notation [ 198.032638][ T8523] [ 198.037068][ T8523] 3 locks held by kworker/u32:12/8523: [ 198.040104][ T8523] #0: ffff8880236a5148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 198.045482][ T8523] #1: ffffc9000582fd10 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 198.050963][ T8523] #2: ffffe8fefc88efc0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x697/0xd20 [ 198.055154][ T8523] [ 198.055154][ T8523] stack backtrace: [ 198.057822][ T8523] CPU: 3 UID: 0 PID: 8523 Comm: kworker/u32:12 Not tainted syzkaller #0 PREEMPT(full) [ 198.057849][ T8523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.057863][ T8523] Workqueue: pdecrypt_parallel padata_parallel_worker [ 198.057892][ T8523] Call Trace: [ 198.057902][ T8523] [ 198.057909][ T8523] dump_stack_lvl+0x116/0x1f0 [ 198.057955][ T8523] print_deadlock_bug+0x1e9/0x240 [ 198.057986][ T8523] __lock_acquire+0x1133/0x1ce0 [ 198.058005][ T8523] ? __queue_work+0x431/0x1160 [ 198.058028][ T8523] lock_acquire+0x179/0x350 [ 198.058045][ T8523] ? padata_do_serial+0x7bd/0xd20 [ 198.058064][ T8523] ? mark_held_locks+0x49/0x80 [ 198.058081][ T8523] ? queue_work_on+0x12a/0x1f0 [ 198.058102][ T8523] _raw_spin_lock+0x2e/0x40 [ 198.058121][ T8523] ? padata_do_serial+0x7bd/0xd20 [ 198.058141][ T8523] padata_do_serial+0x7bd/0xd20 [ 198.058165][ T8523] pcrypt_aead_dec+0x5b/0x70 [ 198.058200][ T8523] padata_parallel_worker+0x65/0xb0 [ 198.058220][ T8523] process_one_work+0x9cf/0x1b70 [ 198.058245][ T8523] ? __pfx_process_one_work+0x10/0x10 [ 198.058269][ T8523] ? assign_work+0x1a0/0x250 [ 198.058289][ T8523] worker_thread+0x6c8/0xf10 [ 198.058312][ T8523] ? __kthread_parkme+0x19e/0x250 [ 198.058340][ T8523] ? __pfx_worker_thread+0x10/0x10 [ 198.058360][ T8523] kthread+0x3c5/0x780 [ 198.058379][ T8523] ? __pfx_kthread+0x10/0x10 [ 198.058394][ T8523] ? rcu_is_watching+0x12/0xc0 [ 198.058416][ T8523] ? __pfx_kthread+0x10/0x10 [ 198.058434][ T8523] ret_from_fork+0x56a/0x730 [ 198.058453][ T8523] ? __pfx_kthread+0x10/0x10 [ 198.058472][ T8523] ret_from_fork_asm+0x1a/0x30 [ 198.058501][ T8523] [ 198.464679][T11444] syz_tun (unregistering): left allmulticast mode [ 198.497160][ T8523] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.727219][ T8523] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.784804][ T8523] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.945449][ T8523] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.055460][ T8523] bridge_slave_1: left allmulticast mode [ 199.057888][ T8523] bridge_slave_1: left promiscuous mode [ 199.060547][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.066036][ T8523] bridge_slave_0: left allmulticast mode [ 199.068582][ T8523] bridge_slave_0: left promiscuous mode [ 199.071427][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.379575][ T8523]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.387710][ T8523]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.392477][ T8523]  (unregistering): Released all slaves [ 199.408553][ T8523] bond0 (unregistering): (slave veth3): Releasing active interface [ 199.412605][ T8523] team0: entered promiscuous mode [ 199.414815][ T8523] team_slave_0: entered promiscuous mode [ 199.418282][ T8523] team_slave_1: entered promiscuous mode [ 199.424052][ T8523] bond0 (unregistering): (slave team0): Releasing active interface [ 199.430309][ T8523] bond0 (unregistering): Released all slaves [ 199.487258][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.491705][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.613060][ T8523] bond1 (unregistering): Released all slaves [ 199.692991][ T8523] : left promiscuous mode [ 200.085875][ T8523] hsr_slave_0: left promiscuous mode [ 200.088565][ T8523] hsr_slave_1: left promiscuous mode [ 200.091445][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.095876][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.098821][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.103785][ T8523] veth1_macvtap: left promiscuous mode [ 200.105488][ T8523] veth0_macvtap: left promiscuous mode [ 200.107192][ T8523] veth1_vlan: left promiscuous mode [ 200.263432][ T8523] team0 (unregistering): Port device vlan0 removed [ 200.629483][ T8523] team_slave_1 (unregistering): left promiscuous mode [ 200.634587][ T8523] team0 (unregistering): Port device team_slave_1 removed [ 200.705933][ T8523] team_slave_0 (unregistering): left promiscuous mode [ 200.710424][ T8523] team0 (unregistering): Port device team_slave_0 removed [ 201.568285][ T8523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.646569][ T8523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.774967][ T8523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.843178][ T8523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.939891][ T8523] bridge_slave_1: left allmulticast mode [ 201.941841][ T8523] bridge_slave_1: left promiscuous mode [ 201.944264][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.948465][ T8523] bridge_slave_0: left allmulticast mode [ 201.951222][ T8523] bridge_slave_0: left promiscuous mode [ 201.953842][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.054564][ T8523] team0: Port device geneve0 removed [ 202.304006][ T8523] bond0 (unregistering): (slave bridge4): Releasing backup interface [ 202.307494][ T8523] bridge4 (unregistering): left promiscuous mode [ 202.402216][ T8523] bond2 (unregistering): (slave bridge5): Releasing active interface [ 202.532044][ T8523] bond1 (unregistering): Released all slaves [ 202.544347][ T8523] bond0 (unregistering): Released all slaves [ 202.551917][ T8523] bond2 (unregistering): Released all slaves [ 202.556871][ T8523] bond3 (unregistering): Released all slaves [ 204.382911][ T8523] tipc: Left network mode [ 204.677323][ T8523] hsr_slave_0: left promiscuous mode [ 204.680260][ T8523] hsr_slave_1: left promiscuous mode [ 204.682758][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.686181][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.697200][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.700631][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.705689][ T8523] veth0_macvtap: left promiscuous mode [ 204.708813][ T8523] veth1_vlan: left promiscuous mode [ 204.711894][ T8523] veth0_vlan: left promiscuous mode [ 204.934880][ T1220] smc: removing ib device syz2 [ 204.995237][ T8523] team0 (unregistering): Port device team_slave_1 removed [ 205.074046][ T8523] team0 (unregistering): Port device team_slave_0 removed [ 205.560890][ T5953] syz2: Port: 1 Link DOWN [ 205.924824][ T8523] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 19:01:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000000ee RCX=ffffffff819a4ca2 RDX=ffff88801bb18000 RSI=ffffffff819a4c90 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000f1f75 R13=0000000000000200 R14=ffff88805584a480 R15=ffffc9000078fc60 RIP=ffffffff819a4c92 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa1feeeb440 CR3=0000000056b5e000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff91020590 RDX=1ffff920006f6e25 RSI=1ffff920006f6e27 RDI=ffffc900037b7328 RBP=ffffc900037b7138 RSP=ffffc900037b7080 R8 =ffffffff91020594 R9 =0000000000000000 R10=ffffc900037b70f0 R11=0000000000012c92 R12=ffffc900037b7140 R13=ffffc900037b70f0 R14=ffffc900037b7330 R15=ffffc900037b7124 RIP=ffffffff816a928b RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f71000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9a95d17d60 CR3=000000003285d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9a951b76c3 00007f9a951b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1dad4380 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556fafd403 000055556fafcd50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556fafc83d 000055556fafc2c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90030fffffffffff ff04019880030880 0402d0b608000100 000c080606013c86 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0406100002100001 9880040100000a08 060a0156e6120800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0198f00300080001 98e0030010000198 d0030fffffffffff ff040198c0030210 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000198b003421000 0490030380040480 030480040198a003 000800019890030f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0401 98800308800402d0 b608000100000c08 0606013c86048080 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6461396666666666 6666660a36322e79 656b5f5f20622030 6132663464613966 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3233663464613966 666666666666660a 37322e79656b5f5f 2062203065326634 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f20622030363366 3464613966666666 666666660a302e79 656b5f5f20622030 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666666666666660a 302e79656b5f5f20 6220306339333564 6139666666666666 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3564613966666666 666666660a302e79 656b5f5f20622030 3061333564613966 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666666666 0a64695f74656e5f 656b616873646e61 6820622030346133 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66660a6c62746873 6168725f656b6168 73646e6168206220 3038613335646139 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81c30c4f RDX=ffff888025c7a480 RSI=ffffffff8169b141 RDI=ffffffff8169b117 RBP=ffffe8fefc88efa8 RSP=ffffc90005e2f9d8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f7997 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a83b240 R15=fffff91fdf911df5 RIP=ffffffff8b503a8f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7071000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000029c0 CR3=00000000498d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ee75416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ee75416 00007ffc4ee7541c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afbb74a8 00007f21afbb74a0 00007f21afbb7498 00007f21afbb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21b071d100 00007f21afbb7460 00007f21afbb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afbb74b8 00007f21afbb74b0 00007f21afbb74a8 00007f21afbb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=000000000000002e RCX=ffffffff819a4ca2 RDX=ffff88805584a480 RSI=ffffffff819a4c90 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000582f888 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=656c6c616b7a7973 R12=1ffff92000b05f13 R13=0000000000000000 R14=ffff88801bb18000 R15=ffffc9000582f950 RIP=ffffffff819a4c92 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7171000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4e4c681f98 CR3=00000000498d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6bf4276ea008716d f40eb808c09fcc45 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e92bd17335b5f38e 5e0b0ec79dee03c4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cc12c7624dbab2f c286595f18376a90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b5927301ee2d6ea a6d96fcd9ce59a2b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee7bdd06850cc616 dc6d2986bb82876c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b3c205d2a883930 1237a9db6221b856 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b204dbbe3411274a 04a4804e4cfbf9f9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b0414408a40a824 6814a58080d02818 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afa1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afbb74a8 00007f21afbb74a0 00007f21afbb7498 00007f21afbb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21b071d100 00007f21afbb7460 00007f21afbb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21afbb74b8 00007f21afbb74b0 00007f21afbb74a8 00007f21afbb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000