last executing test programs: 6m28.812453828s ago: executing program 0 (id=909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000700)=ANY=[]) 6m28.712581158s ago: executing program 0 (id=910): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "563da7", 0x48, 0x11, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x67, 0x2, 0x4, 0x1, 0xfb, 0x40, 0x3, [@remote]}], {0x4e22, 0x4e22, 0x30, 0x0, @gue={{0x1, 0x1, 0x2, 0x4, 0x0, @void}, "7dc3a97353cf3b34e8257950e4ce04163e18e16428d2658899a9ece30ad54a70bfad1bfe"}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0xfffe, 0xd, 0x17ae, 0x0, 0x0, 0x20, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d92a20a6564501600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={&(0x7f0000000180)={0x50, 0x0, 0x1, {0x7, 0x29, 0x3, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x100, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080000f4020000000000000000000000000001000000000000000000000000000000012f00000000000000210d9a2e7702192128a3647c29885d4197f96ff6e007ecb1b7b799805e3cc9d931ffd9b739d070c6e2c954be3616359482e91b3c6023dc285302fee1edd56ddc51ae4af75fcd63acb4e854d6edc9350e8f5b3949d2dc00b8fd191f2aa743d6a0c6fa69cada923df2dfaa2d84c979deaa1e"], 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0xa000, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) syz_emit_ethernet(0x85, &(0x7f0000000100)={@random="faa14ce00fe2", @random="8a412df929ae", @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@generic={0x6000, "431b8559a92b53fde516be77913c0f87fc258e6bf2009e5a69e285a21de4989fdf78761f37dd68084893c9b269ea4e645d68abe44c11dcaa82556b3817dd020d4fc8439da49e6d7b9a5cb607a5b8a671cd533dccc4fdd1f146d2c586821a021f61dfd35ecd85138fd7a7b372637e2207a70000"}}}, 0x0) 6m28.571879447s ago: executing program 0 (id=911): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=ANY=[], 0x20}], 0x1}, 0x0) r1 = io_uring_setup(0x25f5, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r1, 0x485d, 0xa, 0x48, &(0x7f0000000400)={[0x200]}, 0x5b) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r7, r3, r4, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c40)={&(0x7f0000000100)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x9, 0x54201202, 0xc, 0xd336, 0x0, 0x5, 0x0, 0x0, 0x100, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m28.452112557s ago: executing program 0 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000e6064d564b"]) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x30}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x7ffffffffffffff}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[]) setpgid(r0, r0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000340)=0x402, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') setpgid(0x0, r0) link(&(0x7f0000000000)='./file2\x00', &(0x7f00000000c0)='./file0/file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r7, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x10) 6m28.332490737s ago: executing program 0 (id=913): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3516, 0x77e, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0xfffffffa) 6m28.081634257s ago: executing program 0 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206010100000000000000000a00000005000400020000000900020073798c3000000000000000000300000005000100060000000d000300686173683a6e657400000000"], 0x48}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 6m28.006763726s ago: executing program 32 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206010100000000000000000a00000005000400020000000900020073798c3000000000000000000300000005000100060000000d000300686173683a6e657400000000"], 0x48}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 47.327350561s ago: executing program 4 (id=4533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x4, 0x52}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21082cbd7000ffdbdf2d2e0000000a0001007770616e3000000005002b00001000000c0005000201aaaaaaaaaaaa060006000000000006fa0300a0aa0000"], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x80) syz_usbip_server_init(0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x68}}, 0xc042) syz_usbip_server_init(0x2) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x80}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x20002000) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {0x0, 0xfffffffd}, {0x3}, {0xf4ef, 0xfffffffe}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x4, 0x3, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000950455d8c600000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x62}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x150, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x8c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff1dcf}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1a086cb}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd8}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5393}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x60, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xed86}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x24004805) 46.738002843s ago: executing program 4 (id=4534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x820c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d02, 0x0, 0x6}]}) 46.735531689s ago: executing program 4 (id=4542): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x1c31ff, 0x60) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x1c31ff, 0x60) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000040)) (async) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) (async) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) 45.790714873s ago: executing program 4 (id=4544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) pipe(0x0) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r4, 0x5406, 0x0) 44.789301524s ago: executing program 4 (id=4538): socket$inet(0x2, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x4080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffe}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x2, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000002c0)={'nicvf0\x00', {0x2, 0x4e23, @empty}}) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000300)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r10, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00012bbd7000fedbdf25020000000900010073797a32000000000900010073797a31000000000900030073797a320000000005000400010000008d46f4e86c4e270d0b46e6686004e2"], 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 42.459527504s ago: executing program 4 (id=4545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda", 0x7) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000001280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001240)=0x6}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000140)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001340)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x80, &(0x7f00000014c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@access_uid={'access', 0x3d, r8}}, {@uname={'uname', 0x3d, 'wg1\x00'}}, {@aname}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@hash}]}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_begin_ordered_truncate\x00', 0xffffffffffffffff, 0x0, 0x4dd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x5, 0x0, 0x0, 0x13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) 27.361650606s ago: executing program 33 (id=4545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bda", 0x7) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000001280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001240)=0x6}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000140)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001340)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x80, &(0x7f00000014c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@access_uid={'access', 0x3d, r8}}, {@uname={'uname', 0x3d, 'wg1\x00'}}, {@aname}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@hash}]}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_begin_ordered_truncate\x00', 0xffffffffffffffff, 0x0, 0x4dd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x5, 0x0, 0x0, 0x13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) 6.888642421s ago: executing program 1 (id=4703): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0xffff8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000540)={0x0, 0xca, 0xff, 0x80, 0x0, [], [0x8, 0x18e94139, 0xfffeffff, 0x7f], [0x9c, 0x2, 0x8, 0x1], [0x3, 0x8000000000000000, 0x3, 0x957]}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x7c, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3fe, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={0x0, 0x5, 0x80000000, 0x1, 0x0, [0x0], [0x0, 0xfffffffd, 0x0, 0xfffffffe], [0x8], [0xa, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r9}) close_range(r6, 0xffffffffffffffff, 0x0) 6.828573451s ago: executing program 1 (id=4704): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="5c000000010001", 0x7) 6.825408416s ago: executing program 1 (id=4713): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0xffff8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000540)={0x0, 0xca, 0xff, 0x80, 0x0, [], [0x8, 0x18e94139, 0xfffeffff, 0x7f], [0x9c, 0x2, 0x8, 0x1], [0x3, 0x8000000000000000, 0x3, 0x957]}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x7c, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3fe, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={0x0, 0x5, 0x80000000, 0x1, 0x0, [0x0], [0x0, 0xfffffffd, 0x0, 0xfffffffe], [0x8], [0xa, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r9}) close_range(r6, 0xffffffffffffffff, 0x0) 5.014806277s ago: executing program 1 (id=4715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x2, r3}, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x541b, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r6) 4.627504984s ago: executing program 2 (id=4711): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x8201400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000480)={0xa4, 0x0, 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.502705164s ago: executing program 3 (id=4714): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, r1, 0xfffffffe}}, 0x48) 4.328663215s ago: executing program 3 (id=4717): unshare(0x8000000) unshare(0x22020600) r0 = syz_io_uring_setup(0x28c1, &(0x7f0000000500)={0x0, 0xbc48, 0x1c02, 0x0, 0x1e3}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000e80)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xaa, 0x6, 0xd4, 0xff, 0x1a63, 0x101, "dcecf8afce573f9ecd23e459549a9e4c95c8bbba78da3e726f32f8f25b21a754e74fdca7300724dfb411f236a16ee1b94f26886d0ba437642e74c759b0d7fe3a70dc7ccd066f57fd47eeeda3b35063a23e3207f56ec1338a1ca917d21ab526c6502e0d31e4e95b3d113bd90419ee61eaf23bfe7510412a8bafaa1a4d1ff963ef8a9b7287fcc00b226a957de5b8f01972c8f04c245882341f01d178425012397c4719c36c25894a8be70c"}}, 0x1c2) io_uring_enter(r0, 0x1, 0xfffffffe, 0x1, 0x0, 0x0) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000c80)=[{0x2, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) unshare(0x20020000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003680)=ANY=[@ANYBLOB="ab8a5c2c7ec1668f0000000000000000070000090c0004800800014000000048050003003a000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20040890) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r5, 0x324, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c47a00002000000006f4ff0000000000110000000000"], 0x48) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, &(0x7f00000001c0)=0x2a) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000780)=""/137, &(0x7f00000002c0)=0x89) unshare(0x4000200) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000b7080000000000007b8af8ff00000000b7100000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000b5cfc07e4dbe5797dd397469fa", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000850000001c00000095000000", @ANYRESHEX=r5], &(0x7f0000000000)='syzkaller\x00', 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x18a, 0x55, &(0x7f0000000cc0)="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", &(0x7f0000000b40)=""/85, 0x4000, 0x0, 0x47, 0x10e, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000000940)="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", 0x1, 0x0, 0x13}, 0x50) syz_io_uring_setup(0x6d9c, &(0x7f0000000200)={0x0, 0x942e, 0x2}, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000400)=@usbdevfs_driver={0x40000004, 0x1, &(0x7f0000000840)="c867b49d4b077282f77c237aa200e6babb4250d55f2b2cb2f6e497b6ee0d032ca70957db709c8b2ddb6e2da6822800ad8823a945dd6c6ad8ab13424ac38bddb1606a409d64d8c01191bcc182ebc41208effb5d1dc9c35eb480c58a31f7e5810ceea2ae73c9a54b287e1e5685c57bf52a2bfaa59f343c19486577c2d9d9d449d0c73fa73936726554719ef7c289dabfe3a1b2fafc4a2d3a8c663430d4c6c38846a23bbbb17774eb9eef19046e5461e79aead117fef6c569dc581a0b95d9f514295b10b27551a7cafaebefd4b8164725196b6ff87b1783d5c8948d51bf8f8c4288eccf16f5590f"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x1a9102, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x11) 4.141557509s ago: executing program 5 (id=4719): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast2, 0x6}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x13f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r4, 0xa11, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48088) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0c0c762f32b71d4d730c30320e171c690e95ee8b61b0bba9c9e599c9868b361574f1ddf5ba8427ba", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}], 0x28}}], 0x2, 0x44080) 4.011549764s ago: executing program 3 (id=4720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000ec0210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.011395943s ago: executing program 3 (id=4721): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8b, 0xc8, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x7}}}, 0xd) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x8d) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0x6, 0x8000800, 0x166, 0x5, 0xf89, 0x59}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) getpeername$netlink(r3, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r4, 0xffffffffffffffff, 0x0) r5 = dup3(r2, r4, 0x80000) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000004c0)={0xf0e, 0x5, 0x5, 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r7, 0xfff) ioctl$RTC_PIE_ON(r5, 0x7005) syz_emit_vhci(&(0x7f0000000540)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5f}, "26f48d274cc28b359c53abea7b935ffdda8e22075943126f9eef87232c750b69df2d5d66232d6e71ec8557f3b67f7a73ef4e2689fb8a27fb5e635a55e31dc905d44c54af6cff1170ee86f4ff5f012e296d7ce5eaf13c866a86f77b08df8c6e"}, 0x63) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000600)={0x3d, &(0x7f00000005c0)=""/61}) rmdir(&(0x7f0000000640)='./file0\x00') lsm_list_modules(&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=0x50, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000740)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f0000000840)={r8, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[0x2, 0x7, 0x2, 0xfff, 0x3], &(0x7f0000000800)=[0x8000]}) 4.011120797s ago: executing program 3 (id=4722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x2, r3}, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x541b, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r5) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.315294015s ago: executing program 5 (id=4723): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, 0x0, 0x4000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r3 = socket(0x2, 0x2, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2b, 0x27dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000140)=""/192, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1.914664906s ago: executing program 1 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c000180080001"], 0x3c}}, 0x8800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c000280080014000080"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800, 0x556}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000200)={{r6}, "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1410, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0xc, &(0x7f00004f3000/0x3000)=nil, 0x2) 1.914546979s ago: executing program 2 (id=4726): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, r1, 0xfffffffe}}, 0x48) 1.838948232s ago: executing program 2 (id=4727): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x9}}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x18) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0x11, 0x0, &(0x7f0000000080)) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101842) ioctl$NBD_DISCONNECT(r8, 0xab08) (async) r9 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0) sendfile(r3, r9, 0x0, 0x9) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) socket(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) listen(r10, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x6, 0x5, {0x0}, {}, 0x8, 0x6}) timer_create(0x1, &(0x7f0000000040)={0x0, 0x3e, 0x0, @tid=r12}, &(0x7f0000000080)) 1.538943078s ago: executing program 5 (id=4728): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000100)=0xffff8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000540)={0x0, 0xca, 0xff, 0x80, 0x0, [], [0x8, 0x18e94139, 0xfffeffff, 0x7f], [0x9c, 0x2, 0x8, 0x1], [0x3, 0x8000000000000000, 0x3, 0x957]}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x7c, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3fe, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r9, 0x5, 0x80000000, 0x1, 0x0, [0x0], [0x0, 0xfffffffd, 0x0, 0xfffffffe], [0x8], [0xa, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r10}) close_range(r6, 0xffffffffffffffff, 0x0) 1.53859735s ago: executing program 5 (id=4729): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1.533302079s ago: executing program 5 (id=4730): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000563983b92d2412fcd05166b1a7871801000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r2, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x1, @generic=0xf}], 0x8) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x1, 0x80, 0x3, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) mkdirat(r7, &(0x7f0000000000)='./file0\x00', 0x10) r8 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1.188971753s ago: executing program 2 (id=4731): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8b, 0xc8, 0x5}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x7}}}, 0xd) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x8d) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0x6, 0x8000800, 0x166, 0x5, 0xf89, 0x59}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) getpeername$netlink(r3, &(0x7f0000000200), &(0x7f0000000240)=0xc) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r4, 0xffffffffffffffff, 0x0) r5 = dup3(r2, r4, 0x80000) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000004c0)={0xf0e, 0x5, 0x5, 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r7, 0xfff) ioctl$RTC_PIE_ON(r5, 0x7005) syz_emit_vhci(&(0x7f0000000540)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x5f}, "26f48d274cc28b359c53abea7b935ffdda8e22075943126f9eef87232c750b69df2d5d66232d6e71ec8557f3b67f7a73ef4e2689fb8a27fb5e635a55e31dc905d44c54af6cff1170ee86f4ff5f012e296d7ce5eaf13c866a86f77b08df8c6e"}, 0x63) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000600)={0x3d, &(0x7f00000005c0)=""/61}) rmdir(&(0x7f0000000640)='./file0\x00') lsm_list_modules(&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=0x50, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000740)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f0000000840)={r8, 0x0, &(0x7f0000000780), &(0x7f00000007c0)=[0x2, 0x7, 0x2, 0xfff, 0x3], &(0x7f0000000800)=[0x8000]}) 1.15381579s ago: executing program 2 (id=4732): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c9b00c000800050007fc0462ff01f6ff105b02a368244b4cdd01c6ea290d65be78054e6f0aa510326652727ac5bf46a006bd0eb906fb650b9a0f09d142a6287af2c4061a20b1ad30893c2931aed1549207022340e67e35971ce75edd49044a5e3d213a6cba30e8a47ebae4125dcf739c1b9d016ff46025acb2776d0683b1e7049bee1ba765b9dc4b9db090a22cbe1972ccfe4ff74e9eac80441e18f71c79e84ea79ef6fd3cd14d8f1dac8af6aed3af229dcf867c8c4458a24768ab887ca62d0d4fb83ca29bbc"], 0x11) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000855) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0xffff1000, 0x1000}) truncate(0x0, 0x200000000001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) timer_settime(r8, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r7, 0x0, 0xf69}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x447}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x1, &(0x7f0000000200)=0x7) 1.059171667s ago: executing program 3 (id=4733): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x8201400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000480)={0xa4, 0x0, 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 629.133854ms ago: executing program 5 (id=4734): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="159b8445b5c89c5ea918197769b9ab59deba3311fcc4672ecc06cb2f7ccff843fcb1bb64d036a7c243ea754f0cf4cd775cf9695787dd6c1ea934b025971189ddb4f072f70d670c85f80185dacca21c7332ed32ffd0796d0545e808f751bd198ba073650f78e1e012ea4a979b57e5eb3b16637f6a99c44645320bf9438131c195a682d4fd590eecb7b4f40b9f570c9624debcc154a23cf386d22b1c7fada9d25cafb359508e7298a4fdce52260174c46f800000e3526bf1bb35c515ffefc8e5ed3afbdf299c52ddc28fe9f674d4404fc3dfa8cdfde5b3c9e9555452436c054cbd4fc0e2171e7915708cd0fd020292c1abf7ae328c749166", 0xf7}, {&(0x7f00000001c0)="affce6e33827b30d0fca589b4de7b6b7af271a5d1f2fbc161e2a5cfa79cbfc236343948c96685e8064e0b52c28f603a3dcc3c03af16c3cf39e9163af4e729134978364effa92ed55653607b9444b6c3ef1d965a467b129508ccb14e4287e95905f4ca0c422ea0d6ece1736a4af7791deedbe5f58652e52daef60ca2aa7ba7b1910549768729219f54e972acd09ae881d5b3e43ac3a115ecc39bd1c732bfbf97cc38d3697e42df7d31831ac08471b2a9b77dc7d014369c6e3e6aaf69b65024cbf118f618ba8beff", 0xc7}, {&(0x7f0000000840)="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", 0x14b}, {&(0x7f0000000300)="9753deb6818163189464c3d360a72ca750aa52ba00b31d2fb8973fe2de442543ea51d60df1b7668bde239dc73a2c7a506f6831394b8d97d7a39a2cadcda1a19a50fb6a76", 0x44}, {&(0x7f0000000380)="e0d9e48d63ba5ae021a96a3bb220cced77d43097b15d4358ad039bd9f2228c11b3bbfde9b9bbf3a2c514073f0c7cc2b21e51b2f87eeff6fc990f66dbd6041613fd04d7c42c09af45d90733fd188fbb04996552efff0fd6aaeedd54193e12af0ec95c5bd460378f3fcf4c531776c503185096dc58936ad9f23c0d7d57f5fbf19c569bb47c80092135f70494d6205a21cda57fc3d8567e9ea270e4e47f1f3d74ce0c43f7cd24f0b9538fb8e358f0d412a897b67eb33f909cd92a88b87cef48771c57288e18b80b87eb9df30ee5bda440e0bb7ec3b69dc3c072574f0a256ccb544b86a24bb1", 0xe4}, {&(0x7f0000000680)="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", 0x188}], 0x6) (async) writev(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="159b8445b5c89c5ea918197769b9ab59deba3311fcc4672ecc06cb2f7ccff843fcb1bb64d036a7c243ea754f0cf4cd775cf9695787dd6c1ea934b025971189ddb4f072f70d670c85f80185dacca21c7332ed32ffd0796d0545e808f751bd198ba073650f78e1e012ea4a979b57e5eb3b16637f6a99c44645320bf9438131c195a682d4fd590eecb7b4f40b9f570c9624debcc154a23cf386d22b1c7fada9d25cafb359508e7298a4fdce52260174c46f800000e3526bf1bb35c515ffefc8e5ed3afbdf299c52ddc28fe9f674d4404fc3dfa8cdfde5b3c9e9555452436c054cbd4fc0e2171e7915708cd0fd020292c1abf7ae328c749166", 0xf7}, {&(0x7f00000001c0)="affce6e33827b30d0fca589b4de7b6b7af271a5d1f2fbc161e2a5cfa79cbfc236343948c96685e8064e0b52c28f603a3dcc3c03af16c3cf39e9163af4e729134978364effa92ed55653607b9444b6c3ef1d965a467b129508ccb14e4287e95905f4ca0c422ea0d6ece1736a4af7791deedbe5f58652e52daef60ca2aa7ba7b1910549768729219f54e972acd09ae881d5b3e43ac3a115ecc39bd1c732bfbf97cc38d3697e42df7d31831ac08471b2a9b77dc7d014369c6e3e6aaf69b65024cbf118f618ba8beff", 0xc7}, {&(0x7f0000000840)="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", 0x14b}, {&(0x7f0000000300)="9753deb6818163189464c3d360a72ca750aa52ba00b31d2fb8973fe2de442543ea51d60df1b7668bde239dc73a2c7a506f6831394b8d97d7a39a2cadcda1a19a50fb6a76", 0x44}, {&(0x7f0000000380)="e0d9e48d63ba5ae021a96a3bb220cced77d43097b15d4358ad039bd9f2228c11b3bbfde9b9bbf3a2c514073f0c7cc2b21e51b2f87eeff6fc990f66dbd6041613fd04d7c42c09af45d90733fd188fbb04996552efff0fd6aaeedd54193e12af0ec95c5bd460378f3fcf4c531776c503185096dc58936ad9f23c0d7d57f5fbf19c569bb47c80092135f70494d6205a21cda57fc3d8567e9ea270e4e47f1f3d74ce0c43f7cd24f0b9538fb8e358f0d412a897b67eb33f909cd92a88b87cef48771c57288e18b80b87eb9df30ee5bda440e0bb7ec3b69dc3c072574f0a256ccb544b86a24bb1", 0xe4}, {&(0x7f0000000680)="6ff34c99daf3692ffb12c5ef826a00f748ee7c6a62adfcd8c42ebbd192ffc6ff4ea9e16b2505edefa0e52443ab704965507c87acb6fac4b02d7820922f20154c8b6db08ab9653c2dbd8c7e258861dbbbd3985ea955fe522d64d8091762260fa5169352cf494ab0e117d4a0e1edaaaae69a6d1964b0b1fd90e03a9a0eb01384055705f61482e43e7313f7ad3ccf3a9b7a7eea3371431d8535c6f4fb376e7865436a84d1d8304a11556839c6aaf8229d775b590908165b4832472298022d961f930b24b8c0f078f934eec889553333cb61d5d2308a855a502af7117c677528335839d5638a70708c42cb0fce3757e0a3c4dc8457e3443ab016d5e89daf6671d7348107ea07dffe7c12365c7ec89cb4f2532e465782d6da0e03b4bf44e5fdbf22a7865007354ae7160b18760ca026d966b6aee1dfe61060740d653b8f75bf8698ab1da3b89cb01cedc38d560c420190e2a08be905077335c530c8b03f4587a18b9142dc37e0e5a3f70c292a6c5a4c5287c1cd09280f11855b0829f21a1cff89a3201df2ee560c99cc40", 0x188}], 0x6) 188.7339ms ago: executing program 2 (id=4735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x2, r3}, 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x541b, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r6) 0s ago: executing program 1 (id=4736): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, r1, 0xfffffffe}}, 0x48) kernel console output (not intermixed with test programs): my_hcd [ 453.245993][ T5975] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.249522][ T5975] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 453.252575][ T5975] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 453.255538][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.260734][T17743] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 453.264524][ T5975] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.449911][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 453.449923][ T40] audit: type=1400 audit(454.363:9603): avc: denied { create } for pid=17744 comm="syz.1.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 453.457979][ T40] audit: type=1400 audit(454.363:9604): avc: denied { setopt } for pid=17744 comm="syz.1.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 453.517852][ T5979] Bluetooth: hci3: Malformed LE Event: 0x1d [ 453.962886][ T40] audit: type=1400 audit(454.873:9605): avc: denied { recv } for pid=5882 comm="syz-executor" saddr=127.0.0.1 src=41442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 453.987984][ T40] audit: type=1400 audit(454.903:9606): avc: denied { read write } for pid=10941 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.995712][ T40] audit: type=1400 audit(454.903:9607): avc: denied { open } for pid=10941 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.002423][T17752] 9pnet_fd: Insufficient options for proto=fd [ 454.002810][ T40] audit: type=1400 audit(454.903:9608): avc: denied { ioctl } for pid=10941 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.006790][T17752] tipc: Enabling of bearer rejected, already enabled [ 454.012536][ T40] audit: type=1400 audit(454.913:9609): avc: denied { create } for pid=17750 comm="syz.1.4102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 454.012560][ T40] audit: type=1400 audit(454.913:9610): avc: denied { read } for pid=17751 comm="syz.4.4103" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.028875][ T40] audit: type=1400 audit(454.913:9611): avc: denied { open } for pid=17751 comm="syz.4.4103" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.036000][ T40] audit: type=1400 audit(454.913:9612): avc: denied { ioctl } for pid=17751 comm="syz.4.4103" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 454.208862][T17761] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 454.636510][T17772] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 454.639316][T17772] SELinux: failed to load policy [ 454.946621][T17778] 9pnet_fd: Insufficient options for proto=fd [ 454.950066][T17778] tipc: Enabling of bearer rejected, already enabled [ 455.026506][T17786] dns_resolver: Unsupported content type (234) [ 455.051625][T17788] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 455.099333][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 455.513833][T17796] FAULT_INJECTION: forcing a failure. [ 455.513833][T17796] name failslab, interval 1, probability 0, space 0, times 0 [ 455.519967][T17796] CPU: 3 UID: 0 PID: 17796 Comm: syz.3.4120 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 455.519992][T17796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.520003][T17796] Call Trace: [ 455.520010][T17796] [ 455.520018][T17796] dump_stack_lvl+0x16c/0x1f0 [ 455.520051][T17796] should_fail_ex+0x512/0x640 [ 455.520073][T17796] should_failslab+0xc2/0x120 [ 455.520096][T17796] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 455.520115][T17796] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 455.520141][T17796] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 455.520165][T17796] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 455.520196][T17796] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 455.520230][T17796] mmu_topup_memory_caches+0x25/0x170 [ 455.520252][T17796] kvm_mmu_load+0xd6/0x23c0 [ 455.520270][T17796] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 455.520291][T17796] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 455.520311][T17796] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 455.520336][T17796] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 455.520358][T17796] ? __pfx_kvm_mmu_load+0x10/0x10 [ 455.520375][T17796] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 455.520403][T17796] ? kvm_check_and_inject_events+0x71c/0x1310 [ 455.520438][T17796] vcpu_run+0x358c/0x5580 [ 455.520463][T17796] ? __lock_acquire+0xb97/0x1ce0 [ 455.520498][T17796] ? __pfx_vcpu_run+0x10/0x10 [ 455.520527][T17796] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 455.520550][T17796] ? __local_bh_enable_ip+0xa4/0x120 [ 455.520578][T17796] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 455.520602][T17796] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 455.520634][T17796] kvm_vcpu_ioctl+0x5eb/0x1690 [ 455.520677][T17796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 455.520702][T17796] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.520724][T17796] ? do_vfs_ioctl+0x128/0x14f0 [ 455.520753][T17796] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 455.520775][T17796] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 455.520809][T17796] ? hook_file_ioctl_common+0x145/0x410 [ 455.520843][T17796] ? selinux_file_ioctl+0x180/0x270 [ 455.520865][T17796] ? selinux_file_ioctl+0xb4/0x270 [ 455.520888][T17796] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 455.520913][T17796] __x64_sys_ioctl+0x18e/0x210 [ 455.520940][T17796] do_syscall_64+0xcd/0x4c0 [ 455.520960][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.520978][T17796] RIP: 0033:0x7f7d8fb8ebe9 [ 455.520994][T17796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.521011][T17796] RSP: 002b:00007f7d8ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.521028][T17796] RAX: ffffffffffffffda RBX: 00007f7d8fdb5fa0 RCX: 00007f7d8fb8ebe9 [ 455.521040][T17796] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 455.521051][T17796] RBP: 00007f7d8ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.521063][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.521073][T17796] R13: 00007f7d8fdb6038 R14: 00007f7d8fdb5fa0 R15: 00007ffcdd462f18 [ 455.521098][T17796] [ 455.614486][ C3] vkms_vblank_simulate: vblank timer overrun [ 455.699855][T17799] sctp: [Deprecated]: syz.3.4121 (pid 17799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.699855][T17799] Use struct sctp_sack_info instead [ 455.859272][ T10] usb 7-1: USB disconnect, device number 53 [ 455.915942][T17804] 9pnet_fd: Insufficient options for proto=fd [ 455.919722][T17804] tipc: Enabled bearer , priority 0 [ 455.924704][T17803] tipc: Resetting bearer [ 456.647285][T17814] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 457.150745][T17803] tipc: Disabling bearer [ 457.288657][T17853] bond3: entered promiscuous mode [ 457.313237][T17856] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 457.340902][T17858] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 457.353350][T17858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4138'. [ 457.375365][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4138'. [ 457.410405][T17864] wireguard0: entered promiscuous mode [ 457.412160][T17864] wireguard0: entered allmulticast mode [ 457.451497][T17867] fuse: Unknown parameter '' [ 457.480135][T17871] 9pnet_fd: Insufficient options for proto=fd [ 457.483082][T17871] tipc: Enabling of bearer rejected, already enabled [ 457.666393][T17884] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 457.744222][T17893] 9pnet_fd: Insufficient options for proto=fd [ 457.748899][T17893] tipc: Enabling of bearer rejected, already enabled [ 457.753721][T17895] netlink: 'syz.1.4153': attribute type 2 has an invalid length. [ 458.282188][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4155'. [ 458.287869][T17899] macvlan0: entered promiscuous mode [ 458.290130][T17899] batadv_slave_1: entered promiscuous mode [ 458.415519][T17913] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 458.511126][T17921] 9pnet_fd: Insufficient options for proto=fd [ 458.514452][T17921] tipc: Enabling of bearer rejected, already enabled [ 458.714877][ T5975] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 458.866004][ T5975] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.869398][ T5975] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.872653][ T5975] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.875613][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.881744][ T5975] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.884240][ T5975] usb 7-1: invalid MIDI out EP 0 [ 458.930372][ T5975] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 459.097344][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 459.097360][ T40] audit: type=1400 audit(460.013:9721): avc: denied { setopt } for pid=17926 comm="syz.1.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 459.106167][ T40] audit: type=1400 audit(460.013:9722): avc: denied { mounton } for pid=17926 comm="syz.1.4165" path="/509/file0" dev="tmpfs" ino=2699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 459.113722][ T40] audit: type=1400 audit(460.013:9723): avc: denied { watch watch_reads } for pid=17926 comm="syz.1.4165" path="/509" dev="tmpfs" ino=2694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 459.121580][ T40] audit: type=1400 audit(460.013:9724): avc: denied { bind } for pid=17926 comm="syz.1.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 459.128676][ T40] audit: type=1400 audit(460.013:9725): avc: denied { node_bind } for pid=17926 comm="syz.1.4165" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 459.136481][ T40] audit: type=1400 audit(460.013:9726): avc: denied { connect } for pid=17926 comm="syz.1.4165" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 459.143354][ T40] audit: type=1400 audit(460.033:9727): avc: denied { create } for pid=17926 comm="syz.1.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.151870][ T40] audit: type=1400 audit(460.033:9728): avc: denied { ioctl } for pid=17926 comm="syz.1.4165" path="socket:[79425]" dev="sockfs" ino=79425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.161230][ T40] audit: type=1400 audit(460.033:9729): avc: denied { bind } for pid=17926 comm="syz.1.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.168074][ T40] audit: type=1400 audit(460.033:9730): avc: denied { write } for pid=17926 comm="syz.1.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.192533][T17931] bridge_slave_0: default FDB implementation only supports local addresses [ 459.713507][T17937] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 459.864242][T17942] 9pnet_fd: Insufficient options for proto=fd [ 459.868110][T17942] tipc: Enabling of bearer rejected, already enabled [ 459.897267][T17944] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 459.904472][T17944] CIFS mount error: No usable UNC path provided in device string! [ 459.904472][T17944] [ 459.907873][T17944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 459.912096][T17944] random: crng reseeded on system resumption [ 459.917029][T17944] Unrecognized hibernate image header format! [ 459.919190][T17944] PM: hibernation: Image mismatch: architecture specific data [ 459.926058][T17944] can0: slcan on ptm0. [ 459.976208][T17943] can0 (unregistered): slcan off ptm0. [ 460.155042][T17957] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 460.335534][T17959] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 460.457766][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4180'. [ 460.464231][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4180'. [ 460.572625][T17966] 9pnet_fd: Insufficient options for proto=fd [ 460.576732][T17966] tipc: Enabling of bearer rejected, already enabled [ 460.807343][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 460.866117][T17979] ALSA: mixer_oss: invalid OSS volume '' [ 460.867872][T17979] ALSA: mixer_oss: invalid OSS volume '' [ 460.981166][T17980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17980 comm=syz.4.4185 [ 460.990312][T17982] binder: binder_mmap: 17981 200000000000-200000b36000 bad vm_flags failed -1 [ 461.024054][T17984] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 461.223202][T17990] 9pnet_fd: Insufficient options for proto=fd [ 461.226598][T17990] tipc: Enabling of bearer rejected, already enabled [ 461.389434][ T10] usb 7-1: USB disconnect, device number 54 [ 461.440952][T18002] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 461.495678][T17997] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 461.521506][T18006] support for cryptoloop has been removed. Use dm-crypt instead. [ 461.696832][T18011] 9pnet_fd: Insufficient options for proto=fd [ 461.699597][T18011] tipc: Enabling of bearer rejected, already enabled [ 461.731863][T18013] FAULT_INJECTION: forcing a failure. [ 461.731863][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 461.735689][T18013] CPU: 2 UID: 0 PID: 18013 Comm: syz.4.4201 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 461.735706][T18013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.735713][T18013] Call Trace: [ 461.735718][T18013] [ 461.735723][T18013] dump_stack_lvl+0x16c/0x1f0 [ 461.735759][T18013] should_fail_ex+0x512/0x640 [ 461.735774][T18013] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 461.735788][T18013] should_failslab+0xc2/0x120 [ 461.735801][T18013] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 461.735812][T18013] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 461.735828][T18013] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 461.735844][T18013] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 461.735862][T18013] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 461.735883][T18013] mmu_topup_memory_caches+0x25/0x170 [ 461.735895][T18013] kvm_mmu_load+0xd6/0x23c0 [ 461.735906][T18013] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 461.735918][T18013] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 461.735931][T18013] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 461.735944][T18013] ? __pfx_kvm_mmu_load+0x10/0x10 [ 461.735954][T18013] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 461.735971][T18013] ? kvm_check_and_inject_events+0x71c/0x1310 [ 461.735988][T18013] vcpu_run+0x358c/0x5580 [ 461.736003][T18013] ? __lock_acquire+0xb97/0x1ce0 [ 461.736024][T18013] ? __pfx_vcpu_run+0x10/0x10 [ 461.736040][T18013] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 461.736054][T18013] ? __local_bh_enable_ip+0xa4/0x120 [ 461.736071][T18013] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 461.736085][T18013] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 461.736104][T18013] kvm_vcpu_ioctl+0x5eb/0x1690 [ 461.736120][T18013] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 461.736134][T18013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.736148][T18013] ? do_vfs_ioctl+0x128/0x14f0 [ 461.736165][T18013] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 461.736181][T18013] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 461.736201][T18013] ? hook_file_ioctl_common+0x145/0x410 [ 461.736221][T18013] ? selinux_file_ioctl+0x180/0x270 [ 461.736233][T18013] ? selinux_file_ioctl+0xb4/0x270 [ 461.736247][T18013] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 461.736262][T18013] __x64_sys_ioctl+0x18e/0x210 [ 461.736279][T18013] do_syscall_64+0xcd/0x4c0 [ 461.736295][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.736307][T18013] RIP: 0033:0x7f985778ebe9 [ 461.736316][T18013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.736327][T18013] RSP: 002b:00007f98586a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.736337][T18013] RAX: ffffffffffffffda RBX: 00007f98579b5fa0 RCX: 00007f985778ebe9 [ 461.736344][T18013] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 461.736350][T18013] RBP: 00007f98586a1090 R08: 0000000000000000 R09: 0000000000000000 [ 461.736356][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.736363][T18013] R13: 00007f98579b6038 R14: 00007f98579b5fa0 R15: 00007fffe044fd98 [ 461.736376][T18013] [ 462.384682][T18022] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.604309][T18027] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 462.915010][T18037] 9pnet_fd: Insufficient options for proto=fd [ 462.918340][T18037] tipc: Enabled bearer , priority 0 [ 462.923179][T18036] tipc: Resetting bearer [ 464.175060][T18036] tipc: Disabling bearer [ 464.239186][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 464.239198][ T40] audit: type=1400 audit(465.153:9845): avc: denied { read write } for pid=16932 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.249315][ T40] audit: type=1400 audit(465.153:9846): avc: denied { open } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.256682][ T40] audit: type=1400 audit(465.153:9847): avc: denied { ioctl } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.259882][T18056] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 464.288626][ T40] audit: type=1400 audit(465.203:9848): avc: denied { read write } for pid=18062 comm="syz.2.4217" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.296159][ T40] audit: type=1400 audit(465.203:9849): avc: denied { open } for pid=18062 comm="syz.2.4217" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.303216][ T40] audit: type=1400 audit(465.203:9850): avc: denied { ioctl } for pid=18062 comm="syz.2.4217" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 464.311727][ T40] audit: type=1400 audit(465.203:9851): avc: denied { bind } for pid=18062 comm="syz.2.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.318863][ T40] audit: type=1400 audit(465.203:9852): avc: denied { setopt } for pid=18062 comm="syz.2.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.327479][ T40] audit: type=1400 audit(465.203:9853): avc: denied { connect } for pid=18062 comm="syz.2.4217" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.335713][ T40] audit: type=1400 audit(465.203:9854): avc: denied { setopt } for pid=18062 comm="syz.2.4217" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.627446][T18084] 9pnet_fd: Insufficient options for proto=fd [ 464.630553][T18084] tipc: Enabling of bearer rejected, already enabled [ 464.694877][ T61] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 464.699939][T18091] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 464.856220][ T61] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.860581][ T61] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 464.864494][ T61] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.869664][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.884400][T18070] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 464.890683][ T61] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.117507][T18105] FAULT_INJECTION: forcing a failure. [ 465.117507][T18105] name failslab, interval 1, probability 0, space 0, times 0 [ 465.121472][T18105] CPU: 0 UID: 0 PID: 18105 Comm: syz.4.4230 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 465.121488][T18105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.121495][T18105] Call Trace: [ 465.121499][T18105] [ 465.121504][T18105] dump_stack_lvl+0x16c/0x1f0 [ 465.121525][T18105] should_fail_ex+0x512/0x640 [ 465.121536][T18105] ? fs_reclaim_acquire+0xae/0x150 [ 465.121552][T18105] ? tomoyo_encode2+0x100/0x3e0 [ 465.121566][T18105] should_failslab+0xc2/0x120 [ 465.121578][T18105] __kmalloc_noprof+0xd2/0x510 [ 465.121593][T18105] tomoyo_encode2+0x100/0x3e0 [ 465.121609][T18105] tomoyo_encode+0x29/0x50 [ 465.121622][T18105] tomoyo_realpath_from_path+0x18f/0x6e0 [ 465.121637][T18105] ? tomoyo_profile+0x47/0x60 [ 465.121668][T18105] tomoyo_path_number_perm+0x245/0x580 [ 465.121679][T18105] ? tomoyo_path_number_perm+0x237/0x580 [ 465.121692][T18105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.121705][T18105] ? find_held_lock+0x2b/0x80 [ 465.121731][T18105] ? find_held_lock+0x2b/0x80 [ 465.121744][T18105] ? hook_file_ioctl_common+0x145/0x410 [ 465.121763][T18105] ? __fget_files+0x20e/0x3c0 [ 465.121780][T18105] security_file_ioctl+0x9b/0x240 [ 465.121795][T18105] __x64_sys_ioctl+0xb7/0x210 [ 465.121813][T18105] do_syscall_64+0xcd/0x4c0 [ 465.121824][T18105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.121835][T18105] RIP: 0033:0x7f985778ebe9 [ 465.121844][T18105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.121854][T18105] RSP: 002b:00007f98586a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.121865][T18105] RAX: ffffffffffffffda RBX: 00007f98579b5fa0 RCX: 00007f985778ebe9 [ 465.121871][T18105] RDX: 0000200000000700 RSI: 000000004008ae89 RDI: 0000000000000005 [ 465.121878][T18105] RBP: 00007f98586a1090 R08: 0000000000000000 R09: 0000000000000000 [ 465.121884][T18105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.121890][T18105] R13: 00007f98579b6038 R14: 00007f98579b5fa0 R15: 00007fffe044fd98 [ 465.121903][T18105] [ 465.121948][T18105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.688726][T18115] 9pnet_fd: Insufficient options for proto=fd [ 465.691912][T18115] tipc: Enabling of bearer rejected, already enabled [ 465.720392][T18117] binfmt_misc: Unknown parameter 'grpquCÖŒQ8' [ 465.757980][T18119] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4236'. [ 465.761084][T18119] ip6gretap0: entered promiscuous mode [ 465.763382][T18119] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4236'. [ 465.802860][T18123] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 466.266161][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 467.043255][T18135] FAULT_INJECTION: forcing a failure. [ 467.043255][T18135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.049564][T18135] CPU: 2 UID: 0 PID: 18135 Comm: syz.3.4241 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 467.049582][T18135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.049589][T18135] Call Trace: [ 467.049593][T18135] [ 467.049598][T18135] dump_stack_lvl+0x16c/0x1f0 [ 467.049619][T18135] should_fail_ex+0x512/0x640 [ 467.049633][T18135] _copy_from_user+0x2e/0xd0 [ 467.049645][T18135] ucma_resolve_ip+0x90/0x220 [ 467.049657][T18135] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 467.049672][T18135] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 467.049683][T18135] ucma_write+0x1fb/0x330 [ 467.049700][T18135] ? __pfx_ucma_write+0x10/0x10 [ 467.049716][T18135] ? bpf_lsm_file_permission+0x9/0x10 [ 467.049730][T18135] ? security_file_permission+0x71/0x210 [ 467.049746][T18135] ? rw_verify_area+0xcf/0x6c0 [ 467.049763][T18135] ? __pfx_ucma_write+0x10/0x10 [ 467.049779][T18135] vfs_write+0x2a0/0x1150 [ 467.049793][T18135] ? __pfx_vfs_write+0x10/0x10 [ 467.049803][T18135] ? find_held_lock+0x2b/0x80 [ 467.049816][T18135] ? __fget_files+0x204/0x3c0 [ 467.049831][T18135] ? __fget_files+0x20e/0x3c0 [ 467.049846][T18135] ksys_write+0x1f8/0x250 [ 467.049857][T18135] ? __pfx_ksys_write+0x10/0x10 [ 467.049871][T18135] do_syscall_64+0xcd/0x4c0 [ 467.049882][T18135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.049893][T18135] RIP: 0033:0x7f7d8fb8ebe9 [ 467.049903][T18135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.049914][T18135] RSP: 002b:00007f7d8ddd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.049924][T18135] RAX: ffffffffffffffda RBX: 00007f7d8fdb6090 RCX: 00007f7d8fb8ebe9 [ 467.049931][T18135] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000006 [ 467.049938][T18135] RBP: 00007f7d8ddd5090 R08: 0000000000000000 R09: 0000000000000000 [ 467.049944][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.049951][T18135] R13: 00007f7d8fdb6128 R14: 00007f7d8fdb6090 R15: 00007ffcdd462f18 [ 467.049963][T18135] [ 467.370932][ T1338] usb 7-1: USB disconnect, device number 55 [ 467.437554][T18138] netlink: 'syz.2.4242': attribute type 4 has an invalid length. [ 467.857608][T18140] binder: BINDER_SET_CONTEXT_MGR already set [ 467.859665][T18140] binder: 18139:18140 ioctl 4018620d 2000000000c0 returned -16 [ 467.903004][T18145] 9pnet_fd: Insufficient options for proto=fd [ 467.909789][T18145] tipc: Enabling of bearer rejected, already enabled [ 468.381861][T18153] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 468.848136][T18167] 9pnet_fd: Insufficient options for proto=fd [ 468.852108][T18167] tipc: Enabling of bearer rejected, already enabled [ 468.902988][T18173] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 468.910843][T18176] binder: BINDER_SET_CONTEXT_MGR already set [ 468.912843][T18176] binder: 18174:18176 ioctl 4018620d 200000004a80 returned -16 [ 469.000065][ T10] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 469.001928][T18187] 9pnet_fd: Insufficient options for proto=fd [ 469.006841][T18187] tipc: Enabling of bearer rejected, already enabled [ 469.042162][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4263'. [ 469.100984][T18194] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 469.150717][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 469.156431][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 469.160560][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.166534][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.199659][T18161] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 469.203610][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.289070][ T40] kauditd_printk_skb: 124 callbacks suppressed [ 469.289082][ T40] audit: type=1400 audit(470.203:9979): avc: denied { create } for pid=18205 comm="syz.1.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.298933][T18206] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=33536 sclass=netlink_xfrm_socket pid=18206 comm=syz.1.4268 [ 469.303011][ T40] audit: type=1400 audit(470.213:9980): avc: denied { write } for pid=18205 comm="syz.1.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.334532][ T40] audit: type=1400 audit(470.243:9981): avc: denied { read } for pid=18207 comm="syz.4.4269" dev="nsfs" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 469.343316][ T40] audit: type=1400 audit(470.253:9982): avc: denied { open } for pid=18207 comm="syz.4.4269" path="net:[4026532929]" dev="nsfs" ino=4026532929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 469.359368][ T40] audit: type=1400 audit(470.273:9983): avc: denied { mounton } for pid=18211 comm="syz.1.4270" path="/538/file1" dev="tmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 469.367528][ T40] audit: type=1400 audit(470.273:9984): avc: denied { mount } for pid=18211 comm="syz.1.4270" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 469.383723][T18214] 9pnet_fd: Insufficient options for proto=fd [ 469.386878][T18214] tipc: Enabling of bearer rejected, already enabled [ 469.389680][ T40] audit: type=1400 audit(470.303:9985): avc: denied { mount } for pid=18211 comm="syz.1.4270" name="/" dev="9p" ino=35913831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 469.446987][ T40] audit: type=1400 audit(470.353:9986): avc: denied { write } for pid=18217 comm="syz.4.4273" name="event3" dev="devtmpfs" ino=3477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 469.454254][ T40] audit: type=1400 audit(470.363:9987): avc: denied { open } for pid=18217 comm="syz.4.4273" path="/dev/input/event3" dev="devtmpfs" ino=3477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 469.536220][ T40] audit: type=1400 audit(470.453:9988): avc: denied { mount } for pid=18224 comm="syz.1.4275" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 469.557957][T18230] fuse: Bad value for 'user_id' [ 469.559600][T18230] fuse: Bad value for 'user_id' [ 469.583969][T18234] ucma_write: process 1276 (syz.4.4279) changed security contexts after opening file descriptor, this is not allowed. [ 469.616495][T18236] 9pnet_fd: Insufficient options for proto=fd [ 469.619729][T18236] tipc: Enabling of bearer rejected, already enabled [ 469.850321][T18250] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 469.853824][T18250] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 470.075197][T18263] 9pnet_fd: Insufficient options for proto=fd [ 470.078177][T18263] tipc: Enabling of bearer rejected, already enabled [ 470.609673][T18278] : entered promiscuous mode [ 470.637079][T18280] xt_limit: Overflow, try lower: 271964/0 [ 470.848621][T18280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4294'. [ 471.175744][T18288] 9pnet_fd: Insufficient options for proto=fd [ 471.178901][T18288] tipc: Enabling of bearer rejected, already enabled [ 471.205145][T18290] FAULT_INJECTION: forcing a failure. [ 471.205145][T18290] name failslab, interval 1, probability 0, space 0, times 0 [ 471.209137][T18290] CPU: 3 UID: 0 PID: 18290 Comm: syz.4.4299 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 471.209152][T18290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 471.209158][T18290] Call Trace: [ 471.209162][T18290] [ 471.209167][T18290] dump_stack_lvl+0x16c/0x1f0 [ 471.209204][T18290] should_fail_ex+0x512/0x640 [ 471.209218][T18290] ? fs_reclaim_acquire+0xae/0x150 [ 471.209234][T18290] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 471.209248][T18290] should_failslab+0xc2/0x120 [ 471.209261][T18290] __kmalloc_noprof+0xd2/0x510 [ 471.209275][T18290] tomoyo_realpath_from_path+0xc2/0x6e0 [ 471.209291][T18290] ? tomoyo_profile+0x47/0x60 [ 471.209308][T18290] tomoyo_path_number_perm+0x245/0x580 [ 471.209320][T18290] ? tomoyo_path_number_perm+0x237/0x580 [ 471.209333][T18290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.209346][T18290] ? find_held_lock+0x2b/0x80 [ 471.209372][T18290] ? find_held_lock+0x2b/0x80 [ 471.209384][T18290] ? hook_file_ioctl_common+0x145/0x410 [ 471.209403][T18290] ? __fget_files+0x20e/0x3c0 [ 471.209418][T18290] security_file_ioctl+0x9b/0x240 [ 471.209433][T18290] __x64_sys_ioctl+0xb7/0x210 [ 471.209451][T18290] do_syscall_64+0xcd/0x4c0 [ 471.209467][T18290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.209480][T18290] RIP: 0033:0x7f985778ebe9 [ 471.209489][T18290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.209499][T18290] RSP: 002b:00007f98586a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.209510][T18290] RAX: ffffffffffffffda RBX: 00007f98579b5fa0 RCX: 00007f985778ebe9 [ 471.209516][T18290] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 471.209523][T18290] RBP: 00007f98586a1090 R08: 0000000000000000 R09: 0000000000000000 [ 471.209529][T18290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.209535][T18290] R13: 00007f98579b6038 R14: 00007f98579b5fa0 R15: 00007fffe044fd98 [ 471.209548][T18290] [ 471.209553][T18290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.535942][ T29] usb 7-1: USB disconnect, device number 56 [ 471.605154][T18300] netlink: 'syz.1.4302': attribute type 8 has an invalid length. [ 471.668168][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4302'. [ 471.671950][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4302'. [ 471.677525][T18300] geneve4: entered promiscuous mode [ 471.679802][T18300] geneve4: entered allmulticast mode [ 471.683263][T13187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.689671][T13187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.693546][T13187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.697983][T13187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.740460][T18306] cgroup: Name too long [ 471.853516][T18313] 9pnet_fd: Insufficient options for proto=fd [ 471.856629][T18313] tipc: Enabled bearer , priority 0 [ 471.865344][T18312] tipc: Resetting bearer [ 472.235483][T18321] FAULT_INJECTION: forcing a failure. [ 472.235483][T18321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.244897][T18321] CPU: 2 UID: 0 PID: 18321 Comm: syz.4.4310 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 472.244915][T18321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 472.244923][T18321] Call Trace: [ 472.244927][T18321] [ 472.244932][T18321] dump_stack_lvl+0x16c/0x1f0 [ 472.244953][T18321] should_fail_ex+0x512/0x640 [ 472.244965][T18321] _copy_from_user+0x2e/0xd0 [ 472.244979][T18321] copy_msghdr_from_user+0x98/0x160 [ 472.244996][T18321] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 472.245019][T18321] ___sys_sendmsg+0xfe/0x1d0 [ 472.245035][T18321] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.245068][T18321] ? __mutex_unlock_slowpath+0x100/0x800 [ 472.245091][T18321] __sys_sendmsg+0x16d/0x220 [ 472.245107][T18321] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.245135][T18321] do_syscall_64+0xcd/0x4c0 [ 472.245149][T18321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.245161][T18321] RIP: 0033:0x7f985778ebe9 [ 472.245171][T18321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.245181][T18321] RSP: 002b:00007f98586a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.245193][T18321] RAX: ffffffffffffffda RBX: 00007f98579b5fa0 RCX: 00007f985778ebe9 [ 472.245200][T18321] RDX: 0000000020020000 RSI: 0000200000000b80 RDI: 0000000000000004 [ 472.245206][T18321] RBP: 00007f98586a1090 R08: 0000000000000000 R09: 0000000000000000 [ 472.245213][T18321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.245219][T18321] R13: 00007f98579b6038 R14: 00007f98579b5fa0 R15: 00007fffe044fd98 [ 472.245232][T18321] [ 472.447057][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4312'. [ 473.349182][T18312] tipc: Disabling bearer [ 473.507349][T18357] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 473.652049][T18373] 9pnet_fd: Insufficient options for proto=fd [ 473.656699][T18373] tipc: Enabled bearer , priority 0 [ 473.665352][T18372] tipc: Resetting bearer [ 473.864463][T18369] syz.4.4328 (18369): drop_caches: 1 [ 473.973918][T18369] syz.4.4328 (18369): drop_caches: 1 [ 474.954933][T18372] tipc: Disabling bearer [ 474.983420][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 474.983431][ T40] audit: type=1400 audit(475.893:10100): avc: denied { read } for pid=18379 comm="syz.4.4332" path="socket:[83420]" dev="sockfs" ino=83420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 475.034519][ T40] audit: type=1400 audit(475.943:10101): avc: denied { write } for pid=18379 comm="syz.4.4332" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 475.078703][ T40] audit: type=1400 audit(475.993:10102): avc: denied { bind } for pid=18384 comm="syz.2.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 475.136169][ T40] audit: type=1400 audit(476.043:10103): avc: denied { read write } for pid=16932 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.143507][ T40] audit: type=1400 audit(476.043:10104): avc: denied { open } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.152332][ T40] audit: type=1400 audit(476.043:10105): avc: denied { ioctl } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.173525][ T40] audit: type=1400 audit(476.083:10106): avc: denied { create } for pid=18394 comm="syz.2.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.177686][T18396] netlink: 'syz.2.4338': attribute type 1 has an invalid length. [ 475.182110][ T40] audit: type=1400 audit(476.083:10107): avc: denied { kexec_image_load } for pid=18395 comm="syz.3.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 475.190837][ T40] audit: type=1400 audit(476.083:10108): avc: denied { setopt } for pid=18394 comm="syz.2.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.198750][ T40] audit: type=1400 audit(476.083:10109): avc: denied { write } for pid=18394 comm="syz.2.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.217901][T18396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.222758][T18396] bond1: (slave bond2): making interface the new active one [ 475.226191][T18396] bond1: (slave bond2): Enslaving as an active interface with an up link [ 475.229682][T18400] FAULT_INJECTION: forcing a failure. [ 475.229682][T18400] name failslab, interval 1, probability 0, space 0, times 0 [ 475.235112][T18400] CPU: 2 UID: 0 PID: 18400 Comm: syz.3.4340 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 475.235128][T18400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 475.235136][T18400] Call Trace: [ 475.235140][T18400] [ 475.235144][T18400] dump_stack_lvl+0x16c/0x1f0 [ 475.235165][T18400] should_fail_ex+0x512/0x640 [ 475.235176][T18400] ? __kmalloc_noprof+0xbf/0x510 [ 475.235188][T18400] ? ioctl_standard_iw_point+0x414/0xca0 [ 475.235204][T18400] should_failslab+0xc2/0x120 [ 475.235217][T18400] __kmalloc_noprof+0xd2/0x510 [ 475.235231][T18400] ioctl_standard_iw_point+0x414/0xca0 [ 475.235248][T18400] ? __pfx_cfg80211_wext_giwrange+0x10/0x10 [ 475.235262][T18400] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 475.235281][T18400] ? __pfx___mutex_lock+0x10/0x10 [ 475.235294][T18400] ? __pfx_cfg80211_wext_giwrange+0x10/0x10 [ 475.235307][T18400] ioctl_standard_call+0x166/0x1d0 [ 475.235323][T18400] ? __pfx_ioctl_standard_call+0x10/0x10 [ 475.235338][T18400] ? __pfx_cfg80211_wext_giwrange+0x10/0x10 [ 475.235351][T18400] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 475.235369][T18400] wext_handle_ioctl+0x168/0x2a0 [ 475.235385][T18400] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 475.235404][T18400] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 475.235421][T18400] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 475.235439][T18400] sock_ioctl+0x3a1/0x6b0 [ 475.235453][T18400] ? __pfx_sock_ioctl+0x10/0x10 [ 475.235464][T18400] ? hook_file_ioctl_common+0x145/0x410 [ 475.235484][T18400] ? selinux_file_ioctl+0x180/0x270 [ 475.235497][T18400] ? selinux_file_ioctl+0xb4/0x270 [ 475.235511][T18400] ? __pfx_sock_ioctl+0x10/0x10 [ 475.235524][T18400] __x64_sys_ioctl+0x18e/0x210 [ 475.235541][T18400] do_syscall_64+0xcd/0x4c0 [ 475.235553][T18400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.235564][T18400] RIP: 0033:0x7f7d8fb8ebe9 [ 475.235573][T18400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.235584][T18400] RSP: 002b:00007f7d8ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.235594][T18400] RAX: ffffffffffffffda RBX: 00007f7d8fdb5fa0 RCX: 00007f7d8fb8ebe9 [ 475.235601][T18400] RDX: 0000200000000000 RSI: 0000000000008b0b RDI: 0000000000000003 [ 475.235607][T18400] RBP: 00007f7d8ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.235613][T18400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.235619][T18400] R13: 00007f7d8fdb6038 R14: 00007f7d8fdb5fa0 R15: 00007ffcdd462f18 [ 475.235633][T18400] [ 475.367260][T18407] 9pnet_fd: Insufficient options for proto=fd [ 475.370749][T18407] tipc: Enabled bearer , priority 0 [ 475.382514][T18406] tipc: Resetting bearer [ 476.711785][T18406] tipc: Disabling bearer [ 476.937778][ T117] block nbd0: Possible stuck request ffff888027c37000: control (read@0,1024B). Runtime 120 seconds [ 476.941144][ T117] block nbd0: Possible stuck request ffff888027c371c0: control (read@1024,1024B). Runtime 120 seconds [ 476.944504][ T117] block nbd0: Possible stuck request ffff888027c37380: control (read@2048,1024B). Runtime 120 seconds [ 476.948253][ T117] block nbd0: Possible stuck request ffff888027c37540: control (read@3072,1024B). Runtime 120 seconds [ 477.817173][T18443] binder: BC_ACQUIRE_RESULT not supported [ 477.818841][T18443] binder: 18442:18443 ioctl c0306201 200000000180 returned -22 [ 477.821263][T18443] binder: 18442:18443 ioctl f517 0 returned -22 [ 478.010299][T18454] fuse: Unknown parameter 'V' [ 478.316174][T18457] 9pnet_fd: Insufficient options for proto=fd [ 478.319867][T18457] tipc: Enabling of bearer rejected, already enabled [ 478.407551][T18459] kvm: user requested TSC rate below hardware speed [ 478.759310][T18477] FAULT_INJECTION: forcing a failure. [ 478.759310][T18477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.765448][T18477] CPU: 0 UID: 0 PID: 18477 Comm: syz.3.4367 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 478.765464][T18477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.765471][T18477] Call Trace: [ 478.765486][T18477] [ 478.765492][T18477] dump_stack_lvl+0x16c/0x1f0 [ 478.765513][T18477] should_fail_ex+0x512/0x640 [ 478.765526][T18477] _copy_from_user+0x2e/0xd0 [ 478.765539][T18477] kstrtouint_from_user+0xd6/0x1d0 [ 478.765555][T18477] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 478.765569][T18477] ? __lock_acquire+0xb97/0x1ce0 [ 478.765593][T18477] proc_fail_nth_write+0x83/0x220 [ 478.765610][T18477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 478.765626][T18477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 478.765638][T18477] vfs_write+0x2a0/0x1150 [ 478.765651][T18477] ? __pfx___mutex_lock+0x10/0x10 [ 478.765662][T18477] ? __pfx_vfs_write+0x10/0x10 [ 478.765677][T18477] ? __fget_files+0x20e/0x3c0 [ 478.765694][T18477] ksys_write+0x12a/0x250 [ 478.765705][T18477] ? __pfx_ksys_write+0x10/0x10 [ 478.765720][T18477] do_syscall_64+0xcd/0x4c0 [ 478.765731][T18477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.765743][T18477] RIP: 0033:0x7f7d8fb8d69f [ 478.765754][T18477] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 478.765767][T18477] RSP: 002b:00007f7d8ddf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 478.765778][T18477] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d8fb8d69f [ 478.765785][T18477] RDX: 0000000000000001 RSI: 00007f7d8ddf60a0 RDI: 0000000000000004 [ 478.765792][T18477] RBP: 00007f7d8ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 478.765799][T18477] R10: 00002000000000c0 R11: 0000000000000293 R12: 0000000000000001 [ 478.765805][T18477] R13: 00007f7d8fdb6038 R14: 00007f7d8fdb5fa0 R15: 00007ffcdd462f18 [ 478.765819][T18477] [ 478.871116][T18485] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4370'. [ 478.903531][T18487] 9pnet_fd: Insufficient options for proto=fd [ 478.907149][T18487] tipc: Enabling of bearer rejected, already enabled [ 479.026486][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4375'. [ 479.027117][T18500] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4376'. [ 479.029566][T18497] tmpfs: Unknown parameter 'inod' [ 479.184300][T18511] 9pnet_fd: Insufficient options for proto=fd [ 479.188195][T18511] tipc: Enabling of bearer rejected, already enabled [ 479.551398][T18532] tipc: Enabling of bearer rejected, already enabled [ 479.555328][T18532] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 479.558438][T18532] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 479.941909][T18542] 9pnet_fd: Insufficient options for proto=fd [ 479.945884][T18542] tipc: Enabling of bearer rejected, failed to enable media [ 479.992506][ T40] kauditd_printk_skb: 138 callbacks suppressed [ 479.992516][ T40] audit: type=1400 audit(480.903:10248): avc: denied { read write } for pid=18551 comm="syz.2.4393" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 480.001913][ T40] audit: type=1400 audit(480.903:10249): avc: denied { open } for pid=18551 comm="syz.2.4393" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 480.009541][ T40] audit: type=1400 audit(480.913:10250): avc: denied { ioctl } for pid=18551 comm="syz.2.4393" path="/dev/video8" dev="devtmpfs" ino=976 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 480.020339][ T40] audit: type=1400 audit(480.933:10251): avc: denied { mount } for pid=18557 comm="syz.2.4396" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 480.025760][T18558] FAULT_INJECTION: forcing a failure. [ 480.025760][T18558] name failslab, interval 1, probability 0, space 0, times 0 [ 480.027209][ T40] audit: type=1400 audit(480.933:10252): avc: denied { watch } for pid=18557 comm="syz.2.4396" path="/111/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 480.030902][T18558] CPU: 3 UID: 0 PID: 18558 Comm: syz.2.4396 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 480.030917][T18558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.030924][T18558] Call Trace: [ 480.030929][T18558] [ 480.030933][T18558] dump_stack_lvl+0x16c/0x1f0 [ 480.030954][T18558] should_fail_ex+0x512/0x640 [ 480.030964][T18558] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 480.030983][T18558] should_failslab+0xc2/0x120 [ 480.030996][T18558] __kmalloc_cache_noprof+0x6a/0x3e0 [ 480.031012][T18558] ? alloc_fs_context+0x57/0x9c0 [ 480.031028][T18558] alloc_fs_context+0x57/0x9c0 [ 480.031043][T18558] path_mount+0xbbf/0x1fd0 [ 480.031060][T18558] ? __pfx_path_mount+0x10/0x10 [ 480.031074][T18558] ? kmem_cache_free+0x2d1/0x4d0 [ 480.031085][T18558] ? putname+0x154/0x1a0 [ 480.031100][T18558] ? putname+0x154/0x1a0 [ 480.031115][T18558] ? __x64_sys_mount+0x28d/0x310 [ 480.031128][T18558] __x64_sys_mount+0x28d/0x310 [ 480.031142][T18558] ? __pfx___x64_sys_mount+0x10/0x10 [ 480.031160][T18558] do_syscall_64+0xcd/0x4c0 [ 480.031171][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.031182][T18558] RIP: 0033:0x7f4b7618ebe9 [ 480.031191][T18558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.031202][T18558] RSP: 002b:00007f4b743f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 480.031213][T18558] RAX: ffffffffffffffda RBX: 00007f4b763b5fa0 RCX: 00007f4b7618ebe9 [ 480.031224][T18558] RDX: 0000200000002480 RSI: 00002000000020c0 RDI: 0000000000000000 [ 480.031230][T18558] RBP: 00007f4b743f6090 R08: 0000200000000040 R09: 0000000000000000 [ 480.031237][T18558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.031243][T18558] R13: 00007f4b763b6038 R14: 00007f4b763b5fa0 R15: 00007ffefb8a67b8 [ 480.031256][T18558] [ 480.097022][ T40] audit: type=1400 audit(480.943:10253): avc: denied { read write } for pid=18557 comm="syz.2.4396" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 480.103969][ T40] audit: type=1400 audit(480.943:10254): avc: denied { open } for pid=18557 comm="syz.2.4396" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 480.111232][ T40] audit: type=1400 audit(480.943:10255): avc: denied { mounton } for pid=18557 comm="syz.2.4396" path="/111/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 480.118090][ T40] audit: type=1400 audit(480.953:10256): avc: denied { unmount } for pid=16932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 480.295406][ T40] audit: type=1400 audit(481.213:10257): avc: denied { watch watch_reads } for pid=18566 comm="syz.2.4398" path="/113" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.431350][T18575] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode [ 480.433511][T18575] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode [ 480.436936][T18575] 9pnet_fd: Insufficient options for proto=fd [ 480.439517][T18575] tipc: Enabling of bearer rejected, already enabled [ 480.573364][T18582] futex_wake_op: syz.2.4405 tries to shift op by -1; fix this program [ 481.591936][T18596] NILFS (nullb0): couldn't find nilfs on the device [ 481.648840][T18597] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 482.296858][T18601] 9pnet_fd: Insufficient options for proto=fd [ 482.300206][T18601] tipc: Enabling of bearer rejected, already enabled [ 482.484640][T18612] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 482.488573][T18612] bond0: (slave lo): Error: Device type is different from other slaves [ 482.518783][T18616] netlink: 'syz.2.4416': attribute type 4 has an invalid length. [ 482.518794][T18618] netlink: 'syz.2.4416': attribute type 4 has an invalid length. [ 482.985153][ T5975] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 483.074224][T18631] 9pnet_fd: Insufficient options for proto=fd [ 483.077669][T18631] tipc: Enabling of bearer rejected, already enabled [ 483.145891][ T5975] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.149382][ T5975] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 483.152455][ T5975] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 483.174793][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.183026][T18627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.188072][ T5975] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.301444][T18662] ptrace attach of "/syz-executor exec"[12969] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸ [ 483.317189][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'. [ 483.352557][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 484.233526][T18689] 9pnet_fd: Insufficient options for proto=fd [ 484.237889][T18689] tipc: Enabling of bearer rejected, already enabled [ 484.466890][T18718] 9pnet_fd: Insufficient options for proto=fd [ 484.470195][T18718] tipc: Enabling of bearer rejected, already enabled [ 485.262481][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 485.262493][ T40] audit: type=1400 audit(486.173:10406): avc: denied { execute } for pid=18724 comm="syz.1.4444" name="file0" dev="tmpfs" ino=3028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 485.409731][ T40] audit: type=1400 audit(486.323:10407): avc: denied { allowed } for pid=18727 comm="syz.3.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 485.416892][ T40] audit: type=1400 audit(486.323:10408): avc: denied { sqpoll } for pid=18727 comm="syz.3.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 485.448989][ T40] audit: type=1400 audit(486.363:10409): avc: denied { read } for pid=18733 comm="syz.3.4446" dev="nsfs" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 485.464909][ T40] audit: type=1400 audit(486.363:10410): avc: denied { open } for pid=18733 comm="syz.3.4446" path="net:[4026533324]" dev="nsfs" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 485.487040][ T40] audit: type=1400 audit(486.403:10411): avc: denied { setopt } for pid=18735 comm="syz.3.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.492986][ T40] audit: type=1400 audit(486.403:10412): avc: denied { write } for pid=18735 comm="syz.3.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.499177][ T40] audit: type=1400 audit(486.413:10413): avc: denied { read } for pid=18735 comm="syz.3.4447" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 485.506350][ T40] audit: type=1400 audit(486.413:10414): avc: denied { open } for pid=18735 comm="syz.3.4447" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 485.513517][ T40] audit: type=1400 audit(486.413:10415): avc: denied { ioctl } for pid=18735 comm="syz.3.4447" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 485.587488][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4449'. [ 485.590348][T18743] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 485.630844][ T10] usb 7-1: USB disconnect, device number 57 [ 485.737900][T18752] 9pnet_fd: Insufficient options for proto=fd [ 485.740966][T18752] tipc: Enabled bearer , priority 0 [ 485.774188][T18751] tipc: Disabling bearer [ 486.201919][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4456'. [ 486.206356][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4456'. [ 486.384413][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 486.387734][T18766] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 486.774842][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 486.818691][T18776] overlay: ./file0 is not a directory [ 486.819288][T18774] overlayfs: failed to resolve './bus': -2 [ 486.852964][T18779] 9pnet_fd: Insufficient options for proto=fd [ 486.947925][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.025654][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 487.034834][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.037896][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.044559][T18770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 487.050665][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 487.229749][T18787] 9pnet_fd: Insufficient options for proto=fd [ 487.232975][T18787] tipc: Enabling of bearer rejected, already enabled [ 487.296295][T18795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4469'. [ 487.299333][T18795] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 487.430149][T18805] sd 0:0:0:0: PR command failed: 1026 [ 487.432034][T18805] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 487.434660][T18805] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 487.498787][T18813] 9pnet_fd: Insufficient options for proto=fd [ 487.502048][T18813] tipc: Enabling of bearer rejected, already enabled [ 487.818214][T18824] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 487.846747][T18819] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 487.982528][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4486'. [ 488.010472][T18841] 9pnet_fd: Insufficient options for proto=fd [ 488.013765][T18841] tipc: Enabling of bearer rejected, already enabled [ 488.594968][T18846] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 488.597162][T18846] overlayfs: failed to set xattr on upper [ 488.599365][T18846] overlayfs: ...falling back to redirect_dir=nofollow. [ 488.601738][T18846] overlayfs: ...falling back to index=off. [ 488.603752][T18846] overlayfs: ...falling back to uuid=null. [ 488.605777][T18846] overlayfs: overlapping lowerdir path [ 488.665009][T18849] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 488.835777][T18838] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 489.461434][ T59] usb 7-1: USB disconnect, device number 58 [ 490.319719][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 490.319730][ T40] audit: type=1400 audit(491.233:10571): avc: denied { create } for pid=18864 comm="syz.1.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.330984][T18870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.365770][ T40] audit: type=1400 audit(491.283:10572): avc: denied { module_request } for pid=18863 comm="syz.4.4496" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 490.372914][T18868] 9pnet_fd: Insufficient options for proto=fd [ 490.376141][ T40] audit: type=1400 audit(491.283:10573): avc: denied { mounton } for pid=18862 comm="syz.2.4498" path="/133/file0" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 490.381013][T18868] tipc: Enabled bearer , priority 0 [ 490.382975][ T40] audit: type=1400 audit(491.293:10574): avc: denied { read } for pid=18877 comm="syz.3.4500" dev="nsfs" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 490.393829][ T40] audit: type=1400 audit(491.293:10575): avc: denied { open } for pid=18877 comm="syz.3.4500" path="net:[4026533324]" dev="nsfs" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 490.401937][T18875] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 490.402124][ T40] audit: type=1400 audit(491.293:10576): avc: denied { create } for pid=18877 comm="syz.3.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 490.407837][T18862] tipc: Resetting bearer [ 490.415533][ T40] audit: type=1400 audit(491.303:10577): avc: denied { ioctl } for pid=18877 comm="syz.3.4500" path="socket:[85282]" dev="sockfs" ino=85282 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 490.435566][ T40] audit: type=1400 audit(491.343:10578): avc: denied { execute } for pid=18879 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 490.449560][ T40] audit: type=1400 audit(491.343:10579): avc: denied { execute_no_trans } for pid=18879 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 490.485317][ T40] audit: type=1400 audit(491.393:10580): avc: denied { ioctl } for pid=18880 comm="syz.3.4502" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 490.529598][T18882] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 490.548312][T13197] Bluetooth: hci2: Frame reassembly failed (-84) [ 490.668857][T18889] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.672216][T18889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.683046][T18889] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.689132][T18889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.703576][T18889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.315796][T18862] tipc: Disabling bearer [ 492.494074][T18887] chnl_net:caif_netlink_parms(): no params data found [ 492.584207][T18887] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.590467][T18887] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.592790][T18887] bridge_slave_0: entered allmulticast mode [ 492.607327][T18887] bridge_slave_0: entered promiscuous mode [ 492.611248][T18887] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.613517][T18887] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.614992][ T5980] Bluetooth: hci2: command 0x1003 tx timeout [ 492.616061][T18887] bridge_slave_1: entered allmulticast mode [ 492.620260][ T5979] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 492.622232][T18887] bridge_slave_1: entered promiscuous mode [ 492.711063][T18887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.716464][T18887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.774843][ T5979] Bluetooth: hci4: command tx timeout [ 492.795560][T18887] team0: Port device team_slave_0 added [ 492.800199][T18887] team0: Port device team_slave_1 added [ 492.853459][T18887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.857472][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.867503][T18887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.871777][T18887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.873956][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.882233][T18887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.884000][ T59] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 492.938162][T18887] hsr_slave_0: entered promiscuous mode [ 492.940454][T18887] hsr_slave_1: entered promiscuous mode [ 492.942523][T18887] debugfs: 'hsr0' already exists in 'hsr' [ 492.944314][T18887] Cannot create hsr debugfs directory [ 493.036504][ T59] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.039970][ T59] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.043041][ T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.046127][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.052692][T18899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 493.066405][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.092033][T18887] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.496621][T18903] netlink: 1000 bytes leftover after parsing attributes in process `syz.4.4507'. [ 493.500320][T18903] netlink: 1000 bytes leftover after parsing attributes in process `syz.4.4507'. [ 493.692928][T18913] netlink: 'syz.4.4510': attribute type 2 has an invalid length. [ 493.723428][T18915] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 493.759148][T18917] 9pnet_fd: Insufficient options for proto=fd [ 493.762592][T18917] tipc: Enabling of bearer rejected, already enabled [ 494.235448][T18887] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.854951][ T5979] Bluetooth: hci4: command tx timeout [ 495.502747][ T34] usb 7-1: USB disconnect, device number 59 [ 495.526670][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 495.526681][ T40] audit: type=1400 audit(496.443:10649): avc: denied { prog_load } for pid=18932 comm="syz.2.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 495.533824][ T40] audit: type=1400 audit(496.443:10650): avc: denied { bpf } for pid=18932 comm="syz.2.4517" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 495.541237][ T40] audit: type=1400 audit(496.453:10651): avc: denied { read } for pid=18932 comm="syz.2.4517" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 495.549126][ T40] audit: type=1400 audit(496.453:10652): avc: denied { open } for pid=18932 comm="syz.2.4517" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 495.556769][ T40] audit: type=1400 audit(496.453:10653): avc: denied { read write } for pid=18932 comm="syz.2.4517" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 495.563572][ T40] audit: type=1400 audit(496.453:10654): avc: denied { open } for pid=18932 comm="syz.2.4517" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 495.571306][ T40] audit: type=1400 audit(496.473:10655): avc: denied { allowed } for pid=18934 comm="syz.2.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 495.573864][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4518'. [ 495.577054][ T40] audit: type=1400 audit(496.473:10656): avc: denied { sqpoll } for pid=18934 comm="syz.2.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 495.585857][ T40] audit: type=1400 audit(496.473:10657): avc: denied { map } for pid=18934 comm="syz.2.4518" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.593048][ T40] audit: type=1400 audit(496.483:10658): avc: denied { read write } for pid=18934 comm="syz.2.4518" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.886962][T18887] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.615398][T18941] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 496.643274][T18943] 9pnet_fd: Insufficient options for proto=fd [ 496.648862][T18943] tipc: Enabling of bearer rejected, already enabled [ 496.934868][ T5979] Bluetooth: hci4: command tx timeout [ 497.421484][T18887] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.451961][T18957] macvlan2: entered promiscuous mode [ 497.453475][T18957] macvlan2: entered allmulticast mode [ 497.455784][T18957] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 498.237557][T18887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.245261][T18887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.257070][T18887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.262139][T18887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.317807][T18887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.333688][T18887] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.342892][T13200] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.345206][T13200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.351162][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.353374][T13198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.460098][T18887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.483343][T18887] veth0_vlan: entered promiscuous mode [ 498.488521][T18887] veth1_vlan: entered promiscuous mode [ 498.504138][T18887] veth0_macvtap: entered promiscuous mode [ 498.509636][T18887] veth1_macvtap: entered promiscuous mode [ 498.519157][T18887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.524949][T18887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.532936][T13200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.536495][T13200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.540806][T13200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.543609][T13200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.581267][T13200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.584057][T13200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.602497][T13200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.605162][T13200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.703693][T18976] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 498.766655][T18979] 9pnet_fd: Insufficient options for proto=fd [ 498.771672][T18979] tipc: Enabled bearer , priority 0 [ 498.784547][T18978] tipc: Resetting bearer [ 499.023129][ T5979] Bluetooth: hci4: command tx timeout [ 499.947127][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 499.954835][T18987] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 499.956750][T18987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 499.960242][T18987] vhci_hcd vhci_hcd.0: Device attached [ 499.963813][T18987] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 499.965744][T18987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 499.968386][T18987] vhci_hcd vhci_hcd.0: Device attached [ 499.971780][T18991] vhci_hcd: connection closed [ 499.973180][T13190] vhci_hcd: stop threads [ 499.973840][T18989] vhci_hcd: connection closed [ 499.974886][T13190] vhci_hcd: release socket [ 499.980449][T13190] vhci_hcd: disconnect device [ 499.982095][T13190] vhci_hcd: stop threads [ 499.983476][T13190] vhci_hcd: release socket [ 499.986529][T13190] vhci_hcd: disconnect device [ 500.579959][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 500.579970][ T40] audit: type=1400 audit(501.493:10728): avc: denied { watch watch_reads } for pid=18995 comm="syz.4.4542" path="/573" dev="tmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 500.747666][T18978] tipc: Disabling bearer [ 500.864845][ T40] audit: type=1400 audit(501.773:10729): avc: denied { sendto } for pid=13199 comm="kworker/u32:89" daddr=ff02::1:ff00:1b netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 501.257672][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.259922][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.524794][ T40] audit: type=1400 audit(502.433:10730): avc: denied { execmem } for pid=19000 comm="syz.2.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 501.586347][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 501.897238][ T40] audit: type=1400 audit(502.813:10731): avc: denied { egress } for pid=5975 comm="kworker/1:3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 502.291627][ T40] audit: type=1400 audit(503.203:10732): avc: denied { unmount } for pid=18887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 502.339804][ T40] audit: type=1400 audit(503.253:10733): avc: denied { read write } for pid=19009 comm="syz.1.4537" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.347296][ T40] audit: type=1400 audit(503.253:10734): avc: denied { open } for pid=19009 comm="syz.1.4537" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.355624][ T40] audit: type=1400 audit(503.253:10735): avc: denied { ioctl } for pid=19009 comm="syz.1.4537" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 502.483316][ T40] audit: type=1400 audit(503.393:10736): avc: denied { create } for pid=19011 comm="syz.4.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 502.649469][ T40] audit: type=1400 audit(503.563:10737): avc: denied { create } for pid=19011 comm="syz.4.4538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.758150][T13199] bond0 (unregistering): Released all slaves [ 504.764567][T13199] bond1 (unregistering): Released all slaves [ 505.649819][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 505.649831][ T40] audit: type=1400 audit(506.563:10748): avc: denied { create } for pid=19031 comm="syz.2.4546" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.660056][ T40] audit: type=1400 audit(506.563:10749): avc: denied { map } for pid=19031 comm="syz.2.4546" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=85653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.669909][ T40] audit: type=1400 audit(506.563:10750): avc: denied { read } for pid=19031 comm="syz.2.4546" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=85653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 505.679677][ T40] audit: type=1400 audit(506.583:10751): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=41442 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 505.687778][ T40] audit: type=1400 audit(506.583:10752): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=41442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 505.713055][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4547'. [ 505.764549][ T40] audit: type=1400 audit(506.673:10753): avc: denied { create } for pid=19037 comm="syz.2.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.784864][ T40] audit: type=1400 audit(506.683:10754): avc: denied { setopt } for pid=19037 comm="syz.2.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.790828][ T40] audit: type=1400 audit(506.683:10755): avc: denied { bind } for pid=19037 comm="syz.2.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.801110][ T40] audit: type=1400 audit(506.683:10756): avc: denied { name_bind } for pid=19037 comm="syz.2.4548" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 505.808692][ T40] audit: type=1400 audit(506.683:10757): avc: denied { node_bind } for pid=19037 comm="syz.2.4548" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 506.550184][T13199] : left promiscuous mode [ 506.694097][T19054] xt_socket: unknown flags 0xe4 [ 507.066804][ T117] block nbd0: Possible stuck request ffff888027c37000: control (read@0,1024B). Runtime 150 seconds [ 507.070169][ T117] block nbd0: Possible stuck request ffff888027c371c0: control (read@1024,1024B). Runtime 150 seconds [ 507.073466][ T117] block nbd0: Possible stuck request ffff888027c37380: control (read@2048,1024B). Runtime 150 seconds [ 507.091017][ T117] block nbd0: Possible stuck request ffff888027c37540: control (read@3072,1024B). Runtime 150 seconds [ 507.599605][T13199] tipc: Left network mode [ 508.537260][ T34] IPVS: starting estimator thread 0... [ 508.538137][T19067] FAULT_INJECTION: forcing a failure. [ 508.538137][T19067] name failslab, interval 1, probability 0, space 0, times 0 [ 508.543391][T19067] CPU: 1 UID: 0 PID: 19067 Comm: syz.1.4558 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 508.543406][T19067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 508.543414][T19067] Call Trace: [ 508.543418][T19067] [ 508.543423][T19067] dump_stack_lvl+0x16c/0x1f0 [ 508.543464][T19067] should_fail_ex+0x512/0x640 [ 508.543483][T19067] should_failslab+0xc2/0x120 [ 508.543498][T19067] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 508.543514][T19067] ? sidtab_sid2str_get+0x17a/0x680 [ 508.543533][T19067] kmemdup_noprof+0x29/0x60 [ 508.543547][T19067] sidtab_sid2str_get+0x17a/0x680 [ 508.543564][T19067] sidtab_entry_to_string+0x33/0x110 [ 508.543581][T19067] security_sid_to_context_core+0x35c/0x640 [ 508.543596][T19067] avc_audit_post_callback+0x109/0x8f0 [ 508.543615][T19067] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 508.543631][T19067] ? skb_put+0x138/0x1b0 [ 508.543645][T19067] ? audit_log_n_string+0x253/0x540 [ 508.543661][T19067] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 508.543677][T19067] common_lsm_audit+0x24e/0x300 [ 508.543692][T19067] ? __pfx_common_lsm_audit+0x10/0x10 [ 508.543706][T19067] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 508.543730][T19067] ? avc_update_node.isra.0+0x4c0/0xb60 [ 508.543747][T19067] slow_avc_audit+0x186/0x210 [ 508.543765][T19067] ? __pfx_slow_avc_audit+0x10/0x10 [ 508.543783][T19067] ? avc_denied+0x14a/0x190 [ 508.543860][T19067] ? avc_has_perm_noaudit+0x306/0x3b0 [ 508.543885][T19067] avc_has_perm+0x1b5/0x1f0 [ 508.543903][T19067] ? __pfx_avc_has_perm+0x10/0x10 [ 508.543921][T19067] ? find_held_lock+0x2b/0x80 [ 508.543937][T19067] sock_has_perm+0x252/0x2f0 [ 508.543950][T19067] ? __pfx_sock_has_perm+0x10/0x10 [ 508.543968][T19067] ? ksys_write+0x190/0x250 [ 508.543981][T19067] security_socket_getsockopt+0x211/0x240 [ 508.543995][T19067] do_sock_getsockopt+0xf5/0x440 [ 508.544009][T19067] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 508.544019][T19067] ? __fget_files+0x204/0x3c0 [ 508.544038][T19067] __sys_getsockopt+0x12f/0x260 [ 508.544057][T19067] __x64_sys_getsockopt+0xbd/0x160 [ 508.544071][T19067] ? do_syscall_64+0x91/0x4c0 [ 508.544082][T19067] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.544100][T19067] do_syscall_64+0xcd/0x4c0 [ 508.544110][T19067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.544122][T19067] RIP: 0033:0x7fb16a38ebe9 [ 508.544133][T19067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.544144][T19067] RSP: 002b:00007fb16b2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 508.544155][T19067] RAX: ffffffffffffffda RBX: 00007fb16a5b5fa0 RCX: 00007fb16a38ebe9 [ 508.544162][T19067] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000003 [ 508.544168][T19067] RBP: 00007fb16b2b7090 R08: 0000200000000180 R09: 0000000000000000 [ 508.544175][T19067] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.544181][T19067] R13: 00007fb16a5b6038 R14: 00007fb16a5b5fa0 R15: 00007ffd3768f628 [ 508.544194][T19067] [ 508.668040][T19072] veth1_macvtap: left promiscuous mode [ 508.670068][T19072] macsec0: entered promiscuous mode [ 508.672124][T19072] macsec0: entered allmulticast mode [ 508.785196][T19068] IPVS: using max 43 ests per chain, 103200 per kthread [ 508.812922][T19074] input: syz1 as /devices/virtual/input/input33 [ 509.005064][ T5975] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 509.171373][ T5975] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.184094][ T5975] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 509.189587][ T5975] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.192421][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.198710][ T34] IPVS: starting estimator thread 0... [ 509.203111][T19070] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 509.209874][ T5975] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.349239][T19085] IPVS: using max 42 ests per chain, 100800 per kthread [ 511.019445][T13199] hsr_slave_0: left promiscuous mode [ 511.028732][T13199] hsr_slave_1: left promiscuous mode [ 511.074391][T13199] veth1_macvtap: left promiscuous mode [ 511.077352][T13199] veth0_macvtap: left promiscuous mode [ 511.079633][T13199] veth1_vlan: left promiscuous mode [ 511.091055][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 511.091066][ T40] audit: type=1400 audit(512.003:10816): avc: denied { create } for pid=19090 comm="syz.3.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 511.103434][ T40] audit: type=1400 audit(512.003:10817): avc: denied { setopt } for pid=19090 comm="syz.3.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 511.121364][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4568'. [ 511.135407][ T40] audit: type=1400 audit(512.003:10818): avc: denied { getopt } for pid=19090 comm="syz.3.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 511.169380][ T40] audit: type=1400 audit(512.083:10819): avc: denied { read } for pid=19091 comm="syz.1.4575" dev="nsfs" ino=4026534214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.178131][ T40] audit: type=1400 audit(512.083:10820): avc: denied { open } for pid=19091 comm="syz.1.4575" path="net:[4026534214]" dev="nsfs" ino=4026534214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.186582][ T40] audit: type=1400 audit(512.083:10821): avc: denied { create } for pid=19091 comm="syz.1.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.192983][ T40] audit: type=1400 audit(512.083:10822): avc: denied { setopt } for pid=19091 comm="syz.1.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.560918][ T10] usb 7-1: USB disconnect, device number 60 [ 511.739642][ T40] audit: type=1400 audit(512.653:10823): avc: denied { write } for pid=19099 comm="syz.2.4569" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.748481][ T40] audit: type=1400 audit(512.653:10824): avc: denied { ioctl } for pid=19099 comm="syz.2.4569" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.045175][ T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 512.162259][ T40] audit: type=1400 audit(513.073:10825): avc: denied { read write } for pid=18887 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.212426][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 512.216025][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 512.218992][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 512.221780][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.232015][T19102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 512.238366][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.263523][T19104] fanotify_encode_fh: 1 callbacks suppressed [ 512.263540][T19104] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 513.537810][T19108] netlink: 'syz.1.4580': attribute type 10 has an invalid length. [ 513.583571][T19108] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 513.592964][T13190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.597410][T13190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.632611][ T5975] usb 7-1: USB disconnect, device number 61 [ 516.565073][T13199] IPVS: stop unused estimator thread 0... [ 519.909599][ T5380] udevd[5380]: worker [6158] /devices/virtual/block/nbd0 is taking a long time [ 519.943634][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 519.943648][ T40] audit: type=1400 audit(520.853:10872): avc: denied { execute } for pid=19139 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 519.962977][ T40] audit: type=1400 audit(520.853:10873): avc: denied { execute_no_trans } for pid=19139 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 520.027433][ T40] audit: type=1400 audit(520.943:10874): avc: denied { name_bind } for pid=19140 comm="syz.3.4585" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 520.033762][ T40] audit: type=1400 audit(520.943:10875): avc: denied { node_bind } for pid=19140 comm="syz.3.4585" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 520.089581][ T40] audit: type=1400 audit(521.003:10876): avc: denied { read write } for pid=19145 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 520.097137][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.097492][ T40] audit: type=1400 audit(521.003:10877): avc: denied { open } for pid=19145 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 520.105975][ T5980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.107943][ T40] audit: type=1400 audit(521.003:10878): avc: denied { ioctl } for pid=19145 comm="syz-executor" path="socket:[88542]" dev="sockfs" ino=88542 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 520.112228][ T5980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.120714][ T5980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.123498][ T5980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.132654][ T40] audit: type=1400 audit(521.043:10879): avc: denied { mounton } for pid=19145 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 520.209547][ T40] audit: type=1400 audit(521.123:10880): avc: denied { module_request } for pid=19145 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 520.229358][T19145] chnl_net:caif_netlink_parms(): no params data found [ 520.350611][T19145] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.352899][T19145] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.355401][T19145] bridge_slave_0: entered allmulticast mode [ 520.358121][T19145] bridge_slave_0: entered promiscuous mode [ 520.361367][T19145] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.363768][T19145] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.366229][T19145] bridge_slave_1: entered allmulticast mode [ 520.368926][T19145] bridge_slave_1: entered promiscuous mode [ 520.434644][T19145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.441824][T19145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.502190][T19145] team0: Port device team_slave_0 added [ 520.506544][T19145] team0: Port device team_slave_1 added [ 520.550501][T19145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.552842][T19145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.561045][T19145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.565565][T19145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.567654][T19145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.575288][T19145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.626628][T19145] hsr_slave_0: entered promiscuous mode [ 520.628911][T19145] hsr_slave_1: entered promiscuous mode [ 520.630981][T19145] debugfs: 'hsr0' already exists in 'hsr' [ 520.632692][T19145] Cannot create hsr debugfs directory [ 520.816980][ T40] audit: type=1400 audit(521.733:10881): avc: denied { create } for pid=19145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.818455][T19145] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 520.829182][T19145] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.833501][T19145] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 520.839601][T19145] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 520.862205][T19159] netlink: 'syz.3.4586': attribute type 10 has an invalid length. [ 520.866047][T19159] bond0: (slave wlan1): Opening slave failed [ 520.869311][ T10] IPVS: starting estimator thread 0... [ 520.872071][T19145] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.874899][T19145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.877538][T19145] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.880178][T19145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.911917][T19145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.922437][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.937231][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.954971][T19165] IPVS: using max 43 ests per chain, 103200 per kthread [ 520.980555][T19145] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.989829][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.992176][T13199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.000215][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.002461][T13191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.124298][T19145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.243921][T19145] veth0_vlan: entered promiscuous mode [ 521.250881][T19145] veth1_vlan: entered promiscuous mode [ 521.266195][T19145] veth0_macvtap: entered promiscuous mode [ 521.270031][T19145] veth1_macvtap: entered promiscuous mode [ 521.279526][T19145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.286227][T19145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.291882][T13197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.295120][T13197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.298479][T13197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.301192][T13197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.345268][T13197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.347755][T13197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.362542][T13191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.365072][T13191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.004824][ T29] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 522.064918][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 522.156361][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.160244][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.163671][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.166746][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.171563][T19197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 522.176584][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.215175][ T5980] Bluetooth: hci2: command tx timeout [ 522.226904][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.230319][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 522.233302][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.236767][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.241412][T19200] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 522.246301][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.193910][T13198] bridge_slave_1: left allmulticast mode [ 523.197068][T13198] bridge_slave_1: left promiscuous mode [ 523.199461][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.213335][T13198] bridge_slave_0: left allmulticast mode [ 523.215736][T13198] bridge_slave_0: left promiscuous mode [ 523.217803][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.294981][ T5980] Bluetooth: hci2: command tx timeout [ 524.503827][T19177] usb 7-1: USB disconnect, device number 62 [ 524.582944][ T1338] usb 10-1: USB disconnect, device number 2 [ 524.652851][T19212] openvswitch: netlink: Duplicate or invalid key (type 0). [ 524.656161][T19212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.667304][T19214] netlink: 'syz.5.4599': attribute type 10 has an invalid length. [ 524.949210][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 524.949221][ T40] audit: type=1400 audit(525.863:10959): avc: denied { ioctl } for pid=19213 comm="syz.5.4599" path="socket:[89520]" dev="sockfs" ino=89520 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 524.959415][ T40] audit: type=1400 audit(525.863:10960): avc: denied { module_request } for pid=19213 comm="syz.5.4599" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 525.023635][ T40] audit: type=1400 audit(525.933:10961): avc: denied { sys_module } for pid=19213 comm="syz.5.4599" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 525.293146][T13198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.298614][T13198] bond_slave_0: left promiscuous mode [ 525.304485][T13198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.310382][T13198] bond_slave_1: left promiscuous mode [ 525.314817][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 525.316214][T13198] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 525.322085][T13198] batadv0: left promiscuous mode [ 525.324601][T13198] bond0 (unregistering): Released all slaves [ 525.450171][T13198] bond1 (unregistering): (slave veth3): Releasing active interface [ 525.452957][T13198] veth0_to_bond: entered promiscuous mode [ 525.466217][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 525.469534][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 525.472545][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 525.472946][T13198] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 525.475824][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.483636][T19221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 525.486604][T13198] bond1 (unregistering): Released all slaves [ 525.489080][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.532685][T19214] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 525.577588][ T40] audit: type=1400 audit(526.493:10962): avc: denied { read write } for pid=19145 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.589191][ T40] audit: type=1400 audit(526.493:10963): avc: denied { open } for pid=19145 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 525.598781][ T40] audit: type=1400 audit(526.493:10964): avc: denied { ioctl } for pid=19145 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 526.216369][ T40] audit: type=1400 audit(527.133:10965): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 526.223231][ T40] audit: type=1400 audit(527.133:10966): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 526.374845][ T5980] Bluetooth: hci2: command tx timeout [ 527.649609][ T40] audit: type=1400 audit(528.563:10967): avc: denied { recv } for pid=5882 comm="syz-executor" saddr=127.0.0.1 src=41442 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 527.669522][ T10] usb 7-1: USB disconnect, device number 63 [ 527.699493][ T40] audit: type=1400 audit(528.613:10968): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=41442 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 527.773944][ T5980] Bluetooth: hci1: unexpected event 0x3b length: 35 > 10 [ 527.889974][T19246] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4612'. [ 527.898618][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4612'. [ 528.124822][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 528.154469][T13198] hsr_slave_0: left promiscuous mode [ 528.159859][T13198] hsr_slave_1: left promiscuous mode [ 528.161999][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.164479][T13198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.172049][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.174604][T13198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.234315][T13198] veth1_macvtap: left promiscuous mode [ 528.236365][T13198] veth0_macvtap: left promiscuous mode [ 528.238243][T13198] veth1_vlan: left allmulticast mode [ 528.239983][T13198] veth1_vlan: left promiscuous mode [ 528.241740][T13198] veth0_vlan: left promiscuous mode [ 528.288817][ T34] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.292327][ T34] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 528.295670][ T34] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.298823][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.303699][T19245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 528.309213][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.384967][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 528.398461][T13198] pimreg (unregistering): left allmulticast mode [ 528.454925][ T5980] Bluetooth: hci2: command tx timeout [ 528.557002][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.560473][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 528.563977][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.568950][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.582213][T19256] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 528.586676][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.276305][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 529.604461][T13198] team0 (unregistering): Port device team_slave_1 removed [ 529.727264][T13198] team0 (unregistering): Port device team_slave_0 removed [ 530.665610][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 530.665623][ T40] audit: type=1400 audit(531.583:11008): avc: denied { read } for pid=19265 comm="syz.3.4621" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 530.671845][T19267] binder: 19265:19267 ioctl c0306201 2000000001c0 returned -22 [ 530.674471][ T40] audit: type=1400 audit(531.583:11009): avc: denied { open } for pid=19265 comm="syz.3.4621" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 530.689666][ T40] audit: type=1400 audit(531.583:11010): avc: denied { read } for pid=19265 comm="syz.3.4621" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.697418][ T40] audit: type=1400 audit(531.583:11011): avc: denied { open } for pid=19265 comm="syz.3.4621" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.705254][ T40] audit: type=1400 audit(531.583:11012): avc: denied { ioctl } for pid=19265 comm="syz.3.4621" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.715186][ T40] audit: type=1400 audit(531.593:11013): avc: denied { ioctl } for pid=19265 comm="syz.3.4621" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 530.723088][ T40] audit: type=1400 audit(531.593:11014): avc: denied { setopt } for pid=19265 comm="syz.3.4621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.785807][ T40] audit: type=1400 audit(531.703:11015): avc: denied { write } for pid=19266 comm="syz.1.4620" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 530.898774][ T59] usb 7-1: USB disconnect, device number 64 [ 530.923490][ T40] audit: type=1400 audit(531.833:11016): avc: denied { read write } for pid=16932 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.933043][ T40] audit: type=1400 audit(531.833:11017): avc: denied { open } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.994732][ T9] usb 10-1: USB disconnect, device number 3 [ 531.155501][T19279] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 531.534428][T19293] netlink: 'syz.3.4629': attribute type 1 has an invalid length. [ 532.114850][ T34] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 532.266672][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.270455][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 532.273796][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.276851][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.286041][T19297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.290267][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 532.716404][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4632'. [ 532.737592][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4632'. [ 532.742993][T19301] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 532.748079][T19301] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (255) [ 533.194848][ T10] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 533.354988][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 533.358617][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 533.361625][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 533.380556][T19330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.467392][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.476062][T19317] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 533.479975][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.686917][T13198] IPVS: stop unused estimator thread 0... [ 534.789780][ T34] usb 6-1: USB disconnect, device number 83 [ 535.169686][T19366] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4656'. [ 535.173588][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4656'. [ 535.330830][T19371] netlink: ct family unspecified [ 535.332441][T19371] openvswitch: netlink: Actions may not be safe on all matching packets [ 535.534890][ T6036] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 535.688432][ T6036] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.692667][ T6036] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 535.696786][ T6036] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.700237][ T6036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.709761][T19373] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 535.717596][ T6036] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.812789][ T6036] usb 7-1: USB disconnect, device number 65 [ 535.827748][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 535.827764][ T40] audit: type=1400 audit(536.733:11096): avc: denied { read write } for pid=16932 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.842277][ T40] audit: type=1400 audit(536.733:11097): avc: denied { open } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.851588][ T40] audit: type=1400 audit(536.733:11098): avc: denied { ioctl } for pid=16932 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.859665][ T40] audit: type=1400 audit(536.763:11099): avc: denied { module_request } for pid=19376 comm="syz.2.4659" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 535.873459][ T40] audit: type=1400 audit(536.783:11100): avc: denied { sys_module } for pid=19376 comm="syz.2.4659" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 535.892968][ T40] audit: type=1400 audit(536.803:11101): avc: denied { create } for pid=19376 comm="syz.2.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 535.898791][ T40] audit: type=1400 audit(536.803:11102): avc: denied { getopt } for pid=19376 comm="syz.2.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 535.910527][ T40] audit: type=1400 audit(536.823:11103): avc: denied { create } for pid=19382 comm="syz.5.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 535.924906][ T40] audit: type=1400 audit(536.833:11104): avc: denied { setopt } for pid=19382 comm="syz.5.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 535.932419][ T40] audit: type=1400 audit(536.833:11105): avc: denied { write } for pid=19382 comm="syz.5.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 536.031829][T19398] macvlan2: entered promiscuous mode [ 536.033650][T19398] macvlan2: entered allmulticast mode [ 536.035747][T19398] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 536.060985][T19399] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4667'. [ 536.081241][T19400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.095727][ T117] block nbd0: Possible stuck request ffff888027c37000: control (read@0,1024B). Runtime 180 seconds [ 537.099097][ T117] block nbd0: Possible stuck request ffff888027c371c0: control (read@1024,1024B). Runtime 180 seconds [ 537.102468][ T117] block nbd0: Possible stuck request ffff888027c37380: control (read@2048,1024B). Runtime 180 seconds [ 537.116191][ T117] block nbd0: Possible stuck request ffff888027c37540: control (read@3072,1024B). Runtime 180 seconds [ 537.745867][ T6036] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 537.896398][ T6036] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 537.899113][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.902778][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 537.907042][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.910691][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.914822][ T6036] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.917651][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.928788][ T6036] usb 7-1: config 0 descriptor?? [ 537.930997][T19407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 538.195825][ T34] usb 6-1: USB disconnect, device number 84 [ 538.241708][ T10] hid-generic 0006:00D4:00FF.000B: item fetching failed at offset 2/170 [ 538.245187][ T10] hid-generic 0006:00D4:00FF.000B: probe with driver hid-generic failed with error -22 [ 538.357640][ T6036] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 538.367783][ T6036] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 538.689425][T19407] netlink: ct family unspecified [ 538.691192][T19407] openvswitch: netlink: Actions may not be safe on all matching packets [ 538.843116][ T34] usb 7-1: USB disconnect, device number 66 [ 539.134606][T19455] 9pnet_fd: Insufficient options for proto=fd [ 539.457043][T19473] macvlan0: entered allmulticast mode [ 539.458789][T19473] veth1_vlan: entered allmulticast mode [ 539.674835][ T61] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 539.831555][ T61] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.834992][ T61] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.837944][ T61] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.840701][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.864203][T19469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 539.869293][ T61] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.264926][ T9] usb 7-1: USB disconnect, device number 67 [ 542.295135][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 542.295151][ T40] audit: type=1400 audit(543.213:11199): avc: denied { read write } for pid=19499 comm="syz.2.4705" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 542.312212][ T40] audit: type=1400 audit(543.223:11200): avc: denied { open } for pid=19499 comm="syz.2.4705" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 542.321678][ T59] hid-generic 0006:00D4:00FF.000D: item fetching failed at offset 2/170 [ 542.327034][ T59] hid-generic 0006:00D4:00FF.000D: probe with driver hid-generic failed with error -22 [ 542.331728][ T40] audit: type=1400 audit(543.243:11201): avc: denied { create } for pid=19499 comm="syz.2.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.338158][ T40] audit: type=1400 audit(543.243:11202): avc: denied { write } for pid=19499 comm="syz.2.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.344607][ T40] audit: type=1400 audit(543.243:11203): avc: denied { create } for pid=19499 comm="syz.2.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 542.351350][ T40] audit: type=1400 audit(543.243:11204): avc: denied { getopt } for pid=19499 comm="syz.2.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 542.421849][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4707'. [ 542.424688][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4707'. [ 542.432064][T13197] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.434895][T13197] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.437467][T13197] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.439994][T13197] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.466287][ T40] audit: type=1400 audit(543.383:11205): avc: denied { read write } for pid=19501 comm="syz.1.4715" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 542.478326][T19513] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4708'. [ 542.494917][ T40] audit: type=1400 audit(543.383:11206): avc: denied { open } for pid=19501 comm="syz.1.4715" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 542.501895][ T40] audit: type=1400 audit(543.383:11207): avc: denied { ioctl } for pid=19501 comm="syz.1.4715" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 542.510295][ T40] audit: type=1400 audit(543.393:11208): avc: denied { read write } for pid=19512 comm="syz.2.4708" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 542.775230][ T59] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 542.928008][ T59] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.932174][ T59] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.936455][ T59] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.939907][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.959104][ T10] hid-generic 0006:00D4:00FF.000E: item fetching failed at offset 2/170 [ 542.959563][T19509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 542.961923][ T10] hid-generic 0006:00D4:00FF.000E: probe with driver hid-generic failed with error -22 [ 542.968333][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.381984][ T10] usb 6-1: USB disconnect, device number 85 [ 545.674861][ T6053] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 545.734945][ T10] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 545.826257][ T6053] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.834379][ T6053] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 545.838428][ T6053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 545.841511][ T6053] usb 7-1: Product: syz [ 545.843147][ T6053] usb 7-1: Manufacturer: syz [ 545.845634][ T6053] usb 7-1: SerialNumber: syz [ 545.870469][T19563] dvmrp1: entered allmulticast mode [ 545.887202][ T10] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 545.890618][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.895621][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 545.900130][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 545.904462][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.909586][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.913142][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.919978][ T10] usb 6-1: config 0 descriptor?? [ 545.923239][T19552] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 546.052953][ T6053] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 546.072135][ T61] usb 7-1: USB disconnect, device number 68 [ 546.079747][ T61] usblp0: removed [ 546.355047][ T10] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 546.360578][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 546.679463][T19552] netlink: ct family unspecified [ 546.681494][T19552] openvswitch: netlink: Actions may not be safe on all matching packets [ 546.831738][ T61] usb 6-1: USB disconnect, device number 86 [ 547.355841][ T5979] ------------[ cut here ]------------ [ 547.358228][ T5979] WARNING: CPU: 2 PID: 5979 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0x11a/0x210 [ 547.361187][ T5979] Modules linked in: [ 547.362909][ T5979] CPU: 2 UID: 0 PID: 5979 Comm: kworker/u33:4 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 547.368733][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.372086][ T5979] Workqueue: hci3 hci_conn_timeout [ 547.373872][ T5979] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 547.375973][ T5979] Code: 00 e8 1a d8 2f f7 4c 89 f1 4c 89 e2 48 c7 c6 a0 1c fd 8c 48 c7 c7 c8 94 a6 90 e8 91 10 89 fa e9 4d ff ff ff e8 f7 d7 2f f7 90 <0f> 0b 90 e8 ee d7 2f f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 547.381695][ T5979] RSP: 0018:ffffc900032f7c30 EFLAGS: 00010293 [ 547.383565][ T5979] RAX: 0000000000000000 RBX: ffff8880364c0948 RCX: ffffffff8a8bba7f [ 547.386297][ T5979] RDX: ffff888024c1a440 RSI: ffffffff8a8bbb29 RDI: 0000000000000005 [ 547.388792][ T5979] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 547.391235][ T5979] R10: 00000000ffffffff R11: 0000000000002c10 R12: ffff8880364c0000 [ 547.393735][ T5979] R13: 0000000000000000 R14: ffffffff90ab3164 R15: ffffc900032f7d10 [ 547.396317][ T5979] FS: 0000000000000000(0000) GS:ffff8880d68c4000(0000) knlGS:0000000000000000 [ 547.398952][ T5979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.400894][ T5979] CR2: 00002000002f1030 CR3: 000000003dc68000 CR4: 0000000000352ef0 [ 547.403389][ T5979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.406187][ T5979] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 547.409138][ T5979] Call Trace: [ 547.410187][ T5979] [ 547.411115][ T5979] process_one_work+0x9cc/0x1b70 [ 547.412638][ T5979] ? __pfx_process_one_work+0x10/0x10 [ 547.414321][ T5979] ? assign_work+0x1a0/0x250 [ 547.416008][ T5979] worker_thread+0x6c8/0xf10 [ 547.417453][ T5979] ? __pfx_worker_thread+0x10/0x10 [ 547.419024][ T5979] kthread+0x3c5/0x780 [ 547.420295][ T5979] ? __pfx_kthread+0x10/0x10 [ 547.421728][ T5979] ? rcu_is_watching+0x12/0xc0 [ 547.423236][ T5979] ? __pfx_kthread+0x10/0x10 [ 547.424711][ T5979] ret_from_fork+0x5d4/0x6f0 [ 547.426256][ T5979] ? __pfx_kthread+0x10/0x10 [ 547.427754][ T5979] ret_from_fork_asm+0x1a/0x30 [ 547.430598][ T5979] [ 547.431558][ T5979] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 547.433802][ T5979] CPU: 2 UID: 0 PID: 5979 Comm: kworker/u33:4 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 547.437387][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 547.440745][ T5979] Workqueue: hci3 hci_conn_timeout [ 547.442362][ T5979] Call Trace: [ 547.443415][ T5979] [ 547.444372][ T5979] dump_stack_lvl+0x3d/0x1f0 [ 547.445812][ T5979] vpanic+0x6e8/0x7a0 [ 547.447057][ T5979] ? __pfx_vpanic+0x10/0x10 [ 547.448484][ T5979] ? hci_conn_timeout+0x11a/0x210 [ 547.450047][ T5979] panic+0xca/0xd0 [ 547.451203][ T5979] ? __pfx_panic+0x10/0x10 [ 547.452578][ T5979] ? check_panic_on_warn+0x1f/0xb0 [ 547.454183][ T5979] check_panic_on_warn+0xab/0xb0 [ 547.455931][ T5979] __warn+0xf6/0x3c0 [ 547.457557][ T5979] ? hci_conn_timeout+0x11a/0x210 [ 547.459508][ T5979] report_bug+0x3c3/0x580 [ 547.460850][ T5979] ? hci_conn_timeout+0x11a/0x210 [ 547.462438][ T5979] handle_bug+0x184/0x210 [ 547.463775][ T5979] exc_invalid_op+0x17/0x50 [ 547.465248][ T5979] asm_exc_invalid_op+0x1a/0x20 [ 547.466739][ T5979] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 547.468461][ T5979] Code: 00 e8 1a d8 2f f7 4c 89 f1 4c 89 e2 48 c7 c6 a0 1c fd 8c 48 c7 c7 c8 94 a6 90 e8 91 10 89 fa e9 4d ff ff ff e8 f7 d7 2f f7 90 <0f> 0b 90 e8 ee d7 2f f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 547.474070][ T5979] RSP: 0018:ffffc900032f7c30 EFLAGS: 00010293 [ 547.475982][ T5979] RAX: 0000000000000000 RBX: ffff8880364c0948 RCX: ffffffff8a8bba7f [ 547.478632][ T5979] RDX: ffff888024c1a440 RSI: ffffffff8a8bbb29 RDI: 0000000000000005 [ 547.480931][ T5979] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 547.483277][ T5979] R10: 00000000ffffffff R11: 0000000000002c10 R12: ffff8880364c0000 [ 547.485758][ T5979] R13: 0000000000000000 R14: ffffffff90ab3164 R15: ffffc900032f7d10 [ 547.488146][ T5979] ? hci_conn_timeout+0x6f/0x210 [ 547.489620][ T5979] ? hci_conn_timeout+0x119/0x210 [ 547.491128][ T5979] process_one_work+0x9cc/0x1b70 [ 547.492636][ T5979] ? __pfx_process_one_work+0x10/0x10 [ 547.494296][ T5979] ? assign_work+0x1a0/0x250 [ 547.495755][ T5979] worker_thread+0x6c8/0xf10 [ 547.497171][ T5979] ? __pfx_worker_thread+0x10/0x10 [ 547.498731][ T5979] kthread+0x3c5/0x780 [ 547.499979][ T5979] ? __pfx_kthread+0x10/0x10 [ 547.501397][ T5979] ? rcu_is_watching+0x12/0xc0 [ 547.502878][ T5979] ? __pfx_kthread+0x10/0x10 [ 547.504306][ T5979] ret_from_fork+0x5d4/0x6f0 [ 547.505949][ T5979] ? __pfx_kthread+0x10/0x10 [ 547.507773][ T5979] ret_from_fork_asm+0x1a/0x30 [ 547.509460][ T5979] [ 547.511024][ T5979] Kernel Offset: disabled [ 547.512354][ T5979] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:07:43 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea0000f691c0 RCX=ffffffff820613b2 RDX=1ffffd40001ed239 RSI=ffffffff8206195a RDI=ffffea0000f691c8 RBP=0000000000000000 RSP=ffffc90003aff670 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffea0000f691c8 R13=dffffc0000000000 R14=ffffea0000f691c0 R15=ffffea0000f691c0 RIP=ffffffff82061975 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557e9f8500 ffffffff 00c00000 GS =0000 ffff8880d66c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb16b0e56c0 CR3=00000000355a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000004 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff2dbac96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff2dbac96 00007ffff2dbac9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 931f962d02982247 32485b160809595b 779d22f8aac63968 55114a30d8d1846a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 58332875677c11f7 2a505a858a30d2d5 61cb33335589c8ee 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 34d77166af9de8d5 16b03a44e35784dc c4a3e05737ce0fcb 428c70708a63d539 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a722bffde544bfb4 030edad68257462e 53f2b49cc87e5c36 127cfedf07ea0781 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40cc990c56eef21d 20a389ff1c1af229 085b85110f2809cd c187524c5a6c2a29 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cf7a3e5e037dc42 918ba187453fb0c8 30c535730705e98b a0e29001420c568d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3ed1cb09cb8a31d ab9886bf758f3b65 0d746010e6dfe1ae b666d926a00c7618 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b16e74a35075086 a722bffde544bfb4 030edad68257462e 53f2b49cc87e5c36 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff896218c2 RCX=ffffc900006a082c RDX=1ffff920000d4124 RSI=ffffffff8de293b8 RDI=ffffffff896218c2 RBP=ffffc900006a0920 RSP=ffffc900006a08a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=000000000009125f R12=ffffffff81a6dd60 R13=ffffc900006a0998 R14=0000000000000000 R15=ffff888026b90000 RIP=ffffffff818479b2 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efca7147300 ffffffff 00c00000 GS =0000 ffff8880d67c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000480 CR3=0000000025b82000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000004 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=7cbd1d6a379d1017 a568b78a56cca4c3 7cbd1d6a379d1017 a568b78a56cca4c3 7cbd1d6a379d1017 a568b78a56cca4c3 7cbd1d6a379d1017 a568b78a56cca4c3 ZMM18=48d8c6e7a59f406c a3951f10f47d4127 48d8c6e7a59f406c a3951f10f47d4127 48d8c6e7a59f406c a3951f10f47d4127 48d8c6e7a59f406c a3951f10f47d4127 ZMM19=5f16000000000000 0000000000000004 5f16000000000000 0000000000000003 5f16000000000000 0000000000000002 5f16000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8800018003040800 0610000410000602 70e2181000018004 4e08000008000100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000008060a016dbe 0ff0808082048800 01900302d4020001 8e03280200018c03 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 280200018a0302d8 02000188031c8080 8084048800018003 0408000610000410 ZMM24=0edc38780edc3878 0edc38780edc3878 0edc38780edc3878 0edc38780edc3878 0edc38780edc3878 0edc38780edc3878 0edc38780edc3878 0edc38780edc3878 ZMM25=bee9f599bee9f599 bee9f599bee9f599 bee9f599bee9f599 bee9f599bee9f599 bee9f599bee9f599 bee9f599bee9f599 bee9f599bee9f599 bee9f599bee9f599 ZMM26=1e135c6a1e135c6a 1e135c6a1e135c6a 1e135c6a1e135c6a 1e135c6a1e135c6a 1e135c6a1e135c6a 1e135c6a1e135c6a 1e135c6a1e135c6a 1e135c6a1e135c6a ZMM27=66e2babf66e2babf 66e2babf66e2babf 66e2babf66e2babf 66e2babf66e2babf 66e2babf66e2babf 66e2babf66e2babf 66e2babf66e2babf 66e2babf66e2babf ZMM28=000001a00000019f 0000019e0000019d 0000019c0000019b 0000019a00000199 0000019800000197 0000019600000195 0000019400000193 0000019200000191 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8b1d00008b1d0000 8b1d00008b1d0000 8b1d00008b1d0000 8b1d00008b1d0000 8b1d00008b1d0000 8b1d00008b1d0000 8b1d00008b1d0000 8b1d00008b1d0000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856366d5 RDI=ffffffff9b106160 RBP=ffffffff9b106120 RSP=ffffc900032f75a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b106120 R15=ffffffff85636670 RIP=ffffffff856366ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000002f1030 CR3=000000003dc68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000004 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b743b1f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefb8a6cc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefb8a6cc6 00007ffefb8a6ccc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b76212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b76212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b76212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b76212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b76212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4b76212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000322e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000a3088d RBX=0000000000000003 RCX=ffffffff8b92ac29 RDX=0000000000000000 RSI=ffffffff8de4e7a9 RDI=ffffffff8c161100 RBP=ffffed1003c54000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a0000 R14=ffffffff90aaff90 R15=0000000000000000 RIP=ffffffff8b92978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000031d030 CR3=000000003dc68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff2dbab10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff2dbac96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff2dbac96 00007ffff2dbac9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16d8c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000