last executing test programs: 2m15.608653949s ago: executing program 0 (id=30): r0 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002400128009000100626f6e64000000001400028031e00e03e7ff0e000200000008000f00"], 0x44}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4894) 2m15.559047431s ago: executing program 0 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000700000008000300", @ANYRES16=r0], 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) 2m15.49887395s ago: executing program 0 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000100080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 2m15.449698206s ago: executing program 0 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=@newlink={0x44, 0x10, 0x401, 0xfffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 2m15.446749829s ago: executing program 0 (id=48): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x1003, 0xfffffffc, 0x1c) 2m15.397128914s ago: executing program 0 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x1}, {0x1, 0x1, {0x1, 0x0, 0x4}, {0x0, 0xf0}, 0xfe, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0xff}, {0x0, 0x0, 0x1}, 0x0, 0xff}, {0x2, 0x3, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x1}, 0xfe, 0x1}], 0xa0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x1}, {0x1, 0x1, {0x1, 0x0, 0x4}, {0x0, 0xf0}, 0xfe, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0xff}, {0x0, 0x0, 0x1}, 0x0, 0xff}, {0x2, 0x3, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x1}, 0xfe, 0x1}], 0xa0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) (async) 2m0.0121863s ago: executing program 32 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x1}, {0x1, 0x1, {0x1, 0x0, 0x4}, {0x0, 0xf0}, 0xfe, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0xff}, {0x0, 0x0, 0x1}, 0x0, 0xff}, {0x2, 0x3, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x1}, 0xfe, 0x1}], 0xa0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x1}, {0x1, 0x1, {0x1, 0x0, 0x4}, {0x0, 0xf0}, 0xfe, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x4}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0xff}, {0x0, 0x0, 0x1}, 0x0, 0xff}, {0x2, 0x3, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x1}, 0xfe, 0x1}], 0xa0) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) (async) 3.466667997s ago: executing program 1 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e00000000007a0000010000600500070000000100080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 3.466367219s ago: executing program 1 (id=2354): rt_sigaction(0xb, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x800) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x9f, 0x82) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000300)=0x4, &(0x7f0000000380)=0x4) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000600)={r2, 0x6, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x12, 0x6, 0x1, "1f5ff7b03ae109e43f2edba604d0f5bdb29ac574b8e1e1e18684de247274152588f6f988de5ff5af1d4407e6321a7d1e3bb29c93e7ab65bac7437edc56490897", "2aad4b5df44d0834bd486181f46666dd7f8281e9bc53b3056e80e4150a604aadfb9cfdc7d6f6187a0a451631648fedd60433fa7ae37a2b4403a4c66b5a66d907", "f1b81d9b6b4b890baff434fd572394875c6b39d3a06a942f3c9d9144d20b8375", [0x3, 0xe]}}) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque="d66d0000000000000000"}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f00000002c0)={0x1, 0x0, 0x101, 0x1, {0x0, 0xa, 0x10, 0x3}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='syscall\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0xb6, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f00000001c0)={[0xeeee8000, 0xffff1000, 0x6000, 0xc4cc3002], 0x100000001, 0x6, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e23, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.538002793s ago: executing program 1 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000007000600000008000300", @ANYRES16=r0], 0x1c}}, 0x0) 2.478771305s ago: executing program 1 (id=2368): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r1) r2 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.127094456s ago: executing program 4 (id=2372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000023000000000000000000850000004100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x12c) execveat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)={[&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000300)='\'\x00', &(0x7f0000000340)='wlan0\x00']}, &(0x7f0000000640)={[&(0x7f0000000440)='nl80211\x00', &(0x7f0000000480)='nl80211\x00', &(0x7f00000004c0)='nl80211\x00', &(0x7f0000000500)='\x00', &(0x7f00000005c0)='GPL\x00', &(0x7f0000000600)='wlan0\x00']}, 0x1000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}, @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000980)={0x268, r5, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x242, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="fb5c1f5df672", {0x2, 0xd9}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x1, @random=0x1ff, 0x20, @void, @val, @val={0x3, 0x1, 0x6c}, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x1, 0x60}}, [{0xdd, 0xce, "dc2afedb33f84adfb59403c46182a157143352e77fffc0152136e36fdacaa58d9e94302a847d706578fd7d40f58c49fb58cb51e2573d791d560dae4dd89e33244a2b1568714de89756ee5dad1c9867147625e4bdc1b6ed02002f7513f483f2b0ba163227cae2b25225e3e50654df84e79234b0416dbdf71f1ca53519e91ad278553c60a9c90ef9f80635a475c1e90bf9ce193c24128dd4c771a0951d3127dbc5a0b843d60fca5f0b938612f923d19247db6306078f432f57b5346d929521f395cd12388f396513bb81794b19ecea"}, {0xdd, 0x19, "06dbaa0289c755870fee9d12ac7609ffcfac1e46f12b79213e"}, {0xdd, 0xc3, "ad0004305b3c2d7052f5114459cc8e8ca578831b09a8e7fbd0e7ffd128b977d1a723bfad98a4df5653186871dcea3a92257f63f37431f37559768796c63c88007c0ebe1afc98c579b1a1b3439c42ace5456241e46783cba781bb6d11e050e8080b177bf460a2047b6226769a1dc04581ae75c463e251024a9b0a9c5d87e838c251a2888eaa3c0d08bd7c52b6018ae0cb8b30a8ae2c57f5fda9c8dab63d4ab23f29644e8933fe15194ed1727a161850145ff4fb9e46f1e198c9cc4801f35f920425f9e7"}, {0xdd, 0x52, "77d94cde01dc48b255bc1cd24434668b8a90fb036b7f478ebaaf7c76d44a804efc59666b261844a8a75f650523c13636c158b2ca56261a4aa035888a71661f2da29008fa94b8bd8ce99dc755fbf4eaeff7c3"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc79}]}, 0x268}, 0x1, 0x0, 0x0, 0x4044051}, 0x4000) 2.05791402s ago: executing program 4 (id=2373): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x1c8, 0xf0, 0x328, 0xf0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x0, 0xff, 0x1}, 0x0, 0xa8, 0xf0, 0x0, {0x68000000, 0x3a010000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private0, 0x2a, 0x7, 0x7ee}}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x0, 0x4}, {0x4, 0x6, 0x4}, 0xe, 0x1}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @local, @mcast2, [], [0x0, 0x0, 0xff]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, @local, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 2.057345164s ago: executing program 4 (id=2375): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000001c0)) fanotify_init(0x0, 0x0) (async) r1 = fanotify_init(0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x128) fanotify_mark(r1, 0x641, 0x48001018, r2, 0x0) r3 = fanotify_init(0x20, 0x8000) openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101140, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xb9) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1262, 0x0) fanotify_mark(r3, 0x2, 0x1028, r2, 0x0) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x3) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x547101) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f00000002c0)={0x0, 0x1}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f00000002c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x4}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000080)={0x10001, r7}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004030008080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004030008080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000014000000760000f0bf910000000000001f080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x19011, r9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRESHEX=r12, @ANYRES32, @ANYRES8=r5, @ANYRES32, @ANYRESHEX=r13], 0x48) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) pselect6(0xffffffffffffff57, &(0x7f0000000180)={0x3f, 0x2, 0x0, 0x0, 0xffffffffffffffee, 0x6}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0xffffffffffffff57, &(0x7f0000000180)={0x3f, 0x2, 0x0, 0x0, 0xffffffffffffffee, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.98797655s ago: executing program 1 (id=2378): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000d00)=""/198, 0x32, 0xc6, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vlan1\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bond_slave_0\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}], 0x18}, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000000)) sendto$packet(r1, &(0x7f00000008c0)='O', 0x1, 0xd0594848a1ff4ce4, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 1.475708285s ago: executing program 2 (id=2380): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x2}, 0x24}}, 0x800) 1.40812472s ago: executing program 2 (id=2381): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0x400, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x40000d0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast5)\x00'}, 0x5d) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, "12848098"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) write$UHID_CREATE2(r4, &(0x7f0000000b00)=ANY=[], 0x1e0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x40010, r4, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000e0800000000000004000000df429900a30000008520000002000000180000000700000000000000080000003000feff08000000696a100008000000cb03ffff008000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0xd1, &(0x7f0000000200)=""/209, 0x40f00, 0x24, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000140)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x10001, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x4, 0x1, 0x8, 0x8}, {0x0, 0x5, 0x4, 0xc}], 0x10, 0xe, @void, @value}, 0x94) 1.175595501s ago: executing program 4 (id=2382): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f00000002c0)='THAWED\x00', 0xfdef) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000280)) 1.175352659s ago: executing program 4 (id=2383): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8cff, 0x0) getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0x7) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) getdents64(r0, 0x0, 0x0) 1.116060813s ago: executing program 2 (id=2385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c0000002000090002000000", @ANYRES32=r1, @ANYBLOB="0c1522041db96703db1fe3ffcad2bc260967e719617ee42e331a6b26d08473aa06d34395e4e8c86a1515a2d2322c7a9b3060f48c27613e42b55e8f96d41d636d928ea36b36a3bc53b3fd87a57225398630e950148e7ecb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) writev(r3, &(0x7f0000000840)=[{&(0x7f00000004c0)="d0535034b4e44359e4db59138dacee2fde5d066cfb181a87d3c0d411cbff83be708bd0f2a8de18099010b4b02b85fe05f0a74df6269318c2ee9caefda7733bb422829698eda4c54e4a42fd5c0ab95cd5c3880faccb5a113c813c641151caf11d8c05c5047944f1a7eec0285467da3f86fbfdbdec823cd22c40b1d140e4dd99d4", 0x80}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000091}, 0x4) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unshare(0x28000600) r6 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x7079, 0x1000, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x21, 0x4007, @fd_index=0x1, 0x4, 0x2, 0xf, 0x4, 0x0, {0x1}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) keyctl$clear(0x11, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000180000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) syslog(0x9, 0x0, 0x0) sendmmsg(r9, 0x0, 0x0, 0x700) 1.05521351s ago: executing program 4 (id=2386): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x268402) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000095"]) sendto$inet(r2, 0x0, 0x20, 0x8810, &(0x7f0000000000)={0x2, 0x4f21, @multicast2}, 0x10) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000095c0)={'syz_tun\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e25, @private=0xa010102}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/103, 0x67}], 0x1}, 0x2000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000c00000018000380140003800c00017005000200000000000400018018000180140002007665746830"], 0x44}}, 0x0) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r11}], 0x1, 0x0, 0x0, 0x0) write$dsp(r4, &(0x7f0000000140)="75f85398d510d3060040000000000085000000000000000000000000000000000da9b6763704aef7d08d465c100536412705120c965e8d4257af624fc6999fd46e507d2683291d4b1c5764a3", 0x4c) 1.054041369s ago: executing program 3 (id=2388): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34343459, 0x0, 0x0, [{}, {0x0, 0x80000}, {0x3, 0xffe7}, {}, {0xfffffffd}], 0x0, 0x0, 0x9}}) 988.307043ms ago: executing program 3 (id=2389): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r2, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1}, 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(khazad-generic)\x00'}, 0x58) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x660100) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 928.382567ms ago: executing program 3 (id=2390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0x11, 0x148, 0x6c000000, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r0}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) 928.155697ms ago: executing program 3 (id=2391): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) vmsplice(r1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r5, 0x0, 0x25a5, 0x0) 506.304765ms ago: executing program 1 (id=2379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x28ce80, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x8000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x34, r4, 0x1, 0x0, 0x0, {0x53}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0xfffffffffffffef6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000340)=r7) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1e040600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f00000002c0)=[{0x4, 0x0, 0x1, 0x8}, {0x8000, 0x1, 0xb, 0x1}]}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) r10 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 247.880078ms ago: executing program 2 (id=2392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000003f00000000010000600500070000000100080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 247.542694ms ago: executing program 2 (id=2393): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='rose0\x00') r1 = socket(0x3, 0x800, 0xffff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x49, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x8, 0x2, 0x79a792ba, @vifc_lcl_ifindex=r2, @loopback}, 0x10) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x13, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x6, 0xa, 0x6, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa339}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}]}, &(0x7f0000000440)='GPL\x00', 0xfffffffc, 0xe5, &(0x7f0000000480)=""/229, 0x41000, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xf, 0xfffffff6, 0xce35}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000005c0)=[{0x0, 0x3, 0xe, 0x4}, {0x1, 0x5, 0x9, 0x3}, {0x3, 0x2, 0xb, 0x1}, {0x5, 0x3, 0x5, 0xb}, {0x2, 0x5, 0x5, 0x5}, {0x4, 0x2, 0xc, 0x7}, {0x3, 0x2, 0x8, 0xc}, {0x4, 0x2, 0x6, 0x6}], 0x10, 0xab, @void, @value}, 0x94) close(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000008c0)={&(0x7f0000000700), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, r4, 0x202, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "0484fb807cc1228371ae68ae3d4ff2e8"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "671ac964554a29aee2d34abdcfa843ed"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a3e935ac664ce35762a6f0d6255bbd67"}, @NL80211_ATTR_PMK={0x14, 0xfe, "20c04f00208a31678d12334f11135f5d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ee2610df6123d901e43cd2f0082ea315"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6e91eecf525f"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000881}, 0x140) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a00)=0xc) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a40)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}}}, &(0x7f0000000b40)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x210b0010}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)=@acquire={0x1e0, 0x17, 0x1, 0x70bd2a, 0x2, {{@in=@local, 0x4d5, 0xff}, @in6=@remote, {@in=@loopback, @in6=@mcast1, 0x4e24, 0x0, 0x4e21, 0x8044, 0x2, 0x20, 0x0, 0x2e, r2, r6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x6, 0xa, 0x80, 0x0, 0x84, r2, r7}, {0x2, 0x8000000000000000, 0x1, 0x482, 0x0, 0x100000001, 0xfffffffffffff41b, 0x1}, {0x7, 0x2, 0xf, 0x4}, 0x9, 0x0, 0x2, 0x1, 0x3}, 0x9, 0x1, 0x3b97d2b2, 0x70bd2a}, [@policy={0xac, 0x7, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x20, 0xab, r2, r8}, {0xc966, 0x5, 0x7, 0x1b, 0x4, 0x3, 0x4, 0x2}, {0x0, 0x4, 0x4, 0x8}, 0xa, 0x6e6bb3, 0x0, 0x0, 0x1, 0x1}}, @offload={0xc}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) bind$llc(r1, &(0x7f0000000e00)={0x1a, 0x110, 0x7, 0x7, 0x2, 0xc}, 0x10) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe3e2, 0x30}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c00}, 0x8080) io_setup(0x8, &(0x7f0000000f40)=0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8) io_cancel(r9, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x39f, r3, &(0x7f0000000f80)="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", 0xfc, 0x3, 0x0, 0x2, r10}, &(0x7f0000001100)) (async) connect$unix(r10, &(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r11, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) read$FUSE(r10, &(0x7f0000001300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r10, &(0x7f0000003340)={0x18, 0xfffffffffffffff5, r12, {0x7}}, 0x18) (async) r13 = syz_genetlink_get_family_id$fou(&(0x7f00000033c0), r1) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x24, r13, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x4880) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000034c0), 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_submit(r9, 0x1, &(0x7f0000003580)=[&(0x7f0000003540)={0x0, 0x0, 0x0, 0x2, 0x3, r10, &(0x7f0000003500)="601ae6cdd7db8bdd939defd560eab08f2f4a75c2c737eaa4a2d599", 0x1b, 0x9, 0x0, 0x0, r10}]) (async) connect$unix(r0, &(0x7f00000035c0)=@file={0x1, './file0\x00'}, 0x6e) 118.252713ms ago: executing program 2 (id=2394): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) r4 = dup3(r2, r0, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f00000003c0)={0x10, 0x0, r1}, 0x10) (fail_nth: 3) 28.019733ms ago: executing program 3 (id=2395): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) r4 = dup3(r2, r0, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f00000003c0)={0x10, 0x0, r1}, 0x10) 0s ago: executing program 3 (id=2396): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r4 = socket(0x2, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) (async) r8 = syz_open_dev$video(&(0x7f0000000340), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) (async) close_range(r4, r6, 0x0) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000002c0)=0x10) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd, 0x3b, 0xc, 0x0, 0x0}) kernel console output (not intermixed with test programs): ][ T39] audit: type=1400 audit(1736226777.990:477): avc: denied { getopt } for pid=9626 comm="syz.4.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.389675][ T9633] Cannot find add_set index 1 as target [ 109.617593][ T39] audit: type=1400 audit(1736226778.240:478): avc: denied { ioctl } for pid=9663 comm="syz.1.1347" path="socket:[29479]" dev="sockfs" ino=29479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.648979][ T9668] xt_hashlimit: size too large, truncated to 1048576 [ 109.764035][ T9683] xt_hashlimit: size too large, truncated to 1048576 [ 109.767514][ T9683] warn_alloc: 1 callbacks suppressed [ 109.767522][ T9683] syz.2.1355: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.773912][ T9683] CPU: 2 UID: 0 PID: 9683 Comm: syz.2.1355 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 109.776932][ T9683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.779875][ T9683] Call Trace: [ 109.780832][ T9683] [ 109.781649][ T9683] dump_stack_lvl+0x16c/0x1f0 [ 109.782944][ T9683] warn_alloc+0x24d/0x3a0 [ 109.784149][ T9683] ? __pfx_warn_alloc+0x10/0x10 [ 109.785563][ T9683] ? __get_vm_area_node+0x1b0/0x2f0 [ 109.787064][ T9683] ? __get_vm_area_node+0x1dc/0x2f0 [ 109.788479][ T9683] __vmalloc_node_range_noprof+0x1105/0x1530 [ 109.790212][ T9683] ? __pfx___lock_acquire+0x10/0x10 [ 109.792097][ T9683] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 109.793807][ T9683] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.795618][ T9683] ? __pfx_lock_release+0x10/0x10 [ 109.797027][ T9683] ? trace_lock_acquire+0x14e/0x1f0 [ 109.798444][ T9683] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 109.800211][ T9683] vmalloc_noprof+0x6b/0x90 [ 109.801674][ T9683] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 109.803372][ T9683] hashlimit_mt_check_common+0x8b0/0x1450 [ 109.805024][ T9683] hashlimit_mt_check+0x71/0x90 [ 109.806441][ T9683] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 109.808033][ T9683] xt_check_match+0x284/0xa50 [ 109.809388][ T9683] ? __schedule+0x59b2/0x5ad0 [ 109.810844][ T9683] ? __pfx_xt_check_match+0x10/0x10 [ 109.812353][ T9683] ? xt_find_target+0x1ee/0x290 [ 109.813764][ T9683] ? xt_find_match+0x1f2/0x290 [ 109.815150][ T9683] find_check_entry.constprop.0+0x34d/0xa20 [ 109.816860][ T9683] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 109.818697][ T9683] ? kvfree+0x47/0x50 [ 109.819878][ T9683] translate_table+0xd06/0x17b0 [ 109.821274][ T9683] ? __pfx_translate_table+0x10/0x10 [ 109.822744][ T9683] ? __might_fault+0xe3/0x190 [ 109.824082][ T9683] do_ip6t_set_ctl+0x926/0xbf0 [ 109.825431][ T9683] ? trace_contention_end+0xee/0x140 [ 109.826907][ T9683] ? __mutex_lock+0x1cc/0xa60 [ 109.828249][ T9683] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 109.829670][ T9683] ? __mutex_unlock_slowpath+0x164/0x690 [ 109.831275][ T9683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.833078][ T9683] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 109.834691][ T9683] nf_setsockopt+0x8a/0xf0 [ 109.835972][ T9683] ipv6_setsockopt+0x135/0x170 [ 109.837253][ T9683] rawv6_setsockopt+0xd7/0x680 [ 109.838539][ T9683] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 109.839999][ T9683] ? selinux_socket_setsockopt+0x6a/0x80 [ 109.841964][ T9683] ? sock_common_setsockopt+0x2e/0xf0 [ 109.843407][ T9683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.845032][ T9683] do_sock_setsockopt+0x222/0x480 [ 109.846494][ T9683] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.848109][ T9683] ? lock_acquire+0x2f/0xb0 [ 109.849388][ T9683] __sys_setsockopt+0x1a0/0x230 [ 109.850796][ T9683] __x64_sys_setsockopt+0xbd/0x160 [ 109.852199][ T9683] ? do_syscall_64+0x91/0x250 [ 109.853486][ T9683] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.854959][ T9683] do_syscall_64+0xcd/0x250 [ 109.856240][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.857896][ T9683] RIP: 0033:0x7fd8b9185d29 [ 109.859122][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.864187][ T9683] RSP: 002b:00007fd8ba06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.866386][ T9683] RAX: ffffffffffffffda RBX: 00007fd8b9375fa0 RCX: 00007fd8b9185d29 [ 109.868537][ T9683] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 109.870707][ T9683] RBP: 00007fd8b9201b08 R08: 0000000000000588 R09: 0000000000000000 [ 109.872850][ T9683] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 109.874986][ T9683] R13: 0000000000000000 R14: 00007fd8b9375fa0 R15: 00007ffc37a346b8 [ 109.877123][ T9683] [ 109.879921][ T9683] Mem-Info: [ 109.880869][ T9683] active_anon:5638 inactive_anon:0 isolated_anon:0 [ 109.880869][ T9683] active_file:13244 inactive_file:38695 isolated_file:0 [ 109.880869][ T9683] unevictable:1768 dirty:329 writeback:0 [ 109.880869][ T9683] slab_reclaimable:12059 slab_unreclaimable:76963 [ 109.880869][ T9683] mapped:29780 shmem:2465 pagetables:778 [ 109.880869][ T9683] sec_pagetables:304 bounce:0 [ 109.880869][ T9683] kernel_misc_reclaimable:0 [ 109.880869][ T9683] free:452905 free_pcp:4134 free_cma:0 [ 109.895461][ T9683] Node 0 active_anon:22552kB inactive_anon:0kB active_file:52976kB inactive_file:154700kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:119120kB dirty:1316kB writeback:0kB shmem:6324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13136kB pagetables:3112kB sec_pagetables:1216kB all_unreclaimable? no [ 109.905040][ T9683] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 109.913908][ T9683] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.921890][ T9683] lowmem_reserve[]: 0 1212 0 0 0 [ 109.922311][ T9688] gre0: Master is either lo or non-ether device [ 109.923456][ T9683] Node 0 DMA32 free:212084kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:22676kB inactive_anon:0kB active_file:52976kB inactive_file:154700kB unevictable:3536kB writepending:1316kB present:2080628kB managed:1269908kB mlocked:0kB bounce:0kB free_pcp:11552kB local_pcp:7840kB free_cma:0kB [ 109.934096][ T9683] lowmem_reserve[]: 0 0 0 0 0 [ 109.935560][ T9683] Node 1 Normal free:1585924kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:3520kB local_pcp:384kB free_cma:0kB [ 109.943667][ T9683] lowmem_reserve[]: 0 0 0 0 0 [ 109.945077][ T9683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.948623][ T9683] Node 0 DMA32: 10*4kB (UM) 27*8kB (UME) 287*16kB (UME) 254*32kB (UME) 245*64kB (UME) 13*128kB (UME) 20*256kB (UME) 11*512kB (UME) 9*1024kB (UME) 7*2048kB (UME) 36*4096kB (UM) = 212080kB [ 109.954019][ T9683] Node 1 Normal: 1*4kB (E) 6*8kB (ME) 23*16kB (UM) 135*32kB (UME) 66*64kB (UME) 32*128kB (UME) 6*256kB (UE) 7*512kB (UME) 3*1024kB (UE) 2*2048kB (UM) 381*4096kB (M) = 1585924kB [ 109.959125][ T9683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.962060][ T9683] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 109.964694][ T9683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.967357][ T9683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.969918][ T9683] 54404 total pagecache pages [ 109.971205][ T9683] 0 pages in swap cache [ 109.972557][ T9683] Free swap = 124184kB [ 109.973769][ T9683] Total swap = 124996kB [ 109.974946][ T9683] 1048443 pages RAM [ 109.976127][ T9683] 0 pages HighMem/MovableOnly [ 109.977444][ T9683] 281645 pages reserved [ 109.978609][ T9683] 0 pages cma reserved [ 110.008766][ T9696] __nla_validate_parse: 20 callbacks suppressed [ 110.008794][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1359'. [ 110.014402][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 110.017117][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1359'. [ 110.019791][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1359'. [ 110.055847][ T9698] Cannot find del_set index 4 as target [ 110.126598][ T9708] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1364'. [ 110.153245][ T9712] fuse: Unknown parameter 'grou00000000000000000000' [ 110.287992][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 110.290703][ T9744] gre0: Master is either lo or non-ether device [ 110.317493][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 110.322994][ T9748] xt_hashlimit: size too large, truncated to 1048576 [ 110.406312][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1383'. [ 110.408871][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 110.411464][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1383'. [ 110.438052][ T39] audit: type=1400 audit(1736226779.060:479): avc: denied { setopt } for pid=9760 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.473012][ T9763] Cannot find add_set index 1 as target [ 110.502647][ T9761] cgroup: name respecified [ 110.545238][ T9760] delete_channel: no stack [ 110.844943][ T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 110.992214][ T62] usb 7-1: Using ep0 maxpacket: 16 [ 110.996620][ T62] usb 7-1: config 11 has an invalid interface number: 142 but max is 3 [ 110.996689][ T9796] gre0: Master is either lo or non-ether device [ 110.998850][ T62] usb 7-1: config 11 has an invalid interface number: 123 but max is 3 [ 111.003009][ T62] usb 7-1: config 11 has an invalid interface number: 182 but max is 3 [ 111.003029][ T62] usb 7-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 111.003045][ T62] usb 7-1: config 11 has an invalid interface number: 112 but max is 3 [ 111.003061][ T62] usb 7-1: config 11 has an invalid interface number: 20 but max is 3 [ 111.014252][ T62] usb 7-1: config 11 has 5 interfaces, different from the descriptor's value: 4 [ 111.014275][ T62] usb 7-1: config 11 has no interface number 0 [ 111.014290][ T62] usb 7-1: config 11 has no interface number 1 [ 111.014304][ T62] usb 7-1: config 11 has no interface number 2 [ 111.014318][ T62] usb 7-1: config 11 has no interface number 3 [ 111.014331][ T62] usb 7-1: config 11 has no interface number 4 [ 111.014375][ T62] usb 7-1: config 11 interface 142 altsetting 67 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 111.014397][ T62] usb 7-1: config 11 interface 142 altsetting 67 has an invalid descriptor for endpoint zero, skipping [ 111.014419][ T62] usb 7-1: config 11 interface 123 altsetting 98 endpoint 0xE has an invalid bInterval 225, changing to 11 [ 111.014448][ T62] usb 7-1: config 11 interface 182 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 111.014477][ T62] usb 7-1: config 11 interface 182 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 111.014496][ T62] usb 7-1: config 11 interface 182 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 111.014514][ T62] usb 7-1: config 11 interface 182 altsetting 5 endpoint 0x3 has invalid maxpacket 479, setting to 64 [ 111.014535][ T62] usb 7-1: config 11 interface 182 altsetting 5 endpoint 0x7 has an invalid bInterval 209, changing to 11 [ 111.014557][ T62] usb 7-1: config 11 interface 182 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 111.014576][ T62] usb 7-1: config 11 interface 182 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 111.014595][ T62] usb 7-1: config 11 interface 182 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 111.014621][ T62] usb 7-1: config 11 interface 112 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 111.014640][ T62] usb 7-1: config 11 interface 112 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 111.014659][ T62] usb 7-1: config 11 interface 112 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 111.014675][ T62] usb 7-1: config 11 interface 112 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 111.014691][ T62] usb 7-1: config 11 interface 112 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 111.014707][ T62] usb 7-1: config 11 interface 112 altsetting 128 has an endpoint descriptor with address 0x16, changing to 0x6 [ 111.014725][ T62] usb 7-1: config 11 interface 112 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 111.014740][ T62] usb 7-1: config 11 interface 112 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 111.014755][ T62] usb 7-1: config 11 interface 112 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 111.014771][ T62] usb 7-1: config 11 interface 112 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 111.014786][ T62] usb 7-1: config 11 interface 112 altsetting 128 has 11 endpoint descriptors, different from the interface descriptor's value: 15 [ 111.014806][ T62] usb 7-1: too many endpoints for config 11 interface 20 altsetting 154: 33, using maximum allowed: 30 [ 111.014831][ T62] usb 7-1: config 11 interface 20 altsetting 154 has a duplicate endpoint with address 0xE, skipping [ 111.014847][ T62] usb 7-1: config 11 interface 20 altsetting 154 has an invalid descriptor for endpoint zero, skipping [ 111.014861][ T62] usb 7-1: config 11 interface 20 altsetting 154 has a duplicate endpoint with address 0x9, skipping [ 111.014877][ T62] usb 7-1: config 11 interface 20 altsetting 154 has 4 endpoint descriptors, different from the interface descriptor's value: 33 [ 111.014896][ T62] usb 7-1: config 11 interface 142 has no altsetting 0 [ 111.014909][ T62] usb 7-1: config 11 interface 123 has no altsetting 0 [ 111.014922][ T62] usb 7-1: config 11 interface 182 has no altsetting 0 [ 111.014934][ T62] usb 7-1: config 11 interface 112 has no altsetting 0 [ 111.014947][ T62] usb 7-1: config 11 interface 20 has no altsetting 0 [ 111.016596][ T62] usb 7-1: New USB device found, idVendor=05c6, idProduct=9201, bcdDevice=fe.34 [ 111.016610][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.016620][ T62] usb 7-1: Manufacturer: à°‡ [ 111.016627][ T62] usb 7-1: SerialNumber: ꂆ踖载즑뿯ݷí‹ã®»â«·îŠ³è«žë„ è©… [ 111.024130][ T9800] xt_hashlimit: size too large, truncated to 1048576 [ 111.171705][ T5945] Bluetooth: Unexpected continuation frame (len 12) [ 111.451563][ T62] usbhid 7-1:11.20: couldn't find an input interrupt endpoint [ 111.457535][ T62] usb 7-1: USB disconnect, device number 5 [ 112.108381][ T9827] Cannot find del_set index 4 as target [ 112.196827][ T9841] gre0: Master is either lo or non-ether device [ 112.309826][ T9852] fuse: Unknown parameter 'group_i00000000000000000000' [ 112.343819][ T39] audit: type=1400 audit(1736226780.970:480): avc: denied { write } for pid=9855 comm="syz.3.1420" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.350456][ T39] audit: type=1400 audit(1736226780.970:481): avc: denied { open } for pid=9855 comm="syz.3.1420" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.351702][ T9858] xt_hashlimit: size too large, truncated to 1048576 [ 112.360097][ T39] audit: type=1400 audit(1736226780.970:482): avc: denied { ioctl } for pid=9855 comm="syz.3.1420" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 112.367075][ T9856] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 112.483343][ T9863] overlay: Unknown parameter ':' [ 112.486319][ T39] audit: type=1400 audit(1736226781.110:483): avc: denied { mounton } for pid=9861 comm="syz.2.1422" path="/322/file0" dev="hugetlbfs" ino=31401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 112.510760][ T9865] xt_cluster: node mask cannot exceed total number of nodes [ 112.947684][ T39] audit: type=1400 audit(1736226781.570:484): avc: denied { create } for pid=9879 comm="syz.4.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.960627][ T39] audit: type=1400 audit(1736226781.580:485): avc: denied { write } for pid=9879 comm="syz.4.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.999001][ T39] audit: type=1400 audit(1736226781.620:486): avc: denied { connect } for pid=9879 comm="syz.4.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.026239][ T9890] fuse: Unknown parameter 'group_i00000000000000000000' [ 113.209809][ T9900] gre0: Master is either lo or non-ether device [ 113.263676][ T9904] netlink: 'syz.3.1434': attribute type 29 has an invalid length. [ 113.267502][ T9904] netlink: 'syz.3.1434': attribute type 29 has an invalid length. [ 113.272192][ T9904] netlink: 'syz.3.1434': attribute type 29 has an invalid length. [ 113.276165][ T9904] netlink: 'syz.3.1434': attribute type 29 has an invalid length. [ 113.296471][ T9906] syz.2.1435: attempt to access beyond end of device [ 113.296471][ T9906] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 113.300094][ T9906] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 113.389817][ T9914] fuse: Unknown parameter 'group_i00000000000000000000' [ 113.806161][ T9922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9922 comm=syz.3.1442 [ 113.920286][ T9939] fuse: Unknown parameter '184467440737095516150x0000000000000007' [ 113.928621][ T9939] input: syz0 as /devices/virtual/input/input14 [ 113.967589][ T9939] input: syz1 as /devices/virtual/input/input15 [ 114.062803][ T9951] fuse: Unknown parameter 'group_id00000000000000000000' [ 114.155422][ T9957] program syz.3.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.300696][ T9978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=9978 comm=syz.3.1463 [ 114.404141][ T39] audit: type=1400 audit(1736226783.030:487): avc: denied { setopt } for pid=9998 comm="syz.3.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.433337][T10009] fuse: Bad value for 'fd' [ 114.449850][T10013] gre0: Master is either lo or non-ether device [ 114.531561][ T39] audit: type=1400 audit(1736226783.150:488): avc: denied { write } for pid=10022 comm="syz.1.1478" name="mcfilter" dev="proc" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.642570][T10039] input: syz0 as /devices/virtual/input/input16 [ 114.675230][T10043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10043 comm=syz.1.1486 [ 114.861768][T10068] gre0: Master is either lo or non-ether device [ 114.977095][T10083] ipvlan12: entered promiscuous mode [ 114.986329][T10083] binder: 10082:10083 ioctl c0306201 20000480 returned -22 [ 115.121278][T10094] __nla_validate_parse: 31 callbacks suppressed [ 115.121293][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 115.127481][T10094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'. [ 115.130744][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 115.134134][T10094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 115.144598][ T39] audit: type=1400 audit(1736226783.770:489): avc: denied { write } for pid=10095 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.161262][T10098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10098 comm=syz.4.1508 [ 115.490986][T10127] ip6t_rpfilter: unknown options [ 115.521391][ T39] audit: type=1400 audit(1736226784.140:490): avc: denied { ioctl } for pid=10118 comm="syz.2.1516" path="/333/file0/file0" dev="9p" ino=36575036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.536856][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 115.540335][T10133] gre0: Master is either lo or non-ether device [ 115.694756][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 115.726842][T10145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10145 comm=syz.3.1529 [ 116.277112][T10169] fuse: Bad value for 'user_id' [ 116.279135][T10169] fuse: Bad value for 'user_id' [ 116.357401][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 116.370055][T10178] Cannot find add_set index 1 as target [ 116.469831][T10190] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 116.688850][ T39] audit: type=1400 audit(1736226785.310:491): avc: denied { connect } for pid=10213 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.732626][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 116.735413][T10218] gre0: Master is either lo or non-ether device [ 117.034237][T10227] fuse: Bad value for 'user_id' [ 117.036218][T10227] fuse: Bad value for 'user_id' [ 117.072588][T10229] Cannot find add_set index 1 as target [ 117.105908][T10231] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1563'. [ 117.363595][T10239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10239 comm=syz.1.1565 [ 117.560525][T10250] sctp: [Deprecated]: syz.4.1570 (pid 10250) Use of int in maxseg socket option. [ 117.560525][T10250] Use struct sctp_assoc_value instead [ 117.735268][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 118.222193][ T39] audit: type=1400 audit(1736226786.850:492): avc: denied { accept } for pid=10271 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 118.444456][ T39] audit: type=1400 audit(1736226787.070:493): avc: denied { setopt } for pid=10276 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.505586][T10280] Cannot find del_set index 4 as target [ 118.534425][ T39] audit: type=1400 audit(1736226787.160:494): avc: denied { append } for pid=10282 comm="syz.2.1583" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.534753][T10284] autofs4:pid:10284:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 118.535603][T10283] xt_hashlimit: size too large, truncated to 1048576 [ 118.543590][ T39] audit: type=1400 audit(1736226787.160:495): avc: denied { ioctl } for pid=10282 comm="syz.2.1583" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.089820][ T39] audit: type=1400 audit(1736226787.710:496): avc: denied { read } for pid=10308 comm="syz.1.1593" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.224436][T10319] fuse: Bad value for 'fd' [ 119.269753][ T1327] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz1 [ 119.451051][T10337] Cannot find add_set index 1 as target [ 119.477755][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 119.477770][ T39] audit: type=1400 audit(1736226788.100:498): avc: denied { read write } for pid=10339 comm="syz.4.1606" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.490873][ T39] audit: type=1400 audit(1736226788.100:499): avc: denied { open } for pid=10339 comm="syz.4.1606" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 119.515650][T10342] fuse: Bad value for 'fd' [ 119.622945][T10349] gre0: Master is either lo or non-ether device [ 119.787874][T10362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10362 comm=syz.3.1615 [ 119.815597][T10364] fuse: Bad value for 'fd' [ 119.938606][T10381] openvswitch: netlink: IP tunnel dst address not specified [ 119.943677][ T39] audit: type=1400 audit(1736226788.570:500): avc: denied { read } for pid=10380 comm="syz.4.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.046673][ T39] audit: type=1326 audit(1736226788.670:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10390 comm="syz.4.1628" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff94f785d29 code=0x0 [ 120.298553][T10396] Cannot find add_set index 1 as target [ 120.386074][T10402] __nla_validate_parse: 11 callbacks suppressed [ 120.386084][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 120.392253][T10402] xt_hashlimit: size too large, truncated to 1048576 [ 120.909630][T10411] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 120.936733][T10411] syzkaller0: entered promiscuous mode [ 120.938289][T10411] syzkaller0: entered allmulticast mode [ 121.110428][T10424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1641'. [ 121.509103][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 121.522435][T10437] xt_hashlimit: size too large, truncated to 1048576 [ 122.123354][T10450] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.265564][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 122.268963][T10467] xt_hashlimit: size too large, truncated to 1048576 [ 122.424500][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 122.427311][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 122.485824][ T1327] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 122.488045][ T1327] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 122.493209][ T1327] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.05 Device [syz0] on syz1 [ 122.545865][ T39] audit: type=1400 audit(1736226791.170:502): avc: denied { setopt } for pid=10484 comm="syz.4.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 123.047884][T10497] fuse: Bad value for 'rootmode' [ 123.226905][T10511] xt_hashlimit: size too large, truncated to 1048576 [ 123.263187][ T39] audit: type=1400 audit(1736226791.890:503): avc: denied { accept } for pid=10512 comm="syz.1.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.273971][T10513] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1672'. [ 123.280946][T10513] fuse: Bad value for 'fd' [ 123.654634][ T39] audit: type=1400 audit(1736226792.280:504): avc: denied { ioctl } for pid=10529 comm="syz.1.1677" path="socket:[37903]" dev="sockfs" ino=37903 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.663398][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 123.664282][ T39] audit: type=1400 audit(1736226792.290:505): avc: denied { getopt } for pid=10529 comm="syz.1.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.676150][ T39] audit: type=1400 audit(1736226792.290:506): avc: denied { setattr } for pid=10529 comm="syz.1.1677" name="SCTP" dev="sockfs" ino=37900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.713930][T10534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1679'. [ 123.716613][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1679'. [ 123.784514][T10540] fuse: Bad value for 'rootmode' [ 123.890750][T10548] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 123.892605][T10548] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.895934][T10548] vhci_hcd vhci_hcd.0: Device attached [ 124.071760][ T62] vhci_hcd: vhci_device speed not set [ 124.131721][ T62] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 124.329585][ T39] audit: type=1400 audit(1736226792.950:507): avc: denied { ioctl } for pid=10559 comm="syz.3.1689" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.645302][T10578] openvswitch: netlink: IP tunnel attribute has 7 unknown bytes. [ 124.683528][T10583] xt_hashlimit: size too large, truncated to 1048576 [ 124.841713][T10592] gre0: Master is either lo or non-ether device [ 125.466342][T10635] fuse: Unknown parameter 'use00000000000000000000' [ 125.510444][T10637] xt_hashlimit: size too large, truncated to 1048576 [ 125.568782][T10641] gtp0: entered allmulticast mode [ 125.700661][T10644] __nla_validate_parse: 10 callbacks suppressed [ 125.700679][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 125.707281][T10644] gre0: Master is either lo or non-ether device [ 125.782776][ T39] audit: type=1400 audit(1736226794.410:508): avc: denied { read } for pid=10647 comm="syz.4.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.827061][ T39] audit: type=1400 audit(1736226794.450:509): avc: denied { write } for pid=10650 comm="syz.4.1720" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 125.967056][T10658] fuse: Unknown parameter 'use00000000000000000000' [ 126.033823][T10662] VFS: unable to find oldfs superblock on device nullb0 [ 126.186292][T10670] FAULT_INJECTION: forcing a failure. [ 126.186292][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 126.189652][T10670] CPU: 1 UID: 0 PID: 10670 Comm: syz.3.1727 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 126.192491][T10670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.196173][T10670] Call Trace: [ 126.197433][T10670] [ 126.198494][T10670] dump_stack_lvl+0x16c/0x1f0 [ 126.200310][T10670] should_fail_ex+0x497/0x5b0 [ 126.202097][T10670] ? fs_reclaim_acquire+0xae/0x150 [ 126.203932][T10670] should_failslab+0xc2/0x120 [ 126.205447][T10670] __kmalloc_noprof+0xcb/0x510 [ 126.206733][T10670] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 126.208246][T10670] tomoyo_realpath_from_path+0xb9/0x720 [ 126.209745][T10670] ? tomoyo_path_number_perm+0x235/0x590 [ 126.211333][T10670] ? tomoyo_path_number_perm+0x235/0x590 [ 126.213269][T10670] tomoyo_path_number_perm+0x248/0x590 [ 126.215290][T10670] ? tomoyo_path_number_perm+0x235/0x590 [ 126.217374][T10670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.219707][T10670] ? __pfx_lock_release+0x10/0x10 [ 126.221579][T10670] ? trace_lock_acquire+0x14e/0x1f0 [ 126.223536][T10670] ? lock_acquire+0x2f/0xb0 [ 126.225235][T10670] ? __fget_files+0x40/0x3a0 [ 126.226975][T10670] ? __fget_files+0x206/0x3a0 [ 126.228622][T10670] security_file_ioctl+0x9b/0x240 [ 126.230289][T10670] __x64_sys_ioctl+0xb7/0x200 [ 126.231548][T10670] do_syscall_64+0xcd/0x250 [ 126.232947][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.235100][T10670] RIP: 0033:0x7f9afa785d29 [ 126.236753][T10670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.242351][T10670] RSP: 002b:00007f9afb5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.244601][T10670] RAX: ffffffffffffffda RBX: 00007f9afa975fa0 RCX: 00007f9afa785d29 [ 126.246663][T10670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 126.249387][T10670] RBP: 00007f9afb5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 126.251945][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.254524][T10670] R13: 0000000000000000 R14: 00007f9afa975fa0 R15: 00007fff8df6e918 [ 126.256628][T10670] [ 126.258768][T10670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.746800][T10688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=10688 comm=syz.3.1733 [ 126.785703][T10692] xt_hashlimit: size too large, truncated to 1048576 [ 126.892632][T10549] vhci_hcd: connection reset by peer [ 126.903104][ T1175] vhci_hcd: stop threads [ 126.905975][ T1175] vhci_hcd: release socket [ 126.909636][ T1175] vhci_hcd: disconnect device [ 126.911469][T10699] fuse: Unknown parameter 'user_i00000000000000000000' [ 126.920606][T10701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1738'. [ 126.923738][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1738'. [ 126.926323][T10701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1738'. [ 126.928961][T10701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1738'. [ 126.940157][T10704] macvlan1: entered promiscuous mode [ 126.948676][T10702] macvlan1: left promiscuous mode [ 127.003247][T10712] FAULT_INJECTION: forcing a failure. [ 127.003247][T10712] name failslab, interval 1, probability 0, space 0, times 0 [ 127.007343][T10712] CPU: 0 UID: 0 PID: 10712 Comm: syz.2.1743 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 127.010485][T10712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.013683][T10712] Call Trace: [ 127.014671][T10712] [ 127.015552][T10712] dump_stack_lvl+0x16c/0x1f0 [ 127.017175][T10712] should_fail_ex+0x497/0x5b0 [ 127.018575][T10712] ? fs_reclaim_acquire+0xae/0x150 [ 127.020084][T10712] should_failslab+0xc2/0x120 [ 127.021479][T10712] __kmalloc_noprof+0xcb/0x510 [ 127.022888][T10712] ? rcu_is_watching+0x12/0xc0 [ 127.024481][T10712] tomoyo_encode2+0x100/0x3e0 [ 127.025868][T10712] tomoyo_encode+0x29/0x50 [ 127.027482][T10712] tomoyo_realpath_from_path+0x19d/0x720 [ 127.029655][T10712] ? tomoyo_path_number_perm+0x235/0x590 [ 127.031794][T10712] tomoyo_path_number_perm+0x248/0x590 [ 127.033451][T10712] ? tomoyo_path_number_perm+0x235/0x590 [ 127.035103][T10712] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.036925][T10712] ? __pfx_lock_release+0x10/0x10 [ 127.039274][T10712] ? trace_lock_acquire+0x14e/0x1f0 [ 127.039297][T10712] ? lock_acquire+0x2f/0xb0 [ 127.039312][T10712] ? __fget_files+0x40/0x3a0 [ 127.039325][T10712] ? __fget_files+0x206/0x3a0 [ 127.039337][T10712] security_file_ioctl+0x9b/0x240 [ 127.041730][ T39] audit: type=1400 audit(1736226795.630:510): avc: denied { map } for pid=10714 comm="syz.4.1744" path="socket:[37485]" dev="sockfs" ino=37485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 127.042883][T10712] __x64_sys_ioctl+0xb7/0x200 [ 127.044350][ T39] audit: type=1400 audit(1736226795.630:511): avc: denied { ioctl } for pid=10714 comm="syz.4.1744" path="socket:[37491]" dev="sockfs" ino=37491 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.045676][T10712] do_syscall_64+0xcd/0x250 [ 127.045697][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.066175][T10712] RIP: 0033:0x7fd8b9185d29 [ 127.066190][T10712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.066199][T10712] RSP: 002b:00007fd8ba06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.066211][T10712] RAX: ffffffffffffffda RBX: 00007fd8b9375fa0 RCX: 00007fd8b9185d29 [ 127.066218][T10712] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 127.066224][T10712] RBP: 00007fd8ba06f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.066230][T10712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.066236][T10712] R13: 0000000000000000 R14: 00007fd8b9375fa0 R15: 00007ffc37a346b8 [ 127.066249][T10712] [ 127.066349][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.066676][T10712] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.251806][ T39] audit: type=1400 audit(1736226795.880:512): avc: denied { shutdown } for pid=10720 comm="syz.4.1747" faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 129.222518][ T62] vhci_hcd: vhci_device speed not set [ 132.754757][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.397182][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 137.397705][T10735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1751'. [ 137.400538][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 137.403176][T10735] netlink: 'syz.1.1751': attribute type 7 has an invalid length. [ 137.403188][T10735] netlink: 'syz.1.1751': attribute type 8 has an invalid length. [ 137.403195][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 137.419803][T10735] erspan0: entered promiscuous mode [ 137.421965][T10735] erspan0: left promiscuous mode [ 137.431938][T10736] gretap0: entered promiscuous mode [ 137.434800][T10736] batadv_slave_1: entered promiscuous mode [ 137.436017][T10739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10739 comm=syz.4.1750 [ 137.441115][T10736] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 137.445180][T10736] Cannot create hsr debugfs directory [ 137.457459][ T39] audit: type=1400 audit(1736226806.080:513): avc: denied { ioctl } for pid=10733 comm="syz.2.1752" path="socket:[37507]" dev="sockfs" ino=37507 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 137.493893][T10748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1755'. [ 137.496485][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 137.499108][T10748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1755'. [ 137.501975][T10748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1755'. [ 137.570702][T10758] Cannot find add_set index 1 as target [ 137.612370][T10765] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 137.614947][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.713545][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1764'. [ 137.716245][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1764'. [ 137.720778][T10773] gretap0: entered promiscuous mode [ 137.723886][T10773] batadv_slave_1: entered promiscuous mode [ 137.726132][T10773] hsr2: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 137.776078][T10779] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 137.777928][T10779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.780519][T10779] vhci_hcd vhci_hcd.0: Device attached [ 137.948002][ T39] audit: type=1400 audit(1736226806.570:514): avc: denied { write } for pid=10788 comm="syz.1.1773" name="map_files" dev="proc" ino=39414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.950096][T10789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.957334][ T30] vhci_hcd: vhci_device speed not set [ 137.962070][ T39] audit: type=1400 audit(1736226806.570:515): avc: denied { add_name } for pid=10788 comm="syz.1.1773" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.968918][ T39] audit: type=1400 audit(1736226806.570:516): avc: denied { create } for pid=10788 comm="syz.1.1773" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 137.976339][ T39] audit: type=1400 audit(1736226806.570:517): avc: denied { associate } for pid=10788 comm="syz.1.1773" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 138.021638][ T5999] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 138.024179][ T30] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 138.274781][ T5999] usb 7-1: config 0 has no interfaces? [ 138.276555][ T5999] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.280143][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.295139][ T5999] usb 7-1: config 0 descriptor?? [ 138.520488][ T2114] usb 7-1: USB disconnect, device number 6 [ 138.534142][T10780] vhci_hcd: connection reset by peer [ 138.536721][ T8263] vhci_hcd: stop threads [ 138.538237][ T8263] vhci_hcd: release socket [ 138.540083][ T8263] vhci_hcd: disconnect device [ 138.600985][ T30] vhci_hcd: vhci_device speed not set [ 138.763533][T10811] gretap0: entered promiscuous mode [ 138.766377][T10811] batadv_slave_1: entered promiscuous mode [ 138.769273][T10811] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 138.772957][T10811] Cannot create hsr debugfs directory [ 138.863842][T10816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10816 comm=syz.3.1779 [ 138.928431][ T39] audit: type=1400 audit(1736226807.550:518): avc: denied { getopt } for pid=10824 comm="syz.1.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.131332][T10842] openvswitch: netlink: Flow key attr not present in new flow. [ 139.205281][T10846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10846 comm=syz.2.1791 [ 139.212006][ T39] audit: type=1400 audit(1736226807.840:519): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.217924][ T39] audit: type=1400 audit(1736226807.840:520): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.224422][ T39] audit: type=1400 audit(1736226807.840:521): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.339353][ T39] audit: type=1400 audit(1736226807.960:522): avc: denied { getattr } for pid=10856 comm="syz.2.1795" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.791238][T10871] fuse: Unknown parameter 'fd0x0000000000000004' [ 139.793346][T10869] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 139.795776][T10869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.798692][T10869] vhci_hcd vhci_hcd.0: Device attached [ 139.845290][T10879] loop8: detected capacity change from 0 to 7 [ 139.849141][T10879] Dev loop8: unable to read RDB block 7 [ 139.850799][T10879] loop8: AHDI p1 p3 p4 [ 139.852289][T10879] loop8: partition table partially beyond EOD, truncated [ 139.854426][T10879] loop8: p1 start 975770946 is beyond EOD, truncated [ 139.856373][T10879] loop8: p3 start 6514546 is beyond EOD, truncated [ 139.868291][T10879] infiniband syz1: set active [ 139.869970][T10879] infiniband syz1: set active [ 139.875260][T10879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.901269][T10879] syzkaller0: entered promiscuous mode [ 139.904215][T10879] syzkaller0: entered allmulticast mode [ 139.905128][T10887] Cannot find add_set index 1 as target [ 139.971623][ T1018] vhci_hcd: vhci_device speed not set [ 139.974566][T10893] fuse: Unknown parameter 'fd0x0000000000000004' [ 140.031657][ T1018] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 140.051603][ T6362] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 140.212811][ T6362] usb 8-1: config 0 has no interfaces? [ 140.214439][ T6362] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.217198][ T6362] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.235042][ T6362] usb 8-1: config 0 descriptor?? [ 140.439302][ T6362] usb 8-1: USB disconnect, device number 4 [ 140.445028][T10872] vhci_hcd: connection reset by peer [ 140.452044][ T8263] vhci_hcd: stop threads [ 140.455381][ T8263] vhci_hcd: release socket [ 140.456825][ T8263] vhci_hcd: disconnect device [ 140.511672][ T1018] vhci_hcd: vhci_device speed not set [ 141.119623][T10917] fuse: Unknown parameter 'fd0x0000000000000004' [ 141.154414][T10919] 9pnet_fd: Insufficient options for proto=fd [ 141.174574][T10922] gre0: Master is either lo or non-ether device [ 141.227732][T10925] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 141.229693][T10925] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 141.232579][T10925] vhci_hcd vhci_hcd.0: Device attached [ 141.298733][T10941] FAULT_INJECTION: forcing a failure. [ 141.298733][T10941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.306178][T10941] CPU: 2 UID: 0 PID: 10941 Comm: syz.2.1828 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 141.309306][T10941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.312424][T10941] Call Trace: [ 141.313402][T10941] [ 141.314259][T10941] dump_stack_lvl+0x16c/0x1f0 [ 141.315592][T10941] should_fail_ex+0x497/0x5b0 [ 141.316970][T10941] _copy_from_user+0x2e/0xd0 [ 141.318260][T10941] copy_msghdr_from_user+0x99/0x160 [ 141.319785][T10941] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 141.321487][T10941] ___sys_sendmsg+0xff/0x1e0 [ 141.322834][T10941] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.324352][T10941] ? __pfx_lock_release+0x10/0x10 [ 141.325813][T10941] ? trace_lock_acquire+0x14e/0x1f0 [ 141.327355][T10941] ? __fget_files+0x206/0x3a0 [ 141.328735][T10941] __sys_sendmsg+0x16e/0x220 [ 141.330083][T10941] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.331578][T10941] do_syscall_64+0xcd/0x250 [ 141.332908][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.334619][T10941] RIP: 0033:0x7fd8b9185d29 [ 141.335919][T10941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.341424][T10941] RSP: 002b:00007fd8ba06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.343837][T10941] RAX: ffffffffffffffda RBX: 00007fd8b9375fa0 RCX: 00007fd8b9185d29 [ 141.346120][T10941] RDX: 00000000040000d0 RSI: 00000000200001c0 RDI: 0000000000000003 [ 141.348415][T10941] RBP: 00007fd8ba06f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.350688][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.353201][T10941] R13: 0000000000000000 R14: 00007fd8b9375fa0 R15: 00007ffc37a346b8 [ 141.355485][T10941] [ 141.421647][ T832] vhci_hcd: vhci_device speed not set [ 141.481636][ T5927] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 141.484329][ T832] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 141.634195][ T5927] usb 9-1: config 0 has no interfaces? [ 141.636385][ T5927] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.639737][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.645433][ T5927] usb 9-1: config 0 descriptor?? [ 141.850029][ T5927] usb 9-1: USB disconnect, device number 3 [ 141.854146][T10929] vhci_hcd: connection reset by peer [ 141.863225][ T1141] vhci_hcd: stop threads [ 141.864551][ T1141] vhci_hcd: release socket [ 141.865976][ T1141] vhci_hcd: disconnect device [ 142.404629][T10975] __nla_validate_parse: 10 callbacks suppressed [ 142.404641][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1841'. [ 142.470438][T10982] Cannot find del_set index 4 as target [ 142.734421][T10989] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1847'. [ 142.747549][T10989] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 142.749496][T10989] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.752983][T10989] vhci_hcd vhci_hcd.0: Device attached [ 142.755300][T10990] vhci_hcd: connection closed [ 142.755866][ T8264] vhci_hcd: stop threads [ 142.759223][ T8264] vhci_hcd: release socket [ 142.761075][ T8264] vhci_hcd: disconnect device [ 143.287864][T11005] xt_hashlimit: size too large, truncated to 1048576 [ 143.374808][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 143.378467][T11018] gre0: Master is either lo or non-ether device [ 143.438383][T11023] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.460179][ T39] audit: type=1400 audit(1736226812.080:523): avc: denied { unmount } for pid=6628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 143.487614][T11025] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1860'. [ 143.664043][T11042] ebt_among: src integrity fail: 100 [ 143.826045][T11050] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1871'. [ 143.880296][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.883243][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.885275][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.887238][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.889336][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.891382][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.893553][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.895638][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.897690][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.899784][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.902383][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.904398][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.906366][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.908341][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.910326][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.912828][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.914792][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.916776][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.918739][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.920727][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.922795][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.924782][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.926758][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.928725][T11054] kAFS: Can only specify source 'none' with -o dyn [ 143.930702][T11054] kAFS: unparsable volume name [ 143.932305][T11054] kAFS: unparsable volume name [ 143.933778][T11054] kAFS: unparsable volume name [ 143.935251][T11054] kAFS: unparsable volume name [ 143.936743][T11054] kAFS: unparsable volume name [ 143.938216][T11054] kAFS: unparsable volume name [ 143.939729][T11054] kAFS: unparsable volume name [ 143.941202][T11054] kAFS: unparsable volume name [ 144.134499][ T39] audit: type=1400 audit(1736226812.760:524): avc: denied { load_policy } for pid=11063 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 144.134872][T11064] SELinux: policydb version 994234538 does not match my version range 15-33 [ 144.146706][T11064] SELinux: failed to load policy [ 144.210953][T11069] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1878'. [ 144.214204][T11071] xt_hashlimit: size too large, truncated to 1048576 [ 144.245636][T11074] Cannot find del_set index 4 as target [ 144.274847][T11077] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1881'. [ 144.522918][ T39] audit: type=1400 audit(1736226813.150:525): avc: denied { audit_read } for pid=11087 comm="syz.4.1885" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.751747][T11099] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1890'. [ 144.868661][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 144.871298][T11112] gre0: Master is either lo or non-ether device [ 145.330952][T11127] xt_hashlimit: size too large, truncated to 1048576 [ 145.535146][T11133] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1901'. [ 145.594392][T11138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11138 comm=syz.4.1903 [ 145.695310][ T39] audit: type=1400 audit(1736226814.320:526): avc: denied { map } for pid=11142 comm="syz.3.1905" path="socket:[40594]" dev="sockfs" ino=40594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 146.407010][T11178] Cannot find del_set index 4 as target [ 146.602148][ T832] vhci_hcd: vhci_device speed not set [ 146.931027][T11192] loop9: detected capacity change from 0 to 7 [ 146.935833][T11192] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 146.937535][T11192] loop9: partition table partially beyond EOD, truncated [ 146.940674][T11192] loop9: p1 size 501170297 extends beyond EOD, truncated [ 146.946136][T11192] cgroup: No subsys list or none specified [ 146.987448][T11194] xt_hashlimit: size too large, truncated to 1048576 [ 147.033616][T11199] gre0: Master is either lo or non-ether device [ 147.240732][T11218] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 [ 147.249481][ T39] audit: type=1400 audit(1736226815.870:527): avc: denied { bind } for pid=11214 comm="syz.3.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.645324][T11227] __nla_validate_parse: 8 callbacks suppressed [ 147.645336][T11227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'. [ 147.942815][T11241] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1940'. [ 148.138646][T11250] xt_hashlimit: size too large, truncated to 1048576 [ 148.724475][T11264] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1949'. [ 148.795105][T11269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1951'. [ 148.846036][T11274] Cannot find del_set index 4 as target [ 148.919143][ T39] audit: type=1400 audit(1736226817.540:528): avc: denied { bind } for pid=11277 comm="syz.2.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.970177][T11283] xt_hashlimit: size too large, truncated to 1048576 [ 149.034235][T11287] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1958'. [ 149.099104][T11291] rdma_rxe: rxe_newlink: failed to add syz_tun [ 149.568034][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'. [ 149.570803][T11306] gre0: Master is either lo or non-ether device [ 149.634964][T11310] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1968'. [ 149.752678][T11317] netlink: 'syz.4.1971': attribute type 16 has an invalid length. [ 149.754961][T11317] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1971'. [ 150.002649][T11332] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1977'. [ 150.674504][ T39] audit: type=1400 audit(1736226819.300:529): avc: denied { append } for pid=11352 comm="syz.4.1980" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 150.813268][T11364] xt_hashlimit: size too large, truncated to 1048576 [ 150.831043][T11366] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1986'. [ 150.832477][ T39] audit: type=1400 audit(1736226819.460:530): avc: denied { module_request } for pid=11363 comm="syz.4.1985" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 151.192419][T11381] Cannot find add_set index 1 as target [ 151.551572][ T5942] Bluetooth: hci3: command 0x206a tx timeout [ 151.551609][ T5945] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 151.853109][T11402] gre0: Master is either lo or non-ether device [ 151.866248][T11405] kAFS: No cell specified [ 151.977221][T11419] xt_hashlimit: size too large, truncated to 1048576 [ 152.239202][T11436] Cannot find add_set index 4 as target [ 153.166488][T11470] __nla_validate_parse: 6 callbacks suppressed [ 153.166500][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 153.171106][T11470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 153.177212][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 153.208718][T11480] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2024'. [ 153.252126][T11484] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2026'. [ 153.278869][T11486] xt_hashlimit: size too large, truncated to 1048576 [ 153.283922][T11489] Cannot find del_set index 4 as target [ 154.359852][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 154.362908][T11525] gre0: Master is either lo or non-ether device [ 155.023826][T11541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2048'. [ 155.051791][T11543] xt_hashlimit: size too large, truncated to 1048576 [ 155.418314][ T39] audit: type=1400 audit(1736226824.040:531): avc: denied { create } for pid=11571 comm="syz.2.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.425029][T11572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2059'. [ 155.429201][ T39] audit: type=1400 audit(1736226824.050:532): avc: denied { setopt } for pid=11571 comm="syz.2.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.606091][T11577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2061'. [ 155.645784][ T39] audit: type=1400 audit(1736226824.270:533): avc: denied { ioctl } for pid=11580 comm="syz.2.2063" path="socket:[43275]" dev="sockfs" ino=43275 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.670234][T11583] Cannot find del_set index 4 as target [ 156.216445][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 156.219899][T11608] gre0: Master is either lo or non-ether device [ 156.479496][ T39] audit: type=1400 audit(1736226825.100:534): avc: denied { mounton } for pid=11621 comm="syz.4.2081" path="/537/file0/file0" dev="bpf" ino=41673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 156.481426][T11622] overlay: ./file0 is not a directory [ 156.486135][ T39] audit: type=1400 audit(1736226825.100:535): avc: denied { mounton } for pid=11621 comm="syz.4.2081" path="/537/file0/bus" dev="bpf" ino=41675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 156.497273][ T39] audit: type=1400 audit(1736226825.120:536): avc: denied { append } for pid=11621 comm="syz.4.2081" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 156.511273][ T39] audit: type=1400 audit(1736226825.130:537): avc: denied { unmount } for pid=6628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 156.548548][T11629] serio: Serial port ptm0 [ 156.710229][T11643] xt_hashlimit: size too large, truncated to 1048576 [ 156.764226][T11649] xt_hashlimit: size too large, truncated to 1048576 [ 156.815624][T11652] FAULT_INJECTION: forcing a failure. [ 156.815624][T11652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.820490][T11652] CPU: 3 UID: 0 PID: 11652 Comm: syz.1.2092 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 156.824538][T11652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.827696][T11652] Call Trace: [ 156.828675][T11652] [ 156.829549][T11652] dump_stack_lvl+0x16c/0x1f0 [ 156.830907][T11652] should_fail_ex+0x497/0x5b0 [ 156.832277][T11652] _copy_from_user+0x2e/0xd0 [ 156.833591][T11652] copy_msghdr_from_user+0x99/0x160 [ 156.835103][T11652] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.836980][T11652] ? __lock_acquire+0xcc5/0x3c40 [ 156.838979][T11652] ___sys_sendmsg+0xff/0x1e0 [ 156.840859][T11652] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.842920][T11652] ? trace_lock_acquire+0x14e/0x1f0 [ 156.844970][T11652] __sys_sendmmsg+0x201/0x420 [ 156.846564][T11652] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.848094][T11652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.849848][T11652] ? fput+0x67/0x440 [ 156.850996][T11652] ? ksys_write+0x1ba/0x250 [ 156.852322][T11652] ? __pfx_ksys_write+0x10/0x10 [ 156.853736][T11652] __x64_sys_sendmmsg+0x9c/0x100 [ 156.855159][T11652] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.856823][T11652] do_syscall_64+0xcd/0x250 [ 156.858685][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.861086][T11652] RIP: 0033:0x7f425f985d29 [ 156.862882][T11652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.869383][T11652] RSP: 002b:00007f426083f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.872695][T11652] RAX: ffffffffffffffda RBX: 00007f425fb76080 RCX: 00007f425f985d29 [ 156.875648][T11652] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 156.878664][T11652] RBP: 00007f426083f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.881707][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.884767][T11652] R13: 0000000000000000 R14: 00007f425fb76080 R15: 00007ffdb949e548 [ 156.887874][T11652] [ 156.889211][ C3] vkms_vblank_simulate: vblank timer overrun [ 157.187821][T11658] xt_hashlimit: size too large, truncated to 1048576 [ 157.291517][ T39] audit: type=1400 audit(1736226825.910:538): avc: denied { write } for pid=11663 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.807493][T11679] Cannot find del_set index 4 as target [ 158.580829][ T39] audit: type=1400 audit(1736226827.200:539): avc: denied { accept } for pid=11703 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.644928][ T39] audit: type=1400 audit(1736226827.270:540): avc: denied { setopt } for pid=11703 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 158.662147][T11713] __nla_validate_parse: 3 callbacks suppressed [ 158.662157][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 158.666907][T11713] gre0: Master is either lo or non-ether device [ 158.704671][T11715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.943817][T11733] block nbd4: NBD_DISCONNECT [ 158.946411][T11733] block nbd4: Send disconnect failed -89 [ 158.955115][T11729] block nbd4: Disconnected due to user request. [ 158.957764][T11729] block nbd4: shutting down sockets [ 158.979235][T11737] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2126'. [ 159.395631][T11756] xt_hashlimit: size too large, truncated to 1048576 [ 159.448403][T11758] FAULT_INJECTION: forcing a failure. [ 159.448403][T11758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.452211][T11758] CPU: 2 UID: 0 PID: 11758 Comm: syz.2.2133 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 159.455108][T11758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.458235][T11758] Call Trace: [ 159.459169][T11758] [ 159.459970][T11758] dump_stack_lvl+0x16c/0x1f0 [ 159.461283][T11758] should_fail_ex+0x497/0x5b0 [ 159.462655][T11758] _copy_from_user+0x2e/0xd0 [ 159.463982][T11758] move_addr_to_kernel+0x68/0x160 [ 159.465396][T11758] __copy_msghdr+0x386/0x470 [ 159.466756][T11758] copy_msghdr_from_user+0xc2/0x160 [ 159.468369][T11758] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.470243][T11758] ? __lock_acquire+0xcc5/0x3c40 [ 159.471679][T11758] ___sys_sendmsg+0xff/0x1e0 [ 159.473167][T11758] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.474677][T11758] ? trace_lock_acquire+0x14e/0x1f0 [ 159.476195][T11758] __sys_sendmmsg+0x201/0x420 [ 159.477741][T11758] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.479237][T11758] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.480867][T11758] ? fput+0x67/0x440 [ 159.481956][T11758] ? ksys_write+0x1ba/0x250 [ 159.483278][T11758] ? __pfx_ksys_write+0x10/0x10 [ 159.484657][T11758] __x64_sys_sendmmsg+0x9c/0x100 [ 159.486020][T11758] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.487659][T11758] do_syscall_64+0xcd/0x250 [ 159.489038][T11758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.490723][T11758] RIP: 0033:0x7fd8b9185d29 [ 159.492046][T11758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.497498][T11758] RSP: 002b:00007fd8ba04e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.499833][T11758] RAX: ffffffffffffffda RBX: 00007fd8b9376080 RCX: 00007fd8b9185d29 [ 159.502085][T11758] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 159.504364][T11758] RBP: 00007fd8ba04e090 R08: 0000000000000000 R09: 0000000000000000 [ 159.506674][T11758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.508871][T11758] R13: 0000000000000000 R14: 00007fd8b9376080 R15: 00007ffc37a346b8 [ 159.511151][T11758] [ 159.629391][T11764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2134'. [ 159.658491][T11767] xt_hashlimit: size too large, truncated to 1048576 [ 159.791934][T11776] xt_hashlimit: size too large, truncated to 1048576 [ 159.888407][T11781] Cannot find del_set index 4 as target [ 160.193184][T11792] netlink: 'syz.3.2145': attribute type 2 has an invalid length. [ 160.914398][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 160.914409][ T39] audit: type=1400 audit(1736226829.540:552): avc: denied { create } for pid=11813 comm="syz.4.2153" name="#1d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.922184][ T39] audit: type=1400 audit(1736226829.540:553): avc: denied { link } for pid=11813 comm="syz.4.2153" name="#1d" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.927897][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2154'. [ 160.930853][T11817] gre0: Master is either lo or non-ether device [ 160.931076][ T39] audit: type=1400 audit(1736226829.540:554): avc: denied { rename } for pid=11813 comm="syz.4.2153" name="#1e" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.820490][ T39] audit: type=1400 audit(1736226830.440:555): avc: denied { read } for pid=11855 comm="syz.1.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.881317][T11863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2171'. [ 161.984622][T11870] Cannot find add_set index 1 as target [ 162.006234][T11872] xt_hashlimit: size too large, truncated to 1048576 [ 162.058520][T11874] FAULT_INJECTION: forcing a failure. [ 162.058520][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 162.062343][T11874] CPU: 3 UID: 0 PID: 11874 Comm: syz.1.2175 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 162.065332][T11874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.068719][T11874] Call Trace: [ 162.069784][T11874] [ 162.070617][T11874] dump_stack_lvl+0x16c/0x1f0 [ 162.071963][T11874] should_fail_ex+0x497/0x5b0 [ 162.073389][T11874] ? fs_reclaim_acquire+0xae/0x150 [ 162.074804][T11874] should_failslab+0xc2/0x120 [ 162.076302][T11874] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 162.077983][T11874] ? hlock_class+0x4e/0x130 [ 162.079262][T11874] ? __alloc_skb+0x2b1/0x380 [ 162.080578][T11874] __alloc_skb+0x2b1/0x380 [ 162.081897][T11874] ? __pfx___alloc_skb+0x10/0x10 [ 162.083281][T11874] ? __pfx___lock_acquire+0x10/0x10 [ 162.084755][T11874] ? hlock_class+0x4e/0x130 [ 162.086091][T11874] ? __lock_acquire+0x15a9/0x3c40 [ 162.087617][T11874] __ip6_append_data.isra.0+0x2b2e/0x45e0 [ 162.089192][T11874] ? __pfx_raw6_getfrag+0x10/0x10 [ 162.090693][T11874] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 162.092359][T11874] ? ip6_mtu+0x231/0x4a0 [ 162.093551][T11874] ? ip6_setup_cork+0xc21/0x1460 [ 162.095060][T11874] ip6_append_data+0x1e6/0x500 [ 162.096401][T11874] ? __pfx_raw6_getfrag+0x10/0x10 [ 162.097865][T11874] rawv6_sendmsg+0x1584/0x4440 [ 162.099252][T11874] ? avc_has_perm_noaudit+0x119/0x3a0 [ 162.100768][T11874] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 162.102296][T11874] ? avc_has_perm_noaudit+0x143/0x3a0 [ 162.103811][T11874] ? avc_has_perm+0x11b/0x1c0 [ 162.105139][T11874] ? __pfx_avc_has_perm+0x10/0x10 [ 162.106726][T11874] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 162.108175][T11874] ? inet_sendmsg+0x119/0x140 [ 162.109506][T11874] inet_sendmsg+0x119/0x140 [ 162.110883][T11874] ____sys_sendmsg+0x98c/0xc90 [ 162.112246][T11874] ? copy_msghdr_from_user+0x10b/0x160 [ 162.113784][T11874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.115360][T11874] ? __lock_acquire+0xcc5/0x3c40 [ 162.116806][T11874] ___sys_sendmsg+0x135/0x1e0 [ 162.118176][T11874] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.119701][T11874] ? trace_lock_acquire+0x14e/0x1f0 [ 162.121222][T11874] __sys_sendmmsg+0x201/0x420 [ 162.122677][T11874] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.124151][T11874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.125879][T11874] ? fput+0x67/0x440 [ 162.127087][T11874] ? ksys_write+0x1ba/0x250 [ 162.128389][T11874] ? __pfx_ksys_write+0x10/0x10 [ 162.129746][T11874] __x64_sys_sendmmsg+0x9c/0x100 [ 162.131206][T11874] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.132672][T11874] do_syscall_64+0xcd/0x250 [ 162.133941][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.135726][T11874] RIP: 0033:0x7f425f985d29 [ 162.136982][T11874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.142280][T11874] RSP: 002b:00007f426083f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.144542][T11874] RAX: ffffffffffffffda RBX: 00007f425fb76080 RCX: 00007f425f985d29 [ 162.146792][T11874] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 162.149067][T11874] RBP: 00007f426083f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.151249][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.153454][T11874] R13: 0000000000000000 R14: 00007f425fb76080 R15: 00007ffdb949e548 [ 162.155665][T11874] [ 162.221585][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 162.340222][ T39] audit: type=1400 audit(1736226830.960:556): avc: denied { append } for pid=11887 comm="syz.3.2180" name="video5" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.374787][ T30] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 162.377408][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.379848][ T30] usb 7-1: Product: syz [ 162.381230][ T30] usb 7-1: Manufacturer: syz [ 162.382646][ T30] usb 7-1: SerialNumber: syz [ 162.385008][ T30] usb 7-1: config 0 descriptor?? [ 162.410616][T11892] FAULT_INJECTION: forcing a failure. [ 162.410616][T11892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.414524][T11892] CPU: 2 UID: 0 PID: 11892 Comm: syz.3.2182 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 162.417570][T11892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.420652][T11892] Call Trace: [ 162.421654][T11892] [ 162.422516][T11892] dump_stack_lvl+0x16c/0x1f0 [ 162.423978][T11892] should_fail_ex+0x497/0x5b0 [ 162.425336][T11892] _copy_from_user+0x2e/0xd0 [ 162.426702][T11892] move_addr_to_kernel+0x68/0x160 [ 162.428190][T11892] __sys_sendto+0x1ba/0x4f0 [ 162.429546][T11892] ? __pfx___sys_sendto+0x10/0x10 [ 162.430933][T11892] ? ksys_write+0x1ba/0x250 [ 162.432245][T11892] ? __pfx_ksys_write+0x10/0x10 [ 162.433614][T11892] __x64_sys_sendto+0xe0/0x1c0 [ 162.434966][T11892] ? do_syscall_64+0x91/0x250 [ 162.436319][T11892] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.437892][T11892] do_syscall_64+0xcd/0x250 [ 162.439136][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.440842][T11892] RIP: 0033:0x7f9afa785d29 [ 162.442068][T11892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.447569][T11892] RSP: 002b:00007f9afb5d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 162.449895][T11892] RAX: ffffffffffffffda RBX: 00007f9afa975fa0 RCX: 00007f9afa785d29 [ 162.452129][T11892] RDX: 0000000000000001 RSI: 00000000200008c0 RDI: 0000000000000004 [ 162.454402][T11892] RBP: 00007f9afb5d9090 R08: 0000000020000200 R09: 0000000000000014 [ 162.456850][T11892] R10: d0594848a1ff4ce4 R11: 0000000000000246 R12: 0000000000000001 [ 162.459161][T11892] R13: 0000000000000000 R14: 00007f9afa975fa0 R15: 00007fff8df6e918 [ 162.461515][T11892] [ 162.487539][T11894] xt_hashlimit: size too large, truncated to 1048576 [ 162.590155][T11868] vivid-000: ================= START STATUS ================= [ 162.592895][T11868] vivid-000: Radio HW Seek Mode: Bounded [ 162.594678][T11868] vivid-000: Radio Programmable HW Seek: false [ 162.596501][T11868] vivid-000: RDS Rx I/O Mode: Block I/O [ 162.598091][T11868] vivid-000: Generate RBDS Instead of RDS: false [ 162.599956][T11868] vivid-000: RDS Reception: true [ 162.601412][T11868] vivid-000: RDS Program Type: 0 inactive [ 162.604598][T11868] vivid-000: RDS PS Name: inactive [ 162.606166][T11868] vivid-000: RDS Radio Text: inactive [ 162.607788][T11868] vivid-000: RDS Traffic Announcement: false inactive [ 162.609700][T11868] vivid-000: RDS Traffic Program: false inactive [ 162.611618][T11868] vivid-000: RDS Music: false inactive [ 162.613313][T11868] vivid-000: ================== END STATUS ================== [ 162.617721][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.620884][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.624548][ T6362] usb 7-1: USB disconnect, device number 7 [ 163.425394][T11916] xt_hashlimit: size too large, truncated to 1048576 [ 163.477148][ T39] audit: type=1400 audit(1736226832.100:557): avc: denied { read write } for pid=11915 comm="syz.2.2190" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.489315][ T39] audit: type=1400 audit(1736226832.110:558): avc: denied { open } for pid=11915 comm="syz.2.2190" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.498017][ T39] audit: type=1400 audit(1736226832.110:559): avc: denied { ioctl } for pid=11915 comm="syz.2.2190" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.628546][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 163.631121][T11931] gre0: Master is either lo or non-ether device [ 164.019498][T11938] overlay: ./file1 is not a directory [ 164.725712][ T39] audit: type=1400 audit(1736226833.350:560): avc: denied { mounton } for pid=11974 comm="syz.1.2211" path="/565/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 164.968470][ T39] audit: type=1800 audit(1736226833.590:561): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2202" name="/" dev="fuse" ino=0 res=0 errno=0 [ 165.011006][T11988] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2214'. [ 165.436181][T11997] Cannot find del_set index 4 as target [ 165.480729][T11996] block device autoloading is deprecated and will be removed. [ 165.484410][T11996] syz.3.2217: attempt to access beyond end of device [ 165.484410][T11996] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 165.591863][T12003] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.596248][T12003] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 165.937900][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 165.937910][ T39] audit: type=1400 audit(1736226834.560:563): avc: denied { create } for pid=12012 comm="syz.1.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 165.952450][ T39] audit: type=1400 audit(1736226834.580:564): avc: denied { write } for pid=12012 comm="syz.1.2224" path="socket:[45266]" dev="sockfs" ino=45266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 165.959574][ T39] audit: type=1400 audit(1736226834.580:565): avc: denied { nlmsg_write } for pid=12012 comm="syz.1.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 165.981330][T12019] xt_hashlimit: size too large, truncated to 1048576 [ 166.561749][ T2114] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 166.731590][ T2114] usb 8-1: Using ep0 maxpacket: 8 [ 166.734275][ T2114] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.737447][ T2114] usb 8-1: config 179 has no interface number 0 [ 166.739906][ T2114] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.744196][ T2114] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.744407][T12046] xt_hashlimit: size too large, truncated to 1048576 [ 166.748066][ T2114] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 166.748082][ T2114] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.748095][ T2114] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.762537][ T2114] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.766228][ T2114] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.773601][T12030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.973549][T12050] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.987553][ T39] audit: type=1400 audit(1736226835.610:566): avc: denied { rmdir } for pid=12049 comm="syz.1.2237" name="file2" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.000461][ T2114] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input17 [ 167.128996][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 167.131939][T12060] gre0: Master is either lo or non-ether device [ 167.183707][ T30] usb 8-1: USB disconnect, device number 5 [ 167.183742][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.188548][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 167.189367][ T30] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 167.336160][T12081] xt_hashlimit: size too large, truncated to 1048576 [ 167.551641][ T5942] Bluetooth: hci5: command 0x0405 tx timeout [ 167.926184][T12100] tmpfs: Bad value for 'mpol' [ 167.942542][T12100] Attempt to restore checkpoint with obsolete wellknown handles [ 167.947202][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 167.980056][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.059962][T12105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2254'. [ 168.190731][T12114] Cannot find del_set index 4 as target [ 168.315971][ T39] audit: type=1400 audit(1736226836.940:567): avc: denied { mounton } for pid=12122 comm="syz.4.2261" path="/proc/1451/task" dev="proc" ino=46602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 169.147723][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 169.152568][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 169.197753][ T39] audit: type=1400 audit(1736226837.820:568): avc: denied { getopt } for pid=12145 comm="syz.2.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.210757][ T5950] Bluetooth: hci2: Malformed LE Event: 0x02 [ 169.249202][ T39] audit: type=1326 audit(1736226837.870:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.3.2271" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9afa785d29 code=0x0 [ 169.358188][T12153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12153 comm=syz.4.2272 [ 170.102616][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 170.105176][T12174] gre0: Master is either lo or non-ether device [ 170.200039][T12180] xt_hashlimit: size too large, truncated to 1048576 [ 170.443480][T12193] netlink: 696 bytes leftover after parsing attributes in process `syz.1.2289'. [ 170.497757][ T39] audit: type=1400 audit(1736226839.120:570): avc: denied { setopt } for pid=12194 comm="syz.1.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.502049][T12195] openvswitch: netlink: Flow key attr not present in new flow. [ 170.527327][T12200] input: syz0 as /devices/virtual/input/input18 [ 170.540243][T12200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2292'. [ 170.672651][ T5293] Bluetooth: hci3: command 0x206a tx timeout [ 170.672808][ T66] Bluetooth: hci0: command 0x0406 tx timeout [ 170.675128][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 170.677470][ T832] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 170.679988][ T5950] Bluetooth: hci1: command 0x0406 tx timeout [ 170.733052][T12203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2293'. [ 170.758930][T12205] Cannot find add_set index 1 as target [ 170.831908][ T832] usb 7-1: Using ep0 maxpacket: 8 [ 170.835405][ T832] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.839892][ T832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.844009][ T832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.848078][ T832] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.854382][ T832] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.857467][ T832] usb 7-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 170.860742][ T832] usb 7-1: Product: syz [ 170.863436][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2299'. [ 170.911649][ T39] audit: type=1400 audit(1736226839.540:571): avc: denied { execute } for pid=12219 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 170.918833][ T39] audit: type=1400 audit(1736226839.540:572): avc: denied { execute_no_trans } for pid=12219 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 171.030774][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.036849][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.039891][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.044128][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.047330][ T5951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.049911][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.077687][T12191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.080273][T12191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.086013][T12191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.090112][T12191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.105224][ T832] usb 7-1: usb_control_msg returned -71 [ 171.106943][ T832] usbtmc 7-1:16.0: can't read capabilities [ 171.113991][ T832] usb 7-1: USB disconnect, device number 8 [ 171.165097][T12220] chnl_net:caif_netlink_parms(): no params data found [ 171.213290][T12220] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.216478][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.218559][T12220] bridge_slave_0: entered allmulticast mode [ 171.220750][T12220] bridge_slave_0: entered promiscuous mode [ 171.225173][T12220] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.227409][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.229487][T12220] bridge_slave_1: entered allmulticast mode [ 171.231848][T12220] bridge_slave_1: entered promiscuous mode [ 171.278435][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.287767][T12220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.293229][T12220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.312658][T12220] team0: Port device team_slave_0 added [ 171.316306][T12220] team0: Port device team_slave_1 added [ 171.335096][T12220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.337095][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.344983][T12220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.359126][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.364502][T12220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.367226][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.374674][T12220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.402888][T12220] hsr_slave_0: entered promiscuous mode [ 171.405946][T12220] hsr_slave_1: entered promiscuous mode [ 171.409291][T12220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.412719][T12220] Cannot create hsr debugfs directory [ 171.461123][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.545239][ T1141] team0: Port device netdevsim0 removed [ 171.548984][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.793465][ T1141] gretap0 (unregistering): left promiscuous mode [ 171.811731][T12242] trusted_key: syz.2.2303 sent an empty control message without MSG_MORE. [ 172.387750][ T1141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 172.395934][ T1141] bond0 (unregistering): Released all slaves [ 172.559036][T12251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=12251 comm=syz.3.2305 [ 172.834255][T12220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.837979][T12220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.842621][T12220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.853443][T12220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.858385][T12286] FAULT_INJECTION: forcing a failure. [ 172.858385][T12286] name failslab, interval 1, probability 0, space 0, times 0 [ 172.867447][T12286] CPU: 0 UID: 0 PID: 12286 Comm: syz.3.2315 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 172.870560][T12286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.873629][T12286] Call Trace: [ 172.874602][T12286] [ 172.875622][T12286] dump_stack_lvl+0x16c/0x1f0 [ 172.877439][T12286] should_fail_ex+0x497/0x5b0 [ 172.878806][T12286] ? fs_reclaim_acquire+0xae/0x150 [ 172.880352][T12286] should_failslab+0xc2/0x120 [ 172.881717][T12286] __kmalloc_cache_noprof+0x68/0x410 [ 172.883242][T12286] ? trace_event_raw_event_9p_client_req+0x140/0x240 [ 172.885196][T12286] fuse_io_alloc+0x47/0x150 [ 172.886534][T12286] fuse_direct_io+0x31f/0x2580 [ 172.887933][T12286] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 172.889567][T12286] ? trace_lock_acquire+0x14e/0x1f0 [ 172.891067][T12286] ? __pfx_register_lock_class+0x10/0x10 [ 172.892688][T12286] ? fuse_direct_write_iter+0x42c/0x830 [ 172.894310][T12286] ? generic_write_check_limits+0x1f1/0x290 [ 172.896722][T12286] ? __pfx_fuse_direct_io+0x10/0x10 [ 172.898847][T12286] ? __pfx_generic_write_checks+0x10/0x10 [ 172.900619][T12286] fuse_direct_write_iter+0x64f/0x830 [ 172.902163][T12286] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 172.903889][T12286] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 172.905551][T12286] ? rcu_is_watching+0x12/0xc0 [ 172.906949][T12286] ? trace_lock_acquire+0x14e/0x1f0 [ 172.908472][T12286] fuse_file_write_iter+0x66e/0x8c0 [ 172.909971][T12286] vfs_write+0x5ae/0x1150 [ 172.911228][T12286] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 172.912883][T12286] ? __pfx___mutex_lock+0x10/0x10 [ 172.914374][T12286] ? __pfx_vfs_write+0x10/0x10 [ 172.915823][T12286] ksys_write+0x12b/0x250 [ 172.917077][T12286] ? __pfx_ksys_write+0x10/0x10 [ 172.918486][T12286] do_syscall_64+0xcd/0x250 [ 172.919851][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.921545][T12286] RIP: 0033:0x7f9afa785d29 [ 172.922832][T12286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.930340][T12286] RSP: 002b:00007f9afb5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.933664][T12286] RAX: ffffffffffffffda RBX: 00007f9afa975fa0 RCX: 00007f9afa785d29 [ 172.936798][T12286] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 0000000000000004 [ 172.939967][T12286] RBP: 00007f9afb5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 172.943139][T12286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.945749][T12286] R13: 0000000000000000 R14: 00007f9afa975fa0 R15: 00007fff8df6e918 [ 172.948147][T12286] [ 173.009381][T12220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.021864][ T1141] batadv_slave_1: left promiscuous mode [ 173.037757][ T1141] hsr_slave_0: left promiscuous mode [ 173.039833][ T1141] hsr_slave_1: left promiscuous mode [ 173.068251][ T1141] veth1_macvtap: left promiscuous mode [ 173.071154][ T1141] veth0_macvtap: left promiscuous mode [ 173.074189][ T5942] Bluetooth: hci4: command tx timeout [ 173.077624][ T1141] veth1_vlan: left promiscuous mode [ 173.081091][ T1141] veth0_vlan: left promiscuous mode [ 173.222739][ T39] audit: type=1400 audit(1736226842.853:573): avc: denied { associate } for pid=12305 comm="syz.3.2318" name="cgroup.kill" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 173.230008][ T39] audit: type=1400 audit(1736226842.853:574): avc: denied { map } for pid=12305 comm="syz.3.2318" path="/601/file0/cgroup.kill" dev="9p" ino=36575196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.469653][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 174.112189][ T39] audit: type=1400 audit(1736226843.733:575): avc: denied { create } for pid=12310 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.582084][ T1141] ÛÌî]-Ñ (unregistering): left allmulticast mode [ 174.586489][T12220] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.591125][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.593217][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.598429][T12309] gre0: Master is either lo or non-ether device [ 174.610703][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.612856][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.631302][ T39] audit: type=1400 audit(1736226844.253:576): avc: denied { bind } for pid=12317 comm="syz.1.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.638473][T12320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 174.640371][T12320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.643035][T12320] vhci_hcd vhci_hcd.0: Device attached [ 174.647893][T12319] xt_hashlimit: size too large, truncated to 1048576 [ 174.650196][T12320] vhci_hcd vhci_hcd.0: port 0 already used [ 174.663122][ T39] audit: type=1400 audit(1736226844.293:577): avc: denied { audit_write } for pid=12318 comm="syz.3.2323" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.670454][ T39] audit: type=1400 audit(1736226844.293:578): avc: denied { watch } for pid=12318 comm="syz.3.2323" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.691795][ T39] audit: type=1400 audit(1736226844.293:579): avc: denied { watch_sb watch_reads } for pid=12318 comm="syz.3.2323" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 174.712271][ T39] audit: type=1400 audit(1736226844.343:580): avc: denied { connect } for pid=12318 comm="syz.3.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 174.715321][T12321] vhci_hcd: connection closed [ 174.722294][ T8267] vhci_hcd: stop threads [ 174.724945][ T8267] vhci_hcd: release socket [ 174.726253][ T8267] vhci_hcd: disconnect device [ 174.761382][T12220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.866985][T12220] veth0_vlan: entered promiscuous mode [ 174.870947][T12220] veth1_vlan: entered promiscuous mode [ 174.884384][T12220] veth0_macvtap: entered promiscuous mode [ 174.890690][T12220] veth1_macvtap: entered promiscuous mode [ 174.898065][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.901164][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.904313][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.908205][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.913714][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.917977][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.923499][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.927368][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.931298][T12220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.937810][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.940850][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.943984][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.947061][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.949966][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.953329][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.956207][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.959215][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.963543][T12220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.968832][T12220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.971458][T12220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.974100][T12220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.976700][T12220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.015228][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.018411][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.029468][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.032276][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.074756][T12346] xt_SECMARK: invalid mode: 0 [ 175.161652][ T5942] Bluetooth: hci4: command tx timeout [ 175.314681][ T39] audit: type=1400 audit(1736226844.943:581): avc: denied { nlmsg_read } for pid=12348 comm="syz.4.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.378623][ T5951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.385870][ T5951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.388984][ T5951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.393943][ T5951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.398389][ T5951] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 175.405016][ T5951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.446336][T11999] bond0: (slave syz_tun): Releasing backup interface [ 175.600254][ T8263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.663451][T12353] chnl_net:caif_netlink_parms(): no params data found [ 175.682284][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'. [ 175.682718][ T8263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.771339][T12353] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.778763][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.780982][T12353] bridge_slave_0: entered allmulticast mode [ 175.783895][T12353] bridge_slave_0: entered promiscuous mode [ 175.795902][ T8263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.800038][T12353] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.802345][T12353] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.804562][T12353] bridge_slave_1: entered allmulticast mode [ 175.806787][T12353] bridge_slave_1: entered promiscuous mode [ 175.828413][T12353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.832693][T12353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.873827][T12353] team0: Port device team_slave_0 added [ 175.877598][T12353] team0: Port device team_slave_1 added [ 175.882231][T12375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2332'. [ 175.891848][T12377] Cannot find add_set index 1 as target [ 175.922678][T12380] xt_hashlimit: size too large, truncated to 1048576 [ 175.930520][ T39] audit: type=1400 audit(1736226845.553:582): avc: denied { ioctl } for pid=12379 comm="syz.4.2334" path="socket:[47088]" dev="sockfs" ino=47088 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 175.941646][ T8263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.947671][T12353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.949791][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.958262][T12353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.963007][T12353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.967266][T12353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.975535][T12353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.011321][T12353] hsr_slave_0: entered promiscuous mode [ 176.015224][T12353] hsr_slave_1: entered promiscuous mode [ 176.018569][T12353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.020852][T12353] Cannot create hsr debugfs directory [ 176.079826][ T8263] bridge_slave_1: left promiscuous mode [ 176.084882][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.088734][ T8263] bridge_slave_0: left allmulticast mode [ 176.090433][ T8263] bridge_slave_0: left promiscuous mode [ 176.093551][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.636295][ T8263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.640217][ T8263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.643753][ T8263] bond0 (unregistering): Released all slaves [ 176.648093][ T8263] bond1 (unregistering): Released all slaves [ 176.738584][ T8263] : left promiscuous mode [ 176.859613][ T8263] tipc: Left network mode [ 176.879946][ T8263] IPVS: stopping master sync thread 11218 ... [ 176.971136][T12409] syzkaller1: entered allmulticast mode [ 177.003899][T12418] xt_ipcomp: unknown flags 12 [ 177.084413][T12426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4608 sclass=netlink_route_socket pid=12426 comm=syz.2.2346 [ 177.129464][ T8263] hsr_slave_0: left promiscuous mode [ 177.131979][ T8263] hsr_slave_1: left promiscuous mode [ 177.135011][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.138042][ T8263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.141079][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.143732][ T8263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.170008][ T8263] veth1_macvtap: left promiscuous mode [ 177.171880][ T8263] veth0_macvtap: left promiscuous mode [ 177.173684][ T8263] veth1_vlan: left promiscuous mode [ 177.175282][ T8263] veth0_vlan: left promiscuous mode [ 177.241607][ T5951] Bluetooth: hci4: command tx timeout [ 177.484186][ T5951] Bluetooth: hci5: command tx timeout [ 178.013083][ T8263] team0 (unregistering): Port device team_slave_1 removed [ 178.104252][ T8263] team0 (unregistering): Port device team_slave_0 removed [ 178.569338][T12445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.633152][T12445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.752845][T12459] bridge0: port 3(netdevsim0) entered blocking state [ 178.756200][T12459] bridge0: port 3(netdevsim0) entered disabled state [ 178.759294][T12459] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 178.763975][T12459] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 178.766849][T12459] bridge0: port 3(netdevsim0) entered blocking state [ 178.769950][T12459] bridge0: port 3(netdevsim0) entered forwarding state [ 178.813129][T12463] FAULT_INJECTION: forcing a failure. [ 178.813129][T12463] name failslab, interval 1, probability 0, space 0, times 0 [ 178.816853][T12463] CPU: 0 UID: 0 PID: 12463 Comm: syz.4.2356 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 178.819811][T12353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.821048][T12463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.826314][T12463] Call Trace: [ 178.827347][T12463] [ 178.828211][T12463] dump_stack_lvl+0x16c/0x1f0 [ 178.829627][T12463] should_fail_ex+0x497/0x5b0 [ 178.830997][T12463] ? fs_reclaim_acquire+0xae/0x150 [ 178.832470][T12463] should_failslab+0xc2/0x120 [ 178.833789][T12463] __kmalloc_noprof+0xcb/0x510 [ 178.835204][T12463] ? kasan_save_track+0x14/0x30 [ 178.836711][T12463] fuse_io_alloc+0x92/0x150 [ 178.838568][T12463] fuse_direct_io+0x31f/0x2580 [ 178.840175][T12463] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.841783][T12463] ? trace_lock_acquire+0x14e/0x1f0 [ 178.843291][T12463] ? __pfx_register_lock_class+0x10/0x10 [ 178.844894][T12463] ? fuse_direct_write_iter+0x42c/0x830 [ 178.846484][T12463] ? generic_write_check_limits+0x1f1/0x290 [ 178.848199][T12463] ? __pfx_fuse_direct_io+0x10/0x10 [ 178.849712][T12463] ? __pfx_generic_write_checks+0x10/0x10 [ 178.851375][T12463] fuse_direct_write_iter+0x64f/0x830 [ 178.853136][T12463] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 178.854891][T12463] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 178.856519][T12463] ? rcu_is_watching+0x12/0xc0 [ 178.857900][T12463] ? trace_lock_acquire+0x14e/0x1f0 [ 178.859398][T12463] fuse_file_write_iter+0x66e/0x8c0 [ 178.860890][T12463] vfs_write+0x5ae/0x1150 [ 178.862135][T12463] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 178.863776][T12463] ? __pfx___mutex_lock+0x10/0x10 [ 178.865221][T12463] ? __pfx_vfs_write+0x10/0x10 [ 178.866619][T12463] ksys_write+0x12b/0x250 [ 178.867874][T12463] ? __pfx_ksys_write+0x10/0x10 [ 178.869313][T12463] do_syscall_64+0xcd/0x250 [ 178.870638][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.872359][T12463] RIP: 0033:0x7f2fc9385d29 [ 178.873641][T12463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.879111][T12463] RSP: 002b:00007f2fca221038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.881488][T12463] RAX: ffffffffffffffda RBX: 00007f2fc9575fa0 RCX: 00007f2fc9385d29 [ 178.883765][T12463] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 0000000000000004 [ 178.886012][T12463] RBP: 00007f2fca221090 R08: 0000000000000000 R09: 0000000000000000 [ 178.888254][T12463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.890523][T12463] R13: 0000000000000000 R14: 00007f2fc9575fa0 R15: 00007ffe7f2bee08 [ 178.892792][T12463] [ 178.898389][T12353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.904489][T12353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.908736][T12353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.960240][T12353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.967792][T12353] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.972041][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.974116][ T8267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.983913][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.986046][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.026380][T12353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.108373][T12353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.127576][T12353] veth0_vlan: entered promiscuous mode [ 179.132360][T12353] veth1_vlan: entered promiscuous mode [ 179.142964][T12353] veth0_macvtap: entered promiscuous mode [ 179.146686][T12353] veth1_macvtap: entered promiscuous mode [ 179.154003][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.158131][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.162550][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.165761][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.168579][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.172701][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.175548][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.178566][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.182066][T12353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.186411][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.189365][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.192285][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.195181][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.197927][T12353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.200941][T12353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.204406][T12353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.209566][T12353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.212436][T12353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.214983][T12353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.217516][T12353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.246925][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.249945][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.260624][ T8267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.263401][ T8267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.311651][ T5951] Bluetooth: hci4: command tx timeout [ 179.453249][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 179.456018][T12502] gre0: Master is either lo or non-ether device [ 179.551585][ T5951] Bluetooth: hci5: command tx timeout [ 179.687647][T12518] xt_hashlimit: size too large, truncated to 1048576 [ 179.893277][T12524] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.2370'. [ 180.031165][T12527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2371'. [ 180.092548][T12531] Cannot find add_set index 1 as target [ 180.130672][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 180.130684][ T39] audit: type=1400 audit(1736226849.753:584): avc: denied { watch watch_reads } for pid=12534 comm="syz.4.2375" path="/18" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.141440][ T39] audit: type=1326 audit(1736226849.763:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.4.2375" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc9385d29 code=0x0 [ 180.155088][T12538] xt_hashlimit: size too large, truncated to 1048576 [ 180.356213][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.368315][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.371875][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.382819][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.386495][ T5942] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.388815][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.523834][T12548] chnl_net:caif_netlink_parms(): no params data found [ 180.594021][T12548] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.596898][T12548] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.611208][T12548] bridge_slave_0: entered allmulticast mode [ 180.615437][T12548] bridge_slave_0: entered promiscuous mode [ 180.619272][T12548] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.621417][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.627477][T12548] bridge_slave_1: entered allmulticast mode [ 180.629747][T12548] bridge_slave_1: entered promiscuous mode [ 180.651255][T12548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.655237][T12548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.686199][T12548] team0: Port device team_slave_0 added [ 180.690347][T12548] team0: Port device team_slave_1 added [ 180.717912][T12548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.719939][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.728005][T12548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.733346][T12548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.735353][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.743634][T12548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.757287][T12559] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 180.778424][T12548] hsr_slave_0: entered promiscuous mode [ 180.781338][T12548] hsr_slave_1: entered promiscuous mode [ 180.855355][T12564] loop9: detected capacity change from 0 to 7 [ 180.857553][T12564] Dev loop9: unable to read RDB block 7 [ 180.859289][T12564] loop9: unable to read partition table [ 180.861084][T12564] loop9: partition table beyond EOD, truncated [ 180.863508][T12564] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.880672][T12548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.947173][T12548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.033240][ T39] audit: type=1400 audit(1736226850.653:586): avc: denied { remount } for pid=12567 comm="syz.4.2383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.046156][T12548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.056750][ T39] audit: type=1400 audit(1736226850.683:587): avc: denied { create } for pid=12569 comm="syz.3.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.057268][T12570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11264 sclass=netlink_route_socket pid=12570 comm=syz.3.2384 [ 181.063562][ T39] audit: type=1400 audit(1736226850.683:588): avc: denied { ioctl } for pid=12569 comm="syz.3.2384" path="socket:[49557]" dev="sockfs" ino=49557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.076845][ T39] audit: type=1400 audit(1736226850.703:589): avc: denied { append } for pid=5336 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.094551][ T39] audit: type=1400 audit(1736226850.723:590): avc: denied { unmount } for pid=12220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.100517][ T39] audit: type=1400 audit(1736226850.723:591): avc: denied { read write } for pid=12353 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.108274][ T39] audit: type=1400 audit(1736226850.723:592): avc: denied { open } for pid=12353 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.115855][ T39] audit: type=1400 audit(1736226850.723:593): avc: denied { ioctl } for pid=12353 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.150623][T12548] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 181.155695][T12548] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 181.163725][T12548] team0: Port device netdevsim0 removed [ 181.166210][T12548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.317503][T12548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.321646][T12548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.325039][T12548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.329372][T12548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.358686][T12548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.382862][T12548] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.389153][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.391315][ T8263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.395888][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.397966][ T8263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.484208][T12548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.502129][T12548] veth0_vlan: entered promiscuous mode [ 181.506355][T12548] veth1_vlan: entered promiscuous mode [ 181.518938][T12548] veth0_macvtap: entered promiscuous mode [ 181.522259][T12548] veth1_macvtap: entered promiscuous mode [ 181.529095][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.533801][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.536754][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.540241][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.543473][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.546676][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.549755][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.553032][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.555825][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.559125][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.563948][T12548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.570431][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.573941][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.576771][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.579743][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.582612][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.585571][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.588388][T12548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.591376][T12548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.596096][T12548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.601076][T12548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.604431][T12548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.606923][T12548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.609427][T12548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.640770][ T8264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.648415][ T8264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.659725][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.666179][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.100189][T12604] FAULT_INJECTION: forcing a failure. [ 182.100189][T12604] name failslab, interval 1, probability 0, space 0, times 0 [ 182.105457][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.2.2394 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 182.109613][T12604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.113832][T12604] Call Trace: [ 182.115162][T12604] [ 182.116034][T12604] dump_stack_lvl+0x16c/0x1f0 [ 182.117619][T12604] should_fail_ex+0x497/0x5b0 [ 182.118982][T12604] ? fs_reclaim_acquire+0xae/0x150 [ 182.120707][T12604] should_failslab+0xc2/0x120 [ 182.122642][T12604] __kmalloc_noprof+0xcb/0x510 [ 182.124549][T12604] ? kasan_save_track+0x14/0x30 [ 182.126227][T12604] fuse_direct_io+0x5b3/0x2580 [ 182.128180][T12604] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 182.130351][T12604] ? __pfx_fuse_direct_io+0x10/0x10 [ 182.132418][T12604] ? __pfx_generic_write_checks+0x10/0x10 [ 182.134545][T12604] fuse_direct_write_iter+0x64f/0x830 [ 182.136427][T12604] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 182.138743][T12604] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 182.140839][T12604] ? rcu_is_watching+0x12/0xc0 [ 182.142700][T12604] ? trace_lock_acquire+0x14e/0x1f0 [ 182.144834][T12604] fuse_file_write_iter+0x66e/0x8c0 [ 182.146936][T12604] vfs_write+0x5ae/0x1150 [ 182.148706][T12604] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 182.151011][T12604] ? __pfx___mutex_lock+0x10/0x10 [ 182.153048][T12604] ? __pfx_vfs_write+0x10/0x10 [ 182.155013][T12604] ksys_write+0x12b/0x250 [ 182.156775][T12604] ? __pfx_ksys_write+0x10/0x10 [ 182.158679][T12604] do_syscall_64+0xcd/0x250 [ 182.160491][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.162956][T12604] RIP: 0033:0x7fd8b9185d29 [ 182.164778][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.172209][T12604] RSP: 002b:00007fd8ba06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.175487][T12604] RAX: ffffffffffffffda RBX: 00007fd8b9375fa0 RCX: 00007fd8b9185d29 [ 182.179022][T12604] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 0000000000000004 [ 182.182836][T12604] RBP: 00007fd8ba06f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.186791][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.190496][T12604] R13: 0000000000000000 R14: 00007fd8b9375fa0 R15: 00007ffc37a346b8 [ 182.193599][T12604] [ 182.195740][T12604] ------------[ cut here ]------------ [ 182.197417][T12604] kernel BUG at lib/iov_iter.c:626! [ 182.199017][T12604] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 182.202558][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.2.2394 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 182.206848][T12604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.210031][T12604] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 182.212314][T12604] Code: 89 e6 48 c7 c7 40 b9 d0 8e e8 79 e3 31 00 e9 b1 fd ff ff e8 bf bf 5e fd eb 95 e8 e8 bf 5e fd e9 46 fb ff ff e8 be 1c fc fc 90 <0f> 0b 48 8b 3c 24 e8 d2 bf 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 182.220017][T12604] RSP: 0018:ffffc9000418f958 EFLAGS: 00010293 [ 182.222070][T12604] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff849df800 [ 182.225253][T12604] RDX: ffff8880352aa440 RSI: ffffffff849dfc12 RDI: 0000000000000001 [ 182.228405][T12604] RBP: ffffc9000418fd98 R08: 0000000000000001 R09: 0000000000000000 [ 182.230708][T12604] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000000 [ 182.232992][T12604] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888023885800 [ 182.235384][T12604] FS: 00007fd8ba06f6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 182.238009][T12604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.239976][T12604] CR2: 00000000200003c8 CR3: 00000000430d0000 CR4: 0000000000352ef0 [ 182.242280][T12604] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 182.245108][T12604] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 182.247804][T12604] Call Trace: [ 182.248777][T12604] [ 182.249643][T12604] ? die+0x31/0x80 [ 182.250739][T12604] ? do_trap+0x232/0x430 [ 182.252011][T12604] ? iov_iter_revert+0x533/0x5a0 [ 182.253501][T12604] ? iov_iter_revert+0x533/0x5a0 [ 182.254965][T12604] ? do_error_trap+0xf4/0x230 [ 182.256351][T12604] ? iov_iter_revert+0x533/0x5a0 [ 182.257785][T12604] ? handle_invalid_op+0x34/0x40 [ 182.259240][T12604] ? iov_iter_revert+0x533/0x5a0 [ 182.260681][T12604] ? exc_invalid_op+0x2e/0x50 [ 182.262062][T12604] ? asm_exc_invalid_op+0x1a/0x20 [ 182.263608][T12604] ? iov_iter_revert+0x120/0x5a0 [ 182.265305][T12604] ? iov_iter_revert+0x532/0x5a0 [ 182.266951][T12604] ? iov_iter_revert+0x533/0x5a0 [ 182.268505][T12604] ? iov_iter_revert+0x532/0x5a0 [ 182.269965][T12604] fuse_direct_io+0xf0e/0x2580 [ 182.271369][T12604] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 182.272996][T12604] ? __pfx_fuse_direct_io+0x10/0x10 [ 182.274900][T12604] ? __pfx_generic_write_checks+0x10/0x10 [ 182.276702][T12604] fuse_direct_write_iter+0x64f/0x830 [ 182.278258][T12604] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 182.279994][T12604] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 182.281630][T12604] ? rcu_is_watching+0x12/0xc0 [ 182.283037][T12604] ? trace_lock_acquire+0x14e/0x1f0 [ 182.285046][T12604] fuse_file_write_iter+0x66e/0x8c0 [ 182.286879][T12604] vfs_write+0x5ae/0x1150 [ 182.288145][T12604] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 182.289818][T12604] ? __pfx___mutex_lock+0x10/0x10 [ 182.291289][T12604] ? __pfx_vfs_write+0x10/0x10 [ 182.292682][T12604] ksys_write+0x12b/0x250 [ 182.294022][T12604] ? __pfx_ksys_write+0x10/0x10 [ 182.295448][T12604] do_syscall_64+0xcd/0x250 [ 182.296771][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.298484][T12604] RIP: 0033:0x7fd8b9185d29 [ 182.299822][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.305496][T12604] RSP: 002b:00007fd8ba06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.307897][T12604] RAX: ffffffffffffffda RBX: 00007fd8b9375fa0 RCX: 00007fd8b9185d29 [ 182.310165][T12604] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 0000000000000004 [ 182.312445][T12604] RBP: 00007fd8ba06f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.314825][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.317143][T12604] R13: 0000000000000000 R14: 00007fd8b9375fa0 R15: 00007ffc37a346b8 [ 182.319586][T12604] [ 182.320496][T12604] Modules linked in: [ 182.321850][T12604] ---[ end trace 0000000000000000 ]--- [ 182.323752][T12604] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 182.325403][T12604] Code: 89 e6 48 c7 c7 40 b9 d0 8e e8 79 e3 31 00 e9 b1 fd ff ff e8 bf bf 5e fd eb 95 e8 e8 bf 5e fd e9 46 fb ff ff e8 be 1c fc fc 90 <0f> 0b 48 8b 3c 24 e8 d2 bf 5e fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 182.330901][T12604] RSP: 0018:ffffc9000418f958 EFLAGS: 00010293 [ 182.332794][T12604] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff849df800 [ 182.335154][T12604] RDX: ffff8880352aa440 RSI: ffffffff849dfc12 RDI: 0000000000000001 [ 182.337431][T12604] RBP: ffffc9000418fd98 R08: 0000000000000001 R09: 0000000000000000 [ 182.339731][T12604] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000000 [ 182.342115][T12604] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888023885800 [ 182.344482][T12604] FS: 00007fd8ba06f6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 182.347044][T12604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.348980][T12604] CR2: 00000000200003c8 CR3: 00000000430d0000 CR4: 0000000000352ef0 [ 182.351302][T12604] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 182.353856][T12604] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 182.356955][T12604] Kernel panic - not syncing: Fatal exception [ 182.359523][T12604] Kernel Offset: disabled [ 182.360774][T12604] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:14:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851be235 RDI=ffffffff9ab0fb20 RBP=ffffffff9ab0fae0 RSP=ffffc9000418f2b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000030 R14=ffffffff851be1d0 R15=0000000000000000 RIP=ffffffff851be25f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd8ba06f6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200003c8 CR3=00000000430d0000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010002 RBX=000000000003d90c RCX=0000000000000001 RDX=ffff888056704880 RSI=ffffffff81873ad3 RDI=ffff88806a72d338 RBP=ffff88806a72d338 RSP=ffffc900006b0e08 R8 =0000000000000000 R9 =fffffbfff3557879 R10=ffffffff9aabc3cb R11=ffffc900006b0ff8 R12=ffff88806a72d338 R13=ffff88806a72ca80 R14=ffff88806a72ca00 R15=0000002a65697557 RIP=ffffffff819a18e8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555a5ac500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc2e0547ab8 CR3=0000000028332000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebf5b86f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2e0402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2e0402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2e0402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2e0402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2e0402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2e0402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff888026df4bb8 RCX=1ffff110024b1d26 RDX=0000000000000000 RSI=ffffffff8459ba77 RDI=ffffc900040df83e RBP=000000000000000f RSP=ffffc900040df708 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=00000000000a4001 R12=0000000000000185 R13=dffffc0000000000 R14=0000000000000001 R15=000000000000000d RIP=ffffffff8459ba9b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b2e7500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd0745cb18 CR3=0000000026a8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad5d94b6a3 00007fad5d94b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0745f2a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b301bfa 000055555b3019f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b2fa4a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b36e8e1 000055555b36e480 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa0300020001f803 03ffffffff0401e8 0300080001e00318 080001d803760800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01018004018a8a08 0001000014080606 011e800008000298 0300080002900300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800028803000400 0284030004000280 0300020001fe0300 020001fc03000200 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01fa0300020001f8 0303ffffffff0401 e80300080001e003 18080001d8037608 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001d00313efffff ff0401c003000000 0000000c080f8003 0f800401b00303ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a646880 RCX=ffffffff818e077c RDX=ffff888021998000 RSI=ffffffff818e0756 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000fef998 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4c8d11 R13=0000000000000001 R14=ffff88806a646888 R15=ffff88806a93fe40 RIP=ffffffff818e0758 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b308e0880 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000000 Opmask01=00000000ffffffff Opmask02=00000000fff80800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa66e7af0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000