last executing test programs: 1m4.953484943s ago: executing program 0 (id=399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) 1m4.953185522s ago: executing program 0 (id=400): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x245, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x2, 0xd7, 0x9, 0xfffffffb}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0xffffffffffffffff) r5 = getpgid(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0308010009200000180012000280060008001000"/32], 0x38}}, 0x0) capset(&(0x7f0000000440)={0x19980330, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x40}) fcntl$getown(r0, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x690080, 0x0) fsetxattr(r0, &(0x7f0000000380)=@known='trusted.overlay.origin\x00', &(0x7f0000000480)='\x00', 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r3], &(0x7f0000000340)=[0x2, 0x9, 0x7], &(0x7f0000000140)=[r7, r7], &(0x7f0000000580)}) 1m4.8785074s ago: executing program 0 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m4.828395435s ago: executing program 0 (id=402): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0xc0080, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$inet6(0xa, 0xa, 0xa4ae) ioctl$TIOCGPTPEER(r5, 0x4004092b, 0x8) 1m4.607770896s ago: executing program 0 (id=403): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x10000, &(0x7f0000000080)='norecovery') 1m3.988527498s ago: executing program 0 (id=414): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x301082) (async) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x301082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000004c0)={0x6}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000002060102000000e1b17829986920d7432f7c7c7c2cb087ff5a3c2a92074f80b91478d2d2f4e6620d5abf7b1894c4ea6d52520c71f7dee019c1af6631db66b1e104b722f529f0"], 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x20044805) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000100039040000000000000000000000d207b50649bc2dc4fd403c3a9d220e8000093700000000bdfe608f", @ANYRES32=r8, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000100039040000000000000000000000d207b50649bc2dc4fd403c3a9d220e8000093700000000bdfe608f", @ANYRES32=r8, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r5, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0xf8, r8}, 0x14) (async) sendto$packet(r5, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0xf8, r8}, 0x14) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/133, 0x85}], 0x2, 0xe, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x2, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0e9a58f042cfd23af873572fd368bf62555ed8d68a6342cb51e44bb9ba1623886325b453748a773b811ed40d49d9e8be8e2a129cd33f97eaeedf0ba3f2472708e4235d5cd4e3aa615f2b8afe4a7556ec7fdf87d4a9b65db844e868d13e50ab96a8b5c954a8d8636172f07a26e835ab215db71529911d7be134fb760514bb05236ecb1242e389605ed70ff7fe707c9b2866bf9ced52bbbe83425c68300f7abc59439348981299fffefae48f95797a3c5b", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="04006e8004002800"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000540)={0x308, @time={0x7, 0x4}, 0x2, {0x1, 0xe}, 0x7, 0x1, 0x5b}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r12, r13, 0x3, 0x0, 0xffffffff, 0xfffff612, {0x1, 0x1, 0x3, 0x67, 0xf4b, 0x5, 0x2, 0x5, 0x412d, 0xe154, 0x1000, 0x7f, 0x6, 0x3, "fe1d00003413000000000020b42717e47f00"}}) 1m3.91770783s ago: executing program 32 (id=414): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x301082) (async) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x301082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000004c0)={0x6}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000002060102000000e1b17829986920d7432f7c7c7c2cb087ff5a3c2a92074f80b91478d2d2f4e6620d5abf7b1894c4ea6d52520c71f7dee019c1af6631db66b1e104b722f529f0"], 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x20044805) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000100039040000000000000000000000d207b50649bc2dc4fd403c3a9d220e8000093700000000bdfe608f", @ANYRES32=r8, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000100039040000000000000000000000d207b50649bc2dc4fd403c3a9d220e8000093700000000bdfe608f", @ANYRES32=r8, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r5, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0xf8, r8}, 0x14) (async) sendto$packet(r5, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0xf8, r8}, 0x14) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/133, 0x85}], 0x2, 0xe, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x2, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0e9a58f042cfd23af873572fd368bf62555ed8d68a6342cb51e44bb9ba1623886325b453748a773b811ed40d49d9e8be8e2a129cd33f97eaeedf0ba3f2472708e4235d5cd4e3aa615f2b8afe4a7556ec7fdf87d4a9b65db844e868d13e50ab96a8b5c954a8d8636172f07a26e835ab215db71529911d7be134fb760514bb05236ecb1242e389605ed70ff7fe707c9b2866bf9ced52bbbe83425c68300f7abc59439348981299fffefae48f95797a3c5b", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="04006e8004002800"], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000540)={0x308, @time={0x7, 0x4}, 0x2, {0x1, 0xe}, 0x7, 0x1, 0x5b}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r12, r13, 0x3, 0x0, 0xffffffff, 0xfffff612, {0x1, 0x1, 0x3, 0x67, 0xf4b, 0x5, 0x2, 0x5, 0x412d, 0xe154, 0x1000, 0x7f, 0x6, 0x3, "fe1d00003413000000000020b42717e47f00"}}) 45.997664111s ago: executing program 2 (id=627): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x0) (async) 45.855955734s ago: executing program 2 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 45.798026634s ago: executing program 2 (id=632): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="ad1adfdb0a000200aaaaaaaaaa1b000008000f0000"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = dup(r7) write$UHID_INPUT(r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000003d2467da40026c93ac17a9f37b8719b612000000000000004f5b34", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000007080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') ioctl$IOC_PR_REGISTER(r11, 0x401870c8, &(0x7f0000000080)={0x5, 0x6, 0x1}) read$FUSE(r11, &(0x7f00000020c0)={0x2020}, 0x2020) 45.728036483s ago: executing program 2 (id=634): r0 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffd, 0x4, 0x1, 0x0, 'syz1\x00'}, 0x6, 0x1, 0x0, r4, 0x0, 0x3, 'syz1\x00', 0x0}) sched_setscheduler(r3, 0x0, &(0x7f0000000100)=0x6) setpgid(r4, r3) setpgid(0x0, r3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r5}, 0x18) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) 45.661543426s ago: executing program 2 (id=637): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x5, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 45.298554143s ago: executing program 2 (id=646): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0xaae, &(0x7f0000000040)={0x0, 0x4de5f, 0x100, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 45.231440407s ago: executing program 33 (id=646): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0xaae, &(0x7f0000000040)={0x0, 0x4de5f, 0x100, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 1.383815922s ago: executing program 5 (id=1299): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) close(r2) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x8, 0x5, 0x2, 0x0, 0x5, '\x00', "037ec42b", "8000", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x8, 0x1, "1efcffffffffffff00", 0x0, 0x0, 0x0, 0x27}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r3, 0x6, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x1686, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x3}}}, 0x118) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/18, @ANYRES32, @ANYBLOB="01000000000002004c0012"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f6c60474d780adda01efbe4e79b0f3c338d72c7d1e030da6e7ee45755af3bf2fabdd33bd2c9cf5419763e17b35a5ca5299bb201bdafc963e552dd99f72c43a0201a6d17f6f41c29070cb509f922f55fd717214ff018b45873f6d17ff2072bbaf34da6ac95f04c4bb640942175cf2dfca8166d60833e7e9b5575edc42c611a888aaf508b51317cafc7ebae6634e2cd2f", 0xae) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000001608000340000000000800024000000000080008400020000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0xfffffeca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0x7}, {0xfff2, 0x7}, {0x7}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x34}}, 0x0) 1.38348393s ago: executing program 5 (id=1300): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x23, &(0x7f0000000480)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x2, 0x2, 0x7, 0x3, 0x6, 0xffffffffffffffff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x1, 0x3, 0x2, 0xb, 0x0, 0x20, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r9, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8ad1}}}, 0x38) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x2}}}, 0x24}}, 0x0) 1.097946412s ago: executing program 5 (id=1303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e200000000000000000000711222000000000061eeea29289e9500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.02778491s ago: executing program 5 (id=1304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) socket$xdp(0x2c, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, 0xffffffffffffffff, 0x7b2e4000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x7ff, 0x30, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x8, 0x207, 0x8}}) connect$can_bcm(r3, &(0x7f0000000340)={0x1d, r4}, 0xffffffffffffff4c) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x74c, 0x2f00, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x1, 0x20, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) 907.589974ms ago: executing program 5 (id=1308): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000ffd118009440000102020109022d0001010230030904000501030001030921ff070201223607090581032000040d080905020320007fb60f"], &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0xe, 0x5, 0x10, 0x10, 0x7}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xcd, 0x0, 0xe, 0x9, 0x8}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42c}}]}) lsm_get_self_attr(0x69, 0x0, &(0x7f0000000080), 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x0, 0x11, 0x85, {0x85, 0x24, "3cdbf491e18ca631c92b11a51861dcccbb8a8015c57b43ec6fb370a18556c6e62dd17e05b609542e129ce6c00b505bb605c5383e0a3a23e2e20d3c38708e32b81b28d4e230d454f296cce3d4cdfe4dedc0677b9c6a6b5fd6aeea12a8496f0faec03692fbfe3be0db22acd80e54aef6c84a4044054b8eda2e0d1e68e18ff8479c21fe70"}}, &(0x7f00000002c0)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "1051f4c29249883492d5251d484efe97ada874d03b0c488e31ec10ca233fcb411065b8604726c7db0efbdb5dd09fc0861845f403f5fe6bbe193280e6a59faf07ba06f4ca2d07b136386069d4f2d697641280ea131deacd7ab5e52df32ee5ada09510a558c3685027708e24d578344a14fa4c43b37661fc5c73"}}, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "a1be8592"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf, 0x1, {0x22, 0x99a}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x20, 0x11, 0x65, "843f7b28da81760e21cb2452861bf77931807dca30e0f19b6e81737514d0dcb9c1304a4753dfb81d8fa8906c1dca47638725da35685dcddbb0ba1f002db1a956e66527f2fac44716353182e23d496047dbb82be59fbbab161c46411ac86518cd0e30de5fb0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000540)=ANY=[@ANYBLOB="20010f0000006a42ff320ecf47d700000000000000"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x7f}}) r1 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) userfaultfd(0x81801) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0x81) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000140, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x3e, 0x107, 0xfffffffd, 0x25df9bfd, {0x7, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048880}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) 628.190379ms ago: executing program 4 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRESDEC, @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ed706f6c3d696e74654b6031a31d00"/26]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sigaltstack(&(0x7f0000000080)={&(0x7f0000000180)=""/231, 0x0, 0xe7}, &(0x7f00000000c0)={&(0x7f0000000280)=""/211, 0x0, 0xd3}) sigaltstack(&(0x7f0000000900)={&(0x7f0000000a80)=""/45, 0x2, 0x2d}, &(0x7f0000000a40)={&(0x7f0000000ac0)=""/125, 0x0, 0x7d}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "38b80355cffb9334b84b18bacebf3d535c30219dcb950bffffffffffffffffa8ed4d5c0d4d9d945dea458da503ff3cb18f5326e1954664fa48745e1c7eef737a"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000001a80)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='logon\x00', r4) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r5, r3}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x18000}], 0x20}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000004c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000000c0)="e0b157d611ce9b4a2f4b56b4b4a3a9678a24eeb4edf9faeefd03ae74b5367119aa3e78becc00701af5be6b3fbdb5bb41b442007d1c26a21166e53d203a60e2f6d1d561a3211ab63a5263ba1b749a710dd4d6824e8d2fe7b94d265819dc1c672269edfa372ae6217bb0cc4fe64e366157602435755a74b724abc7f00904c21af4fcdb696e7c9d36bc782fbd6f19451c0b4e0797595639dd4ab2495046851b8f1f7a420e02abfa9b0ee75fa35a", 0xac}, {&(0x7f00000001c0)="db0bfb71b5695f9e503c22d579b52ff182dddec8dfe623397b50cd542e43e390969b763143ead117d71edcd784dd88d37f7c7543ad0953f5adac25cd963915a6c908719fe549c43411a90478820397c98615b044a9b7dc4b610ab455cf794578aa3b74512afb2ebcea7c2bbb72", 0x6d}, {&(0x7f0000000240)="a1afb6add5564532e323792ea1d31f9d2a811926a812f4c82a65b0e8", 0x1c}, {&(0x7f0000000280)="2f5f215ce442835900bb9b71b038efd9151c28cce506628bbc0b752f1816cf2ee27d574c1eed9d33ed3f5814d1bc15cffe6a482b2b3ee987fb15c304ffbbe8d76381951a6a9ed95202603f325e0eecce7620ee986837f78c279af04933a5cbfd2a2e1bcfa23109471cbfd6d5a78c45addaf91328c6e45308b966baf2bd4ccfa6a50b319f036370edd9c1281d6da07799fb646fe985ee569bc33ee622f79a56c970c0bee9cedbf8f0904133d7d7654d6039522e758beac1fa784f4510f71cea38ef0575d5c6aef299ab489580246245", 0xcf}, {&(0x7f0000000380)="c7f404777bcc27891405fce710efd7fdd3671275b0cbdb640b9be3aef91d44561df22dd7d81ce34fea1974693f195d4315f2683adce0eb239318011cc2deb90e2a32cc9e61f99a2044e15007804386f6ce7fa2f6d4fdd5ec57cbe4cdba79966ca246010ce79822eb43078987f387e8a9a8c0e9f83f5aa2f1d32e43bd71a41917c395", 0x82}, {&(0x7f0000001540)="7b6469467d52996ecfc447f5503b8a51aec77afdab65a83f3c0afe059d1e3060f1006ae52fef83a9acd043e60d5ff0ca75836a3309d80c8230fd053067155ed72812858818267262918ef83fd858018c8c573b6ea49211df73d5bec755432515d63b428b831d5d80dd80b4953c7736e55c0860afe96a66a25714fb01e68b300d91e9e76b6bfad99136cb9c6090d4eb9bb4487757693340caa085727305aafc47c8a3f941e220c036cd9dc1cc609f372bcdca8f75b8b0ad7fe5e366b4b5d7b1ff11f19527", 0xc4}], 0x7, &(0x7f0000001640)="8b64cebe6fdc837bac5aa4d599b1ca4cf9eec26a1fa99e2591e75217123edb52d61a4622501b5751197b456472a85da790b16ac3ce69fcec078407a1bcc9eb8ca0043a74a8d71be1c437ffdaf6b5427284ecec13da579d160eb93ca916c234d721ba624b238bbc644e31597eb7ec0452a816186f124b4978c68a466e33c5c1e4e5b293209a05efb0da8952b7e7261340d8b17d90a8104f8eb4264885a2495d0e09a2f08e6a874d6c329511183210620b5bd693dc", 0xb4, 0x45}, 0x40040) 627.129577ms ago: executing program 4 (id=1313): r0 = socket(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 578.254103ms ago: executing program 4 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x168) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000001140)='./file1\x00') r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_create(0x8, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000040, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x2000000008000, 0x0, 0x3, 0x3, 0x6, 0x2, 0x7}) 577.85642ms ago: executing program 3 (id=1315): r0 = syz_io_uring_setup(0x6927, &(0x7f0000000100)={0x0, 0x2000000, 0x10, 0x2}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f00000000c0), 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'macvtap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r3, 0x1, 0x2000, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044805}, 0x4004844) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec29, 0x400, 0x2, 0x397, 0x0, r6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x6927, &(0x7f0000000100)={0x0, 0x2000000, 0x10, 0x2}, &(0x7f0000000040), &(0x7f0000000080)) (async) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f00000000c0), 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x11, 0x3, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'macvtap0\x00'}) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, r3, 0x1, 0x2000, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044805}, 0x4004844) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec29, 0x400, 0x2, 0x397, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) (async) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 573.601901ms ago: executing program 4 (id=1316): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000400)=""/106) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000180)) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) ioctl$RNDADDENTROPY(r2, 0x40045201, &(0x7f0000000000)=ANY=[]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x9, 0x100}}}}}}}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r9, 0x0, 0xb6, 0x6e, &(0x7f0000000780)="18ed75c3557e19c888fa513cf86778682babf31550032cfec8c21167a15662208691858473d68bd677c6c98241a2660a69f5c52dcf0957dff1bbb59c302b098bf1e5ec31c87cd94437d2195a4048fb7458e0723f1aa1fd3e10a7bf4a3bbb22754366dcd63d69aba7ed9511d7ba0c8b013f206fcd236db996b552e55867bb365986481f93d4c0e70f3cd29706232f91b654b23b524ed2380e9e6daec738a4c455681f515149c47a887f0b1b5a8b8713697de94baba219", &(0x7f0000000880)=""/110, 0x5, 0x0, 0x63, 0x6d, &(0x7f0000000900)="414102f09162ce43129e84ba809556f807b69cdb97d4510bff503b82f92a8d1eba98e3f7e4d7f5274d74a7c047b26e0bb8aae50c51e1eaaa0a2906970143d69160eee3220b358f32ca31147f7ce7c77b013cd3ae0fdef835471ecd208982c33aa707d5", &(0x7f0000000980)="bcbf0d8c57d6f6972713691bbf3a977a85fb4b0ff58584a453f225eca994c76492f149839fe2d38e7079a7e0a79380aaf2dfe24b8ecb5b7e164e8f3e46a1d296220cdf1ed0b852d1c2975e9ab57b009ee616aefc6addc4d32747c20b18da8384b315b816b6b7dff47563e65814", 0x4, 0x0, 0x8}, 0x50) preadv(r10, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) ioctl$EVIOCGKEYCODE(r10, 0x80084504, &(0x7f00000006c0)=""/133) recvmsg(r10, &(0x7f0000000280)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000140)=""/26, 0x1a}], 0x2, &(0x7f0000000340)=""/181, 0xb5}, 0x1) 498.078128ms ago: executing program 3 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000c5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 497.563331ms ago: executing program 4 (id=1318): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2c, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb89"}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t'], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r3 = syz_open_pts(r1, 0x101000) set_mempolicy(0x1, 0x0, 0x7) set_mempolicy(0x8000, 0x0, 0x7) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) 417.950361ms ago: executing program 1 (id=1320): socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xf}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001900)={0x5, &(0x7f00000001c0)=[{0x9, 0x2, 0x7f, 0x3}, {0x5, 0x4, 0x3, 0xd6}, {0x7, 0x2}, {0xb, 0xa6, 0xf5, 0x2}, {0x5, 0x0, 0x80, 0x3ff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001900)={0x5, &(0x7f00000001c0)=[{0x9, 0x2, 0x7f, 0x3}, {0x5, 0x4, 0x3, 0xd6}, {0x7, 0x2}, {0xb, 0xa6, 0xf5, 0x2}, {0x5, 0x0, 0x80, 0x3ff}]}) socket$inet(0x2, 0x80000, 0x5) dup3(r2, r3, 0x0) (async) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) sendmsg$tipc(r4, &(0x7f0000001880)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3, 0x1}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000280)="86c2447f7c0cb5144bafb88a37ad873d3f838c9b", 0x14}, {&(0x7f00000002c0)="674dd41277cd839e68f35a57cc5806b09cd7aa12065f5b41bb3c33219469bf4c4d8723beaa8e5013859dd2237c32a52afe9fd70032d6c672c2defcd5c1e7e1af08f1bd4dcd386ed012b85713b8758acbb19fb9c6eb41618f8d201dc5041ab396a5b6", 0x62}, {&(0x7f0000000340)="059ca911b8287cacc66fe75182d1b0eab62f1116e74818943e6b52f51160ad4683e9e8edf84c117d67e43a4c35b6a9804385157675aa4bd0ea70db9030803a79d0a8b947cbcdf1f197a35fe7c8cd172e79ac6c162cc9a9b7ef7d00952f7a9deab37832a766c4a4641f7bb0cc4dc6e65e8eb1051713f58c01eecc2a8e845d4c5b5a368e3cd9cb6617ae2d134116822132e4e376cef5be60d6e0d4fe761f749f5fb38cd4ff3c746f078efe409ce1c18ee55925ea78c1ec68ea551021cb5a76c224e2", 0xc1}, {&(0x7f0000000440)="2c0aa28759a37caae2977d94570d457d9af26235d51dd8e26a190939aa2bcff0587f2c9d606d8109362df2f5d23f0f2c51fc2562f360957e7788ca28c13d8f5ebfabb98ae53042f9a6d613f2c3f544b25e99cf3b4ec1c15bf709f967691a3c811566645ea8b6da0d7f3b14c0ce9142092f017436b825a8cd3cb97032f544c3cad95b4ea017ae", 0x86}, {&(0x7f0000000500)="412061c111bc24c1e0369b4d51e96eb7e763caccd448ce35d52115562a040d3c8571eacdfa9c3057ea74b38187319dcf7c94b41aca14c72690c4e9bafb481f64636e275eaf4d7d1cc2b8eb6521f248f525cb0559226ed68d9993668042998c98c2fc8f4df9134b3a3de019a2917e2fc4e66d03c573e3f14cad0f34036af49d1fa3c0a9e1cb33df40cbabd758194ef646fe11f90d0c21cc3fde71df418b32239223a341e632690e73e51b3c1cc3d4cfde49a4bf7971", 0xb5}, {&(0x7f00000005c0)="a8c87d68a4fd6c29898f2a8403f8cb91e040234a327dc91d6481a142d67ae284811501e078bf6033f83cd02edbdd1b7eeb284b3f58bfcbcbcd094d2f9ea3fb6042bae9c184d7478602a5b19484d2e4e79e5f6953ae537fb3ee0325fe6b23754d3e8dfc0a34a36b4068d21afadeeb30174e696080a920156ee9ccf4d3b6e8947d6868dc98bcd366", 0x87}, {&(0x7f0000000700)="d73a304089727160af59958c789f9fdd3fd017f7194a0db3508ec408ba150d5445b2c5399ba0375183e381d8c90736acaf0780a17a0fdea20094525dcbf6aa44fbb4cb8bf6e7d9affd002ef979fb6cff1be070080caaa7e359046c5a64796731f5dc84db168b9fb551b340015297318256cdbb31a583e3ecaa3a5c5fb6916c2ffee464e969efef921e8e897057e3ecad71507f8a25d6346899c6c6dc5f619af9d8af885314d5e7b6ea1fb85b2a793d31e7fcfdcb369bab8988b8c161f6f8bdc3dc8c3ecbf4f786a4ad4956034ecf502b67ee23e39190a129449996a7fa56c6e1c61b431e810e1c79dbbecc909b7539cf3b35376000967bac12165bb69f", 0xfd}, {&(0x7f0000000800)="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", 0x1000}], 0x8, &(0x7f0000000680)="bd0e054a5420924d5186b720559b4fc9e3fb8cbbdce4987a70b7b1c2cb7c57", 0x1f, 0x11}, 0x4c800) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000018c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x84) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r6, 0x6}}, 0x10) 417.606175ms ago: executing program 3 (id=1321): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f00000000c0)={0x8080000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) r3 = memfd_create(&(0x7f0000000600)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8N\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xa6<\x13\xfe\x04\x00\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\x89\xf7\xb6\xed\xd0\xc4\x84/bC\x98\xf9\x92\xc7\xa6\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\x84\x17\xf4\'y\x17?\xc5\x90\xcci\xdc\xa7\a\xe2J8x\xad/\xba\x01mJ\x7f\xe4\xe9\x00\x00\x00\x00Y\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xf0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&5\xefD\x04\x160\xafy\x02\x9f\xc8\xedO\x00\xbf\x1d\x06\x84\x00'/229, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) ftruncate(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 268.151554ms ago: executing program 1 (id=1322): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x75, 0xc8, @any, 0x0, 0x9, 0x11, 0x8, 0x6, 0xd1}}}, 0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x1, 0x0, 0x20000, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000010000000000080008000100000000ff", 0x24) 267.841107ms ago: executing program 3 (id=1323): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40020400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) (async) r7 = socket$kcm(0x11, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0412e4aaa4aabaaa1009027b78dad74753ecaa7d7185e3b8bd7ebf1ed901fa49ebe11b1cad23eee3feb518fbefa508000000000000000000"], 0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000540)=0xc) setresuid(r8, r8, r8) (async) r9 = geteuid() sendmsg$netlink(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc, &(0x7f0000000280)=[{&(0x7f00000005c0)={0x574, 0x3a, 0x2, 0x70bd28, 0x25dfdbff, "", [@generic="6d9ee0b30f834aa710495be7c28afeb150e182ac36cd47076b814552f7fdac782987ec2b3521232988ceb89a2ed1d80fa204db975614a41d2612d817c4354eab51171d23ffe70107384a3a87048cfb315a895ee229627ae745c6382fd906ebdab9cfb8322816126b1ab6abedc45ef804315443360bb311f283366d78a864eecfaa8c1d65d8a4c3721c97188d8f5b83e30c24ef891e9ae8ff5aa313e4c77fcde9954e35e122f47a8854fddd8f8d3b44f81c4d0d209c6247bf26add1d9397d106c09c50c4f150a51ea89afad7324963380068bc3a71c209a42d03bbb48409e7eae2206abb3adaf3ee9d720bce6c63fcca2dcf3", @generic="a8ccb3d5a56c23dccf28537595d4f7e72751c97985f5ae1d39615d95625517c28e534a1e00d7ad23bec866222f308204b3a9446e9bebfd7f6c4d8db8e4b13866a071783e776f0271744622924b5c7e8c519e4373bee5c3a6c88914cde3ce484e391b34708ac49d580c24e9f2b145d4aa2bc3230d862d85c9814345bf4024b2397753715b7828640c1f0420c6746fcb31bae625b24bbe4003d029b2bea72018cad50558d1e40a032eab1295b2cf4663034ae27792bd1259b8a17edee21523d783c603c9c1973ec7d9fb2565abb83a718aba03b2801d160f94a8e3c3df54bc4cac73d7be3dfd476f81b5a4c68ac5a5", @nested={0x291, 0x25, 0x0, 0x1, [@generic="fd519e3f727f5cef4411b135a0a889d36a1e6a2635de91160bd25db73f25d74e032f435f2000265e64911922ad90f52876d6b331b626bafbcfdf2d0c6b0c3a45f6a0d0858a60d5264b0194f0a06b127aaf5048462a6c661e54ef8f51be57d9a083", @typed={0x8, 0xf1, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x139}, @typed={0xca, 0xbd, 0x0, 0x0, @binary="dfd5d80d378b638275517c7ac9dccb1fffccdd3da20c6c0f9029dc6c1e10b26fc57d32283dcbedeb60a47c38ad9a484cee95321d7f6c840226d10056baeeef46249bad86e8ed95bf7382778d4ffdba95f06fe6f456568ad7cb0499b1ea794ec3b0605975912a1ddd08cc6cfff00d43204519c8c67d397ed14cf52ebcf597f40780b1e55b8b63f0444f6d2449eae39e1839944aa9afd4d188274ca3b31bb8cf92f74d7387627643107dacbb8d13e5f9a44f0f6f6181910d114160927d5ec3d69df814fa0012d2"}, @typed={0x8, 0x14a, 0x0, 0x0, @uid=r9}, @generic="9389b3904c90b782b46ed3887dbfad5158f828232122e5aba9f287134cdd4b7e3e33fd28c773657e5d68f821f756ca5a6dff819189d0c585a4719ba1055eb531429cab6cdd4a2d54bb356c4a7e4f", @typed={0x8, 0x150, 0x0, 0x0, @ipv4=@loopback}, @generic="8aa04f0131de26613697134a6aadaefdd14a9981717eb2b76ff3cbf2a54739e374aad049ca9d9c298bd66c0ceed7450038ed653a83197aae1e2868cf56ff353b1f9dbfad59c400238034817953dcf8c20c0276c99c99fabbf80f00f24cb169144cb54d7d4923727e4a0ea8d50bd604b8a1e064ac56069cba635683e5e59fa5c85750d1d47ffd2fc7a9a7b715db41a8352d82df780b6e161d5900da62a32ecd73acdd582dcd5f4d79e7b3066d777ab5ed4daf0362b83fe3eed52055c08ad9604a7f6bb9b8d09217fafc95258acc020e5dc53f98ae9bcafe", @generic="54124f596348a6e90ddcb21a0d69c8040627bf9353aea4"]}, @typed={0x1f, 0x3c, 0x0, 0x0, @binary="485cae85fc03d9555d0b70c10e6dbdb5b345fdaef920c6758a39d9"}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x6}, @nested={0xc4, 0x85, 0x0, 0x1, [@generic="ee9c45f6dc55a8b358afa111516fef04774552ab6bca167f5891d62fc6775dd4ab4297785b09df03700e0c8edc8f2d2947cbc495c219b804326e86e108e15724401ed4d944d8381511e110c39e4d4773a5d5cb4ae2742faf69ba249127bbd5896b1d8d8762d4ca98ae5d71fbe75bf2517f5944f7013c6fe302690ad7bca60a1246e2bec69036bb7750d327351e5c20776811422c927a04bf2c57a4874b6008d6830ee4874255f3495cfb6ecd26b6c49d31705dee45ca7b0fa9d416ae2f16b80c"]}]}, 0x574}, {&(0x7f0000000b40)={0x61c, 0x2d, 0x8, 0x70bd25, 0x25dfdbfc, "", [@nested={0x17a, 0x90, 0x0, 0x1, [@generic="2e6eac312f2ee8fb6486fa567f1b788d84393bba0b70ed0a5521ef613dc4c46128584ca010a9bf092dc2743307be827b00e749343f75c329360b1a17b037b738655d8ba83e58f0944aa6a36174eec1c4fdd05a1fce8f04a70a6cea02cecf0baf6cdf4d64131864d411313d72992b5bbfe2c6b517c9a40a066a7f34dc092e", @generic="5c3d4edd47155093654b943447572df4f75c", @typed={0x4, 0x71}, @generic="e67667709a68ce576fe29975df055d08b70a83e24cd83f2a866c31f318", @generic="b61ab4c5356b55cb118b27269026415f3dd09b2223a8dc09219096e31d26842efcfa738d6696a7eb141d9eeef023ae9499a8a525fe244e6482a3a96102fa24501aea712f4b8ba93b13529c46c2bf80899230a14e93d7099929e155894063799fc39caef83c690d51248b3ccd54d8addd6ada518a70fa2f0b97d8d80b580a43ad3279dd7c09c811d0fd2dc29f36f036cbbdf5fe1755fa535c025f5eb37d14da9748792b8f5f817274c2f6b28e9f3c00580e412abae596223a3cad2ed1cb2d5c1c5076d080ff"]}, @nested={0x186, 0x60, 0x0, 0x1, [@generic="bba241d634bc2120a4b061c68473fcbbbc5bb306e46a79ef8efff3f62a4fa086ab49de1a0e2fe1e885da2852997eb392b59263bcae27067c833b3f4c19ee7e5de4c8c7c6f9e71977108086563f0d0b062512e7e0dd36a1f6640842f48d302f05b76acf213379be66", @typed={0x8, 0x115, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xd}, @generic="1709390860e3f32fdd78d8fb1c5d3dab1f4858f80e96f4aa86c5a1fee2e7e89a3c1af3259ff110120a03241fbd084264d8b863b54963a517d159222db98979dd8a4e2c9b6ed0661f1fc6217bf86dd515ccea87999a6d8884c8a19d9a1bf09c4636d5ea4fff2fafe5bf613b039feded54a5b53c9477060aa21f468682ea98afc42617c2dd4b18", @generic="090a17fdd4dcaa6305d4041740ef33b409d1f05dfe898c666273c4b8de02a664c8085c8c121fd6a59dfcd4e5f8b22ae52fbd19b2909be34cabcf0a65555aca508fdf7e3913922b20f4baf044fe154142e09af698f7334aee7002a884811482eeb95cfdcb97d30ed9b2bba959c4c360edfb440e6f822455035f1dc11bd0e94ac0", @nested={0x4, 0x122}, @typed={0x4, 0x86}]}, @nested={0xf2, 0x136, 0x0, 0x1, [@generic="16c3a0a5abb3a9491de157a6e77b61c5b84388f631bccb52794432b5f0dceb725d2d50efb15068700ecf776f3fad3f10d9fde72748645096d784feee6ac212b8a4d8dc8d509ab2c673991df8ec7d8e48ec824ab8d49923038bb3aa80c253da61143b4f3afe7507226df82739acc36487812b1b877b2e356050de70fe4e5d140263f4de5ab5a5f2c24123355a1253cccea01254ce7a5bff3d183ffe7b41cc6a403a4de5cf8bc1e952e7f5b5d30254b1dc11e8ae7707c65396b15553e651d3da7b97138107791808fc8377e1b129e8e19d92df9febb3867af8a024158811b187233e9e", @typed={0x4, 0x14b}, @nested={0x4, 0x93}, @nested={0x4, 0xf5}]}, @generic="f5e2d378486ef99065d7d6532e485d4a91b57e14fc3d4d90ce8ffc30cb21cb4abf2ae54c56515d2e678a4c85cd4b7b96b897a64ea6cda86dede962337ebf1e3a095ee8b2a9b4eae79174ba70ceb6fef5b05033d7ac92991b11f7c6dc8c0491", @nested={0x24, 0xc5, 0x0, 0x1, [@generic="f10090420df423335cfef50aafe32919c85050ec24a7d439ad143113da9ebbf1"]}, @typed={0x8, 0x11d, 0x0, 0x0, @fd=r2}, @nested={0x186, 0x10c, 0x0, 0x1, [@nested={0x4, 0xcd}, @generic="d659c81c011b6381d8b7b0943be1ba48c59792599ab9e5cf8175950fa24d874f25bcc7954409841a709f2d883c086133e1bbec7999695cb977584b1e1286b98af482cf49edea4a8b44a35316348fc69128526c0246fc2a1673317d010729bd11b18b2d3d0ccfe68caae645d5529d60aaaf779ae4e6880db35ab17300999464eeef8a7ed37ba5cbdc7b856b4a0791474797d3bc82c0ef4fef2718c6ad0e93cd94c340fe764959959a3abdd752255ce6701215eb1b3489cbd7dd493f21bfba8211ba614c77826a0cbf6990ffd007b24ca2634436fcdc31f74879", @nested={0x4, 0x32}, @generic="2a396eb71c2ccd2663579e97d5c61f62890e3804689e8047c6786d65bef0a8e48ddcdfb846df4efd4cdd3d5ddaf438889691b638078f043a30175dc7fb8638f46f8bc243b7b844fc60da1cf45dd9ea1384e01aaeb76c87b7492e9e21f63a5f68f41da3ca3f40d4e5880e3bd094b8f864f210dedb55a8691ae19a6ca4ea7f834e75431e6fb5f4e3b952a5f34e1d0cdcf8826d06a3876aebdbaf1231d3b539ef1020"]}]}, 0x61c}, {&(0x7f0000001300)={0x178, 0x33, 0x1, 0x70bd25, 0x25dfdbfb, "", [@generic="916d89b0683b896d6fdabf6d708dec20b070ee9bef26122968c4575ad40d1461ed0a79acf606b79ed4b0d2960bef5e4b4b9e6ae448b1ea03a44a1fe1aaad2e5ff389e4ed51989b05d6f5329ef3df85d22ac3d7b38a7543675f3a7481d515916d30b417b567b697394b18e6adcde04989ed4321803a3c52e4a31cb1b05a0689f4b3ab0e69c471f90f60d6b0603355f3e5301e0cb0c260c9078e5f2886bd05847f71ac4a4dd9537aa0c9c5408af78bf003dfeebf5e6704ed96d35be6cac88f6f918a2463a631fefd8439691ef7b9b47f58426a087862bae462166113f30c332bc3724c", @nested={0x83, 0xd3, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@private1}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r6}, @generic="be111a9d138a0af8b27677b20c470daef551f8693675da32439f8c4e1c773966dc93e601b80534abf3f43946fa715b3cf3c11da72e500fe55e6c906d5ccb31", @typed={0x8, 0xb4, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x6d, 0x0, 0x0, @uid=r6}]}]}, 0x178}], 0x3, 0x0, 0x0, 0x4000800}, 0x100) (async) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x2) r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x10001, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r10, 0xc0585604, &(0x7f0000000500)={0x1, 0x0, {0x653e, 0x189, 0x1002, 0x4, 0x7, 0x8, 0x1, 0x7}}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x34, r11, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}}, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2204880, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x12000, 0x0) 217.693852ms ago: executing program 4 (id=1324): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 217.300106ms ago: executing program 1 (id=1325): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0xd85, 0x40003}) close_range(r1, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 137.534912ms ago: executing program 1 (id=1326): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0xf0ffffff, 0x0, 0x0, 0x0, 0x1e}, @ptr={0x73682a85, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x1000000}}, &(0x7f0000000240)={0x0, 0x28, 0x1}}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) lsm_get_self_attr(0x64, &(0x7f0000000080)={0x0, 0x0, 0x30, 0x10, ""/16}, &(0x7f00000000c0)=0x30, 0x1) creat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000300)='qnx6\x00', 0x100088f, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0xff, 0x6, 0x30040, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0xd}}, 0xffff85e0, 0x0, 0x9, 0x4, 0x22, 0x0, 0x40}, 0x9c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) 134.475354ms ago: executing program 1 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xd, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x3c, 0x11, 0x839, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xd}, {0x10}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48090}, 0x0) 134.254857ms ago: executing program 3 (id=1328): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x41, 0x0) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x545d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x41, 0x0) (async) dup(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x545d, 0x0) (async) 1.005614ms ago: executing program 1 (id=1329): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010801bd07000000000000000000007918da60aeeb306e5217cb3a5e970000000000dca3f21827f57079597a60c8b9a8647a22768a46f797284fea20381bfd942d6a3853d9396c584db479823993cf25dda4548dc200000000"], 0x30}}, 0x0) 627.515µs ago: executing program 5 (id=1330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000c5"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 0s ago: executing program 3 (id=1331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2220000000000140003006e657464657673696d3000000000000018001680140001800c0003"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = openat$procfs(0xffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xb42}) 0s ago: executing program 3 (id=1332): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0x12) (async) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_clone(0xd0483c0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff) kernel console output (not intermixed with test programs): 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.112707][ T7513] RSP: 002b:00007fb52c790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.112722][ T7513] RAX: ffffffffffffffda RBX: 00007fb52bbb5fa0 RCX: 00007fb52b98e929 [ 91.112733][ T7513] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 91.112743][ T7513] RBP: 00007fb52c790090 R08: 0000000000000000 R09: 0000000000000000 [ 91.112752][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.112762][ T7513] R13: 0000000000000000 R14: 00007fb52bbb5fa0 R15: 00007ffc7bd1fcd8 [ 91.112784][ T7513] [ 91.172858][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.529'. [ 91.194603][ T7517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7517 comm=syz.4.529 [ 91.222280][ T5959] Bluetooth: hci0: command 0x040f tx timeout [ 91.531590][ T5956] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 91.613579][ T7546] FAULT_INJECTION: forcing a failure. [ 91.613579][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 91.618049][ T7546] CPU: 2 UID: 0 PID: 7546 Comm: syz.4.539 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 91.618064][ T7546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.618072][ T7546] Call Trace: [ 91.618075][ T7546] [ 91.618080][ T7546] dump_stack_lvl+0x16c/0x1f0 [ 91.618098][ T7546] should_fail_ex+0x512/0x640 [ 91.618113][ T7546] ? __kmalloc_noprof+0xbf/0x510 [ 91.618129][ T7546] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 91.618142][ T7546] should_failslab+0xc2/0x120 [ 91.618157][ T7546] __kmalloc_noprof+0xd2/0x510 [ 91.618195][ T7546] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 91.618225][ T7546] ? cred_has_capability.isra.0+0x193/0x2f0 [ 91.618242][ T7546] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 91.618255][ T7546] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 91.618272][ T7546] ? bpf_lsm_capable+0x9/0x10 [ 91.618282][ T7546] ? security_capable+0x7e/0x260 [ 91.618297][ T7546] genl_rcv_msg+0x55c/0x800 [ 91.618310][ T7546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.618322][ T7546] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 91.618334][ T7546] ? __pfx_nl802154_del_llsec_seclevel+0x10/0x10 [ 91.618345][ T7546] ? __pfx_nl802154_post_doit+0x10/0x10 [ 91.618357][ T7546] ? __lock_acquire+0x622/0x1c90 [ 91.618369][ T7546] netlink_rcv_skb+0x155/0x420 [ 91.618379][ T7546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.618391][ T7546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.618406][ T7546] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.618422][ T7546] ? is_vmalloc_addr+0x86/0xa0 [ 91.618437][ T7546] genl_rcv+0x28/0x40 [ 91.618446][ T7546] netlink_unicast+0x58d/0x850 [ 91.618458][ T7546] ? __pfx_netlink_unicast+0x10/0x10 [ 91.618471][ T7546] netlink_sendmsg+0x8d1/0xdd0 [ 91.618483][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.618499][ T7546] ____sys_sendmsg+0xa98/0xc70 [ 91.618513][ T7546] ? copy_msghdr_from_user+0x10a/0x160 [ 91.618532][ T7546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.618561][ T7546] ___sys_sendmsg+0x134/0x1d0 [ 91.618585][ T7546] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.618605][ T7546] ? __lock_acquire+0x622/0x1c90 [ 91.618651][ T7546] __sys_sendmsg+0x16d/0x220 [ 91.618672][ T7546] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.618695][ T7546] do_syscall_64+0xcd/0x4c0 [ 91.618711][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.618721][ T7546] RIP: 0033:0x7f350a18e929 [ 91.618730][ T7546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.618740][ T7546] RSP: 002b:00007f350b006038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.618750][ T7546] RAX: ffffffffffffffda RBX: 00007f350a3b5fa0 RCX: 00007f350a18e929 [ 91.618756][ T7546] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 91.618762][ T7546] RBP: 00007f350b006090 R08: 0000000000000000 R09: 0000000000000000 [ 91.618768][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.618774][ T7546] R13: 0000000000000000 R14: 00007f350a3b5fa0 R15: 00007ffe80dddde8 [ 91.618787][ T7546] [ 91.680744][ T5956] usb 7-1: Using ep0 maxpacket: 8 [ 91.682466][ C2] vkms_vblank_simulate: vblank timer overrun [ 91.685174][ T5956] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 91.747614][ T5956] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.754170][ T5956] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.757216][ T5956] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.760378][ T5956] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.765764][ T5956] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.769351][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.806888][ T7560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.543'. [ 91.807076][ T7564] netlink: 48 bytes leftover after parsing attributes in process `syz.1.543'. [ 91.905647][ T7570] syz_tun: entered allmulticast mode [ 91.942850][ T7570] dvmrp8: entered allmulticast mode [ 91.984964][ T5956] usb 7-1: usb_control_msg returned -32 [ 91.987296][ T5956] usbtmc 7-1:16.0: can't read capabilities [ 92.012598][ T5956] usb 7-1: USB disconnect, device number 10 [ 92.027825][ T7569] syz_tun: left allmulticast mode [ 92.066137][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 92.387114][ T7589] FAULT_INJECTION: forcing a failure. [ 92.387114][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 92.392213][ T7589] CPU: 0 UID: 0 PID: 7589 Comm: syz.4.550 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 92.392236][ T7589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.392247][ T7589] Call Trace: [ 92.392253][ T7589] [ 92.392260][ T7589] dump_stack_lvl+0x16c/0x1f0 [ 92.392289][ T7589] should_fail_ex+0x512/0x640 [ 92.392311][ T7589] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 92.392338][ T7589] should_failslab+0xc2/0x120 [ 92.392364][ T7589] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 92.392387][ T7589] ? __alloc_skb+0x2b2/0x380 [ 92.392412][ T7589] __alloc_skb+0x2b2/0x380 [ 92.392434][ T7589] ? __pfx___alloc_skb+0x10/0x10 [ 92.392456][ T7589] ? genl_rcv_msg+0x4bb/0x800 [ 92.392483][ T7589] netlink_ack+0x15d/0xb80 [ 92.392501][ T7589] ? __lock_acquire+0x622/0x1c90 [ 92.392521][ T7589] netlink_rcv_skb+0x332/0x420 [ 92.392538][ T7589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.392559][ T7589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.392582][ T7589] ? netlink_deliver_tap+0x1ae/0xd30 [ 92.392601][ T7589] ? is_vmalloc_addr+0x86/0xa0 [ 92.392621][ T7589] genl_rcv+0x28/0x40 [ 92.392637][ T7589] netlink_unicast+0x58d/0x850 [ 92.392676][ T7589] ? __pfx_netlink_unicast+0x10/0x10 [ 92.392702][ T7589] netlink_sendmsg+0x8d1/0xdd0 [ 92.392722][ T7589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.392748][ T7589] ____sys_sendmsg+0xa98/0xc70 [ 92.392767][ T7589] ? copy_msghdr_from_user+0x10a/0x160 [ 92.392790][ T7589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.392819][ T7589] ___sys_sendmsg+0x134/0x1d0 [ 92.392844][ T7589] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.392863][ T7589] ? __lock_acquire+0x622/0x1c90 [ 92.392912][ T7589] __sys_sendmsg+0x16d/0x220 [ 92.392935][ T7589] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.392976][ T7589] do_syscall_64+0xcd/0x4c0 [ 92.393003][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.393020][ T7589] RIP: 0033:0x7f350a18e929 [ 92.393034][ T7589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.393050][ T7589] RSP: 002b:00007f350b006038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.393066][ T7589] RAX: ffffffffffffffda RBX: 00007f350a3b5fa0 RCX: 00007f350a18e929 [ 92.393077][ T7589] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 92.393087][ T7589] RBP: 00007f350b006090 R08: 0000000000000000 R09: 0000000000000000 [ 92.393102][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.393112][ T7589] R13: 0000000000000000 R14: 00007f350a3b5fa0 R15: 00007ffe80dddde8 [ 92.393136][ T7589] [ 92.424646][ T5959] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 92.592243][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 92.595137][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 92.598498][ T7597] netlink: 'syz.2.554': attribute type 10 has an invalid length. [ 92.604916][ T7597] team0: Port device wlan1 added [ 92.930768][ T7609] team0: Port device wlan1 removed [ 92.968943][ T7611] QAT: Stopping all acceleration devices. [ 93.146861][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 93.146877][ T40] audit: type=1400 audit(93.079:1428): avc: denied { create } for pid=7625 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.154770][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 93.156749][ T40] audit: type=1400 audit(93.079:1429): avc: denied { bind } for pid=7625 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.158892][ T7626] netlink: 244 bytes leftover after parsing attributes in process `syz.1.564'. [ 93.170919][ T40] audit: type=1400 audit(93.079:1430): avc: denied { setopt } for pid=7625 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.179295][ T40] audit: type=1400 audit(93.109:1431): avc: denied { read } for pid=7623 comm="syz.3.563" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.189783][ T40] audit: type=1400 audit(93.109:1432): avc: denied { open } for pid=7623 comm="syz.3.563" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.199201][ T40] audit: type=1400 audit(93.109:1433): avc: denied { ioctl } for pid=7623 comm="syz.3.563" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.213072][ T40] audit: type=1400 audit(93.129:1434): avc: denied { read write } for pid=5954 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.220514][ T40] audit: type=1400 audit(93.139:1435): avc: denied { open } for pid=5954 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.227814][ T40] audit: type=1400 audit(93.139:1436): avc: denied { ioctl } for pid=5954 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.237599][ T40] audit: type=1400 audit(93.149:1437): avc: denied { create } for pid=7628 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.270975][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 93.310919][ T5959] Bluetooth: hci0: command 0x040f tx timeout [ 93.388700][ T7624] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 93.430769][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 93.435011][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 93.438386][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.443417][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.447860][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.452121][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.457548][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.460637][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.668038][ T24] usb 9-1: usb_control_msg returned -32 [ 93.671808][ T24] usbtmc 9-1:16.0: can't read capabilities [ 93.676887][ T24] usb 9-1: USB disconnect, device number 4 [ 93.932087][ T7655] 9p: Unknown Cache mode or invalid value fscacheyƒ{4hèÆzW [ 93.932087][ T7655] |DÅ*o8z@¡Èˆ”dù ÄÍWÓ˜wß²ÿænéGK.e [ 93.932087][ T7655] æ0¯Ð£7¬]X¼µå#%|‡ [ 94.048527][ T7662] netlink: 'syz.3.575': attribute type 8 has an invalid length. [ 94.049002][ T7663] netlink: 'syz.3.575': attribute type 8 has an invalid length. [ 94.167118][ T7673] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967294 > 32) [ 94.174519][ T7674] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967294 > 32) [ 94.288539][ T7680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=7680 comm=syz.4.582 [ 94.293599][ T7680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63 sclass=netlink_tcpdiag_socket pid=7680 comm=syz.4.582 [ 94.298388][ T7680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7680 comm=syz.4.582 [ 94.305068][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.308605][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.496927][ T7688] SELinux: ebitmap: truncated map [ 94.506717][ T7688] SELinux: failed to load policy [ 94.560778][ T59] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 94.712228][ T59] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.719371][ T59] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 94.723200][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 94.726349][ T59] usb 9-1: Product: syz [ 94.727982][ T59] usb 9-1: Manufacturer: syz [ 94.729857][ T59] usb 9-1: SerialNumber: syz [ 94.944334][ T59] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 95.073188][ T7718] SELinux: failed to load policy [ 95.381115][ T5959] Bluetooth: hci0: command 0x040f tx timeout [ 95.932373][ T7732] /dev/sr0: Can't open blockdev [ 96.071890][ T7736] program syz.2.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.450884][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 96.600778][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 96.609619][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 96.613953][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 96.617224][ T10] usb 7-1: can't read configurations, error -71 [ 96.760751][ T7740] __nla_validate_parse: 3 callbacks suppressed [ 96.760766][ T7740] netlink: 102 bytes leftover after parsing attributes in process `syz.1.603'. [ 96.766937][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 97.252242][ T24] usb 9-1: USB disconnect, device number 5 [ 97.261632][ T24] usblp0: removed [ 97.339290][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 97.355057][ T7764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 97.357881][ T7764] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.362829][ T7764] vhci_hcd vhci_hcd.0: Device attached [ 97.365476][ T7767] No control pipe specified [ 97.369960][ T7764] tun0: tun_chr_ioctl cmd 1074025676 [ 97.372685][ T7764] tun0: owner set to 0 [ 97.375338][ T7764] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 97.440104][ T7765] vhci_hcd: connection closed [ 97.442479][ T12] vhci_hcd: stop threads [ 97.447490][ T12] vhci_hcd: release socket [ 97.449438][ T12] vhci_hcd: disconnect device [ 97.460874][ T5959] Bluetooth: hci0: command 0x040f tx timeout [ 97.803976][ T7778] loop6: detected capacity change from 0 to 524287487 [ 97.806615][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.809805][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.813309][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.816765][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.820069][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.823485][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.826768][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.829933][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.833460][ T7778] ldm_validate_partition_table(): Disk read failed. [ 97.836187][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.840356][ T7778] Buffer I/O error on dev loop6, logical block 0, async page read [ 97.843963][ T7778] Dev loop6: unable to read RDB block 0 [ 97.847469][ T7778] loop6: unable to read partition table [ 97.850449][ T7778] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 97.859424][ T7778] ldm_validate_partition_table(): Disk read failed. [ 97.862777][ T7778] Dev loop6: unable to read RDB block 0 [ 97.865526][ T7778] loop6: unable to read partition table [ 98.065236][ T7784] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 98.223172][ T7787] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 98.269138][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 98.269154][ T40] audit: type=1400 audit(98.199:1589): avc: denied { read write } for pid=7791 comm="syz.1.620" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.284561][ T40] audit: type=1400 audit(98.199:1590): avc: denied { open } for pid=7791 comm="syz.1.620" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.294948][ T40] audit: type=1400 audit(98.199:1591): avc: denied { mounton } for pid=7791 comm="syz.1.620" path="/147/file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.305047][ T40] audit: type=1400 audit(98.209:1592): avc: denied { mount } for pid=7791 comm="syz.1.620" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.313931][ T40] audit: type=1400 audit(98.219:1593): avc: denied { write } for pid=7793 comm="syz.2.619" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.356967][ T40] audit: type=1400 audit(98.289:1594): avc: denied { read write } for pid=7800 comm="syz.4.621" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.363130][ T5963] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 98.366347][ T40] audit: type=1400 audit(98.289:1595): avc: denied { open } for pid=7800 comm="syz.4.621" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.406582][ T40] audit: type=1400 audit(98.339:1596): avc: denied { create } for pid=7802 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.411456][ T7803] rdma_rxe: rxe_newlink: failed to add syz_tun [ 98.414587][ T40] audit: type=1400 audit(98.339:1597): avc: denied { write } for pid=7802 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.494696][ T40] audit: type=1400 audit(98.429:1598): avc: denied { create } for pid=7807 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 98.888322][ T7816] tmpfs: Bad value for 'mpol' [ 98.948448][ T7823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.629'. [ 99.004170][ T7827] rdma_rxe: rxe_newlink: failed to add syz_tun [ 99.066204][ T7831] bridge_slave_0: invalid flags given to default FDB implementation [ 99.156813][ T7835] netlink: 'syz.2.634': attribute type 12 has an invalid length. [ 99.240895][ T7844] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.633'. [ 99.540784][ T5963] Bluetooth: hci0: command 0x040f tx timeout [ 99.569461][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.620052][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 99.622967][ T24] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 99.730245][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.738799][ T7886] program syz.3.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.773214][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 99.778394][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.783682][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.788442][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.803375][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.808396][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.815642][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 99.817996][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.823779][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.827385][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.831681][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.835862][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 99.838187][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.841869][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.845892][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.848882][ T7895] autofs4:pid:7895:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1986356271.1668118063), cmd(0xc018937d) [ 99.850241][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.861558][ T7895] autofs4:pid:7895:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937d) [ 99.866563][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.869900][ T24] usb 6-1: string descriptor 0 read error: -22 [ 99.873745][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.876674][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.881405][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.884766][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.892336][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.895684][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.898928][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 99.919373][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.654'. [ 99.943316][ T7900] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 99.973711][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.064522][ T7903] netlink: 292 bytes leftover after parsing attributes in process `syz.3.655'. [ 100.113840][ T7905] kvm: Disabled LAPIC found during irq injection [ 100.151829][ T7894] chnl_net:caif_netlink_parms(): no params data found [ 100.382963][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 100.385712][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 100.735236][ T77] . (unregistering): Released all slaves [ 100.775101][ T7917] vlan2: entered allmulticast mode [ 100.777394][ T7917] team0: entered allmulticast mode [ 100.779699][ T7917] team0: Device vlan2 is already an upper device of the team interface [ 100.851817][ T77] tipc: Left network mode [ 100.881823][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.884715][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.887613][ T7894] bridge_slave_0: entered allmulticast mode [ 100.892922][ T7894] bridge_slave_0: entered promiscuous mode [ 100.920847][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.924005][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.927058][ T7894] bridge_slave_1: entered allmulticast mode [ 100.931519][ T7894] bridge_slave_1: entered promiscuous mode [ 100.965105][ T7930] binder: 7928:7930 ioctl 40046205 0 returned -22 [ 101.010380][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.030463][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.037767][ T7933] Cannot find add_set index 0 as target [ 101.085558][ T7894] team0: Port device team_slave_0 added [ 101.095678][ T7894] team0: Port device team_slave_1 added [ 101.186344][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.188447][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.196367][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.202738][ T77] hsr_slave_0: left promiscuous mode [ 101.204906][ T77] hsr_slave_1: left promiscuous mode [ 101.238615][ T77] veth1_macvtap: left promiscuous mode [ 101.241409][ T77] veth0_macvtap: left promiscuous mode [ 101.243880][ T77] veth1_vlan: left promiscuous mode [ 101.246271][ T77] veth0_vlan: left promiscuous mode [ 101.378021][ T7949] binder: 7946:7949 ioctl c0306201 200000000640 returned -22 [ 101.620894][ T5959] Bluetooth: hci0: command 0x040f tx timeout [ 101.943756][ T5959] Bluetooth: hci2: command tx timeout [ 101.963502][ T7951] random: crng reseeded on system resumption [ 102.446103][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.449051][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.459417][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.484036][ T24] usb 6-1: USB disconnect, device number 7 [ 102.561859][ T7894] hsr_slave_0: entered promiscuous mode [ 102.565022][ T7894] hsr_slave_1: entered promiscuous mode [ 102.568055][ T7894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.571789][ T7894] Cannot create hsr debugfs directory [ 102.576415][ T7967] input: syz1 as /devices/virtual/input/input9 [ 102.598936][ T7967] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 102.602324][ T7967] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 102.606245][ T7967] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 102.608736][ T7967] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 102.728004][ T7894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.736397][ T7894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.744404][ T7894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.750999][ T7894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.814384][ T7977] netlink: 'syz.4.677': attribute type 64 has an invalid length. [ 102.817686][ T7977] netlink: 'syz.4.677': attribute type 4 has an invalid length. [ 102.820896][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.823192][ T7894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.827979][ T7977] netlink: 152 bytes leftover after parsing attributes in process `syz.4.677'. [ 102.843062][ T7894] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.851215][ T77] IPVS: stop unused estimator thread 0... [ 102.858549][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.861410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.865940][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.868672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.876072][ T7979] random: crng reseeded on system resumption [ 102.970848][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 102.974591][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.978760][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.982728][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.983596][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.987651][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 102.994211][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.998854][ T24] usb 6-1: config 0 descriptor?? [ 103.003898][ T7986] affs: No valid root block on device nullb0 [ 103.135202][ T7894] veth0_vlan: entered promiscuous mode [ 103.142761][ T7894] veth1_vlan: entered promiscuous mode [ 103.158384][ T7894] veth0_macvtap: entered promiscuous mode [ 103.162547][ T7894] veth1_macvtap: entered promiscuous mode [ 103.174035][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.179875][ T7894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.184883][ T7894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.187587][ T7894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.190305][ T7894] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.193740][ T7894] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.226504][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input10 [ 103.255221][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.257871][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.259408][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input11 [ 103.305740][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.308360][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.324528][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 103.324539][ T40] audit: type=1400 audit(103.259:1803): avc: denied { mounton } for pid=7894 comm="syz-executor" path="/syzkaller.TfIfQg/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 103.340019][ T40] audit: type=1400 audit(103.259:1804): avc: denied { mount } for pid=7894 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.346401][ T40] audit: type=1400 audit(103.259:1805): avc: denied { mount } for pid=7894 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.352931][ T24] kye 0003:0458:5011.0002: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 103.354196][ T40] audit: type=1400 audit(103.259:1806): avc: denied { mounton } for pid=7894 comm="syz-executor" path="/syzkaller.TfIfQg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.356241][ T8001] pim6reg: entered allmulticast mode [ 103.358014][ T8001] pim6reg: left allmulticast mode [ 103.366465][ T40] audit: type=1400 audit(103.259:1807): avc: denied { mounton } for pid=7894 comm="syz-executor" path="/syzkaller.TfIfQg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 103.379661][ T40] audit: type=1400 audit(103.269:1808): avc: denied { mounton } for pid=7894 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.389347][ T40] audit: type=1400 audit(103.269:1809): avc: denied { mount } for pid=7894 comm="syz-executor" name="/" dev="gadgetfs" ino=8612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 103.398084][ T40] audit: type=1400 audit(103.269:1810): avc: denied { mount } for pid=7894 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.412914][ T40] audit: type=1400 audit(103.269:1811): avc: denied { mounton } for pid=7894 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.422541][ T40] audit: type=1400 audit(103.269:1812): avc: denied { mount } for pid=7894 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.459661][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.683'. [ 103.702989][ T5959] Bluetooth: hci0: command 0x040f tx timeout [ 103.951688][ T8028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8028 comm=syz.4.690 [ 103.957029][ T8028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=8028 comm=syz.4.690 [ 104.020876][ T5959] Bluetooth: hci2: command tx timeout [ 104.037245][ T8032] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 104.210325][ T8036] syz1: rxe_newlink: already configured on syz_tun [ 104.352791][ C2] kye 0003:0458:5011.0002: usb_submit_urb(ctrl) failed: -1 [ 104.538707][ T8057] netlink: 'syz.3.701': attribute type 2 has an invalid length. [ 104.854015][ T8070] syz1: rxe_newlink: already configured on syz_tun [ 104.893105][ T8072] netlink: 'syz.3.706': attribute type 5 has an invalid length. [ 104.919296][ T8074] efs: device does not support 512 byte blocks [ 104.923209][ T8074] device does not support 512 byte blocks [ 104.923209][ T8074] [ 104.969188][ T8076] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 104.973973][ T8076] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 104.978179][ T8082] usb 2-1: USB disconnect, device number 2 [ 105.014953][ T8083] ISOFS: Unable to identify CD-ROM format. [ 105.131258][ T8075] [U]  [ 105.146727][ T6037] usb 6-1: USB disconnect, device number 8 [ 105.650796][ T6037] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 105.811074][ T6037] usb 6-1: Using ep0 maxpacket: 8 [ 105.814609][ T6037] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.817625][ T6037] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.821362][ T6037] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.824465][ T6037] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.828482][ T6037] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.832234][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.907348][ T8123] random: crng reseeded on system resumption [ 106.042246][ T6037] usb 6-1: GET_CAPABILITIES returned 0 [ 106.044075][ T6037] usbtmc 6-1:16.0: can't read capabilities [ 106.100832][ T5959] Bluetooth: hci2: command tx timeout [ 106.149160][ T8128] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 106.230758][ T6054] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 106.237972][ T8135] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 106.299204][ T10] usb 6-1: USB disconnect, device number 9 [ 106.380746][ T6054] usb 9-1: Using ep0 maxpacket: 32 [ 106.382993][ T6054] usb 9-1: too many configurations: 105, using maximum allowed: 8 [ 106.386251][ T6054] usb 9-1: config index 0 descriptor too short (expected 259, got 36) [ 106.388792][ T6054] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 106.391758][ T6054] usb 9-1: can't read configurations, error -22 [ 106.520772][ T6054] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 106.611509][ T5956] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 106.643105][ T8120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.645240][ T8120] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.668475][ T8120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.670554][ T8120] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 106.690758][ T6054] usb 9-1: Using ep0 maxpacket: 32 [ 106.694611][ T6054] usb 9-1: too many configurations: 105, using maximum allowed: 8 [ 106.698781][ T6054] usb 9-1: config index 0 descriptor too short (expected 259, got 36) [ 106.703133][ T6054] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 106.706698][ T6054] usb 9-1: can't read configurations, error -22 [ 106.710774][ T6054] usb usb9-port1: attempt power cycle [ 106.772477][ T5956] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 106.775887][ T5956] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.782806][ T5956] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 106.786407][ T5956] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 106.789643][ T5956] usb 10-1: Manufacturer: syz [ 106.802400][ T5956] usb 10-1: config 0 descriptor?? [ 106.813788][ T8149] netlink: 'syz.3.730': attribute type 39 has an invalid length. [ 106.837700][ T8151] random: crng reseeded on system resumption [ 106.860807][ T5956] rc_core: IR keymap rc-hauppauge not found [ 106.863167][ T5956] Registered IR keymap rc-empty [ 106.866266][ T5956] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 106.871898][ T5956] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input12 [ 106.872552][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 107.011766][ T6037] usb 10-1: USB disconnect, device number 2 [ 107.068560][ T6054] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 107.091278][ T6054] usb 9-1: Using ep0 maxpacket: 32 [ 107.094509][ T6054] usb 9-1: too many configurations: 105, using maximum allowed: 8 [ 107.097737][ T6054] usb 9-1: config index 0 descriptor too short (expected 259, got 36) [ 107.100282][ T6054] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 107.103321][ T6054] usb 9-1: can't read configurations, error -22 [ 107.230938][ T6054] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 107.261489][ T6054] usb 9-1: Using ep0 maxpacket: 32 [ 107.264204][ T6054] usb 9-1: too many configurations: 105, using maximum allowed: 8 [ 107.268653][ T6054] usb 9-1: config index 0 descriptor too short (expected 259, got 36) [ 107.276929][ T6054] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 107.280436][ T6054] usb 9-1: can't read configurations, error -22 [ 107.283829][ T6054] usb usb9-port1: unable to enumerate USB device [ 107.551571][ T8161] program syz.5.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.640488][ T8165] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 108.012909][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 108.208924][ T8208] netlink: 27 bytes leftover after parsing attributes in process `syz.1.749'. [ 108.387079][ T40] kauditd_printk_skb: 253 callbacks suppressed [ 108.387089][ T40] audit: type=1400 audit(108.319:2066): avc: denied { create } for pid=8215 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.395022][ T40] audit: type=1400 audit(108.329:2067): avc: denied { getopt } for pid=8215 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.400920][ T40] audit: type=1400 audit(108.329:2068): avc: denied { map_create } for pid=8215 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.411995][ T40] audit: type=1400 audit(108.329:2069): avc: denied { map_read map_write } for pid=8215 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 108.491371][ T40] audit: type=1400 audit(108.419:2070): avc: denied { create } for pid=8223 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.497474][ T40] audit: type=1400 audit(108.419:2071): avc: denied { write } for pid=8223 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.506305][ T40] audit: type=1400 audit(108.419:2072): avc: denied { nlmsg_write } for pid=8223 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.511024][ T8225] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 108.517318][ T8224] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 108.519766][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 109.027060][ T40] audit: type=1400 audit(108.959:2073): avc: denied { mounton } for pid=8226 comm="syz.4.758" path="/65/file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 109.030283][ T8227] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 109.033676][ T40] audit: type=1400 audit(108.959:2074): avc: denied { mount } for pid=8226 comm="syz.4.758" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.037630][ T8227] ======================================================= [ 109.037630][ T8227] WARNING: The mand mount option has been deprecated and [ 109.037630][ T8227] and is ignored by this kernel. Remove the mand [ 109.037630][ T8227] option from the mount to silence this warning. [ 109.037630][ T8227] ======================================================= [ 109.042845][ T40] audit: type=1400 audit(108.959:2075): avc: denied { unmount } for pid=7894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 109.055776][ T8227] devtmpfs: Cannot change global quota limit on remount [ 109.108675][ T8231] syz.4.759: attempt to access beyond end of device [ 109.108675][ T8231] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 109.114576][ T8231] syz.4.759: attempt to access beyond end of device [ 109.114576][ T8231] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 109.118800][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 109.122239][ T8231] syz.4.759: attempt to access beyond end of device [ 109.122239][ T8231] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 109.126257][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 109.129110][ T8231] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 109.131927][ T8231] UDF-fs: Scanning with blocksize 512 failed [ 109.135287][ T8231] syz.4.759: attempt to access beyond end of device [ 109.135287][ T8231] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 109.139365][ T8231] syz.4.759: attempt to access beyond end of device [ 109.139365][ T8231] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 109.146464][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 109.149960][ T8231] syz.4.759: attempt to access beyond end of device [ 109.149960][ T8231] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 109.154799][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 109.158786][ T8231] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 109.162103][ T8231] UDF-fs: Scanning with blocksize 1024 failed [ 109.164894][ T8231] syz.4.759: attempt to access beyond end of device [ 109.164894][ T8231] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 109.169077][ T8231] syz.4.759: attempt to access beyond end of device [ 109.169077][ T8231] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 109.175036][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 109.178607][ T8231] syz.4.759: attempt to access beyond end of device [ 109.178607][ T8231] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 109.182915][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 109.185881][ T8231] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 109.188249][ T8231] UDF-fs: Scanning with blocksize 2048 failed [ 109.191043][ T8231] syz.4.759: attempt to access beyond end of device [ 109.191043][ T8231] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 109.195079][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 109.198051][ T8231] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 109.201661][ T8231] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 109.204836][ T8231] UDF-fs: Scanning with blocksize 4096 failed [ 109.207459][ T8231] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 109.288004][ T8242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.762'. [ 109.294111][ T8242] netlink: 'syz.4.762': attribute type 12 has an invalid length. [ 109.347676][ T8251] rdma_rxe: rxe_newlink: failed to add syz_tun [ 109.393307][ T8253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=8253 comm=syz.5.766 [ 109.410879][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.5.766'. [ 109.457996][ T8261] syz_tun: entered allmulticast mode [ 109.460634][ T8261] syz_tun: left allmulticast mode [ 109.517872][ T8264] Driver unsupported XDP return value 0 on prog (id 82) dev N/A, expect packet loss! [ 109.590857][ T8266] openvswitch: netlink: IPv4 tunnel dst address is zero [ 109.637972][ T8270] netlink: 'syz.4.773': attribute type 58 has an invalid length. [ 109.647864][ T8270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.773'. [ 109.651785][ T8270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.773'. [ 109.655215][ T8270] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 109.719472][ T8277] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.810093][ T8286] ufs: You didn't specify the type of your ufs filesystem [ 109.810093][ T8286] [ 109.810093][ T8286] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 109.810093][ T8286] [ 109.810093][ T8286] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 109.823490][ T8286] ufs: ufstype=old is supported read-only [ 109.943703][ T8292] vivid-000: ================= START STATUS ================= [ 109.946922][ T8292] vivid-000: Radio HW Seek Mode: Bounded [ 109.948802][ T8292] vivid-000: Radio Programmable HW Seek: false [ 109.951925][ T8292] vivid-000: RDS Rx I/O Mode: Block I/O [ 109.953887][ T8292] vivid-000: Generate RBDS Instead of RDS: false [ 109.955859][ T8292] vivid-000: RDS Reception: true [ 109.957414][ T8292] vivid-000: RDS Program Type: 0 inactive [ 109.959186][ T8292] vivid-000: RDS PS Name: inactive [ 109.962402][ T8292] vivid-000: RDS Radio Text: inactive [ 109.964061][ T8292] vivid-000: RDS Traffic Announcement: false inactive [ 109.966116][ T8292] vivid-000: RDS Traffic Program: false inactive [ 109.967992][ T8292] vivid-000: RDS Music: false inactive [ 109.969672][ T8292] vivid-000: ================== END STATUS ================== [ 110.126752][ T8295] rdma_rxe: rxe_newlink: failed to add syz_tun [ 110.129217][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 110.185510][ T8306] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 110.228141][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 110.244066][ T8309] binder: 8308:8309 ioctl 540d 0 returned -22 [ 110.343287][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.791'. [ 110.559555][ T8324] rdma_rxe: rxe_newlink: failed to add syz_tun [ 110.563771][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 110.591645][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 110.592959][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.610816][ T6054] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 110.646899][ T8328] hfsplus: unable to find HFS+ superblock [ 110.743829][ T8335] 0ªî{X¹¦: renamed from macvtap0 (while UP) [ 110.747253][ T8335] 0ªî{X¹¦: entered allmulticast mode [ 110.748961][ T8335] veth0_macvtap: entered allmulticast mode [ 110.750755][ T6054] usb 10-1: device descriptor read/64, error -71 [ 110.751452][ T8335] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 110.852627][ T8338] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 110.854917][ T8338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.857878][ T8338] vhci_hcd vhci_hcd.0: Device attached [ 110.990785][ T6054] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 111.100842][ T73] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 111.130846][ T6054] usb 10-1: device descriptor read/64, error -71 [ 111.241139][ T6054] usb usb10-port1: attempt power cycle [ 111.506427][ T6037] hid (null): global environment stack underflow [ 111.511892][ T6037] hid-generic 8001:F47A:0001.0003: unknown main item tag 0x2 [ 111.514548][ T6037] hid-generic 8001:F47A:0001.0003: global environment stack underflow [ 111.517137][ T6037] hid-generic 8001:F47A:0001.0003: item 0 1 1 11 parsing failed [ 111.519845][ T6037] hid-generic 8001:F47A:0001.0003: probe with driver hid-generic failed with error -22 [ 111.580768][ T6054] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 111.602892][ T6054] usb 10-1: device descriptor read/8, error -71 [ 111.851588][ T6054] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 111.854508][ T8366] random: crng reseeded on system resumption [ 111.872339][ T6054] usb 10-1: device descriptor read/8, error -71 [ 111.982594][ T6054] usb usb10-port1: unable to enumerate USB device [ 113.092034][ T8404] __nla_validate_parse: 2 callbacks suppressed [ 113.092044][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 113.096628][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 113.099257][ T8404] netlink: 'syz.1.821': attribute type 12 has an invalid length. [ 113.290891][ T6038] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 113.444880][ T6038] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 113.448584][ T6038] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.452139][ T6038] usb 9-1: Product: syz [ 113.454054][ T6038] usb 9-1: Manufacturer: syz [ 113.456109][ T6038] usb 9-1: SerialNumber: syz [ 113.463982][ T6038] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 113.476162][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 113.476176][ T40] audit: type=1400 audit(113.409:2280): avc: denied { firmware_load } for pid=4794 comm="kworker/2:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 113.490212][ T40] audit: type=1400 audit(113.419:2281): avc: denied { setattr } for pid=8414 comm="syz.5.826" name="adsp1" dev="devtmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 113.503469][ T4794] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 113.715916][ T40] audit: type=1400 audit(113.649:2282): avc: denied { read } for pid=8399 comm="syz.4.819" dev="nsfs" ino=4026533479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.720247][ T6037] usb 9-1: USB disconnect, device number 10 [ 113.724397][ T40] audit: type=1400 audit(113.649:2283): avc: denied { open } for pid=8399 comm="syz.4.819" path="net:[4026533479]" dev="nsfs" ino=4026533479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.735529][ T40] audit: type=1400 audit(113.649:2284): avc: denied { create } for pid=8399 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.743180][ T40] audit: type=1400 audit(113.649:2285): avc: denied { getopt } for pid=8399 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.814704][ T40] audit: type=1400 audit(113.749:2286): avc: denied { mounton } for pid=8417 comm="syz.1.827" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 113.816637][ T8419] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 113.845098][ T8340] vhci_hcd: connection reset by peer [ 113.848516][ T13] vhci_hcd: stop threads [ 113.850305][ T13] vhci_hcd: release socket [ 113.852992][ T13] vhci_hcd: disconnect device [ 113.866661][ T40] audit: type=1400 audit(113.799:2287): avc: denied { create } for pid=8420 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.874512][ T40] audit: type=1400 audit(113.809:2288): avc: denied { connect } for pid=8420 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.881046][ T40] audit: type=1400 audit(113.819:2289): avc: denied { create } for pid=8420 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.021286][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 114.257065][ T8454] random: crng reseeded on system resumption [ 114.591256][ T4794] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 114.593672][ T4794] ath9k_htc: Failed to initialize the device [ 114.596140][ T6037] usb 9-1: ath9k_htc: USB layer deinitialized [ 114.867749][ T8484] random: crng reseeded on system resumption [ 115.014571][ T6037] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 115.175267][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.851'. [ 115.182096][ T6037] usb 9-1: Using ep0 maxpacket: 16 [ 115.184939][ T6037] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.188294][ T6037] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 115.191557][ T6037] usb 9-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 115.194645][ T6037] usb 9-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.198631][ T6037] usb 9-1: config 1 interface 0 has no altsetting 0 [ 115.201627][ T6037] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.204483][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.206963][ T6037] usb 9-1: SerialNumber: syz [ 115.210175][ T8470] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.213174][ T8470] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.306235][ T8508] fuse: Unknown parameter '0x0000000000000005' [ 115.352381][ T8510] random: crng reseeded on system resumption [ 115.511548][ T8513] nft_compat: unsupported protocol 0 [ 115.512295][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 115.702201][ T6037] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 115.709789][ T7566] udevd[7566]: failed to send result of seq 18129 to main daemon: Connection refused [ 115.712477][ T6037] usb 9-1: USB disconnect, device number 11 [ 115.775958][ T8530] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 115.805778][ T8534] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 115.810218][ T8533] syzkaller1: entered promiscuous mode [ 115.812499][ T8533] syzkaller1: entered allmulticast mode [ 116.022715][ T8555] random: crng reseeded on system resumption [ 116.092057][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 116.095253][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 116.151690][ T8566] netlink: 'syz.3.872': attribute type 8 has an invalid length. [ 116.219373][ T8573] batman_adv: batadv0: Adding interface: dummy0 [ 116.221925][ T8573] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 116.228584][ T6036] hid (null): bogus close delimiter [ 116.232944][ T8573] batman_adv: batadv0: Interface activated: dummy0 [ 116.234337][ T6036] hid (null): unknown global tag 0xc [ 116.238116][ T6036] hid (null): unknown global tag 0x89 [ 116.246336][ T6036] hid-generic 0002:0007:7C93.0004: unknown main item tag 0x0 [ 116.249215][ T8573] batadv0: mtu less than device minimum [ 116.249410][ T6036] hid-generic 0002:0007:7C93.0004: bogus close delimiter [ 116.250889][ T73] vhci_hcd: vhci_device speed not set [ 116.252488][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.254421][ T6036] hid-generic 0002:0007:7C93.0004: item 0 0 2 10 parsing failed [ 116.257159][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.260492][ T6036] hid-generic 0002:0007:7C93.0004: probe with driver hid-generic failed with error -22 [ 116.263823][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.273396][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.277012][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.281070][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.285320][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.288946][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.292789][ T8573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.336070][ T8581] netlink: 72 bytes leftover after parsing attributes in process `syz.1.879'. [ 116.339713][ T8580] futex_wake_op: syz.3.878 tries to shift op by 32; fix this program [ 116.370400][ T8584] random: crng reseeded on system resumption [ 116.522598][ T53] IPVS: starting estimator thread 0... [ 116.526507][ T8598] overlayfs: failed to resolve './file0/file0': -2 [ 116.551688][ T8603] ip6t_srh: unknown srh match flags 4000 [ 116.620736][ T8600] IPVS: using max 43 ests per chain, 103200 per kthread [ 116.692659][ T6054] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 116.762728][ T8615] macsec1: entered promiscuous mode [ 116.764996][ T8615] bridge0: entered promiscuous mode [ 116.767326][ T8615] macsec1: entered allmulticast mode [ 116.769697][ T8615] bridge0: entered allmulticast mode [ 116.773797][ T8615] bridge0: port 1(macsec1) entered blocking state [ 116.776556][ T8615] bridge0: port 1(macsec1) entered disabled state [ 116.782897][ T8615] bridge0: left allmulticast mode [ 116.784587][ T8615] bridge0: left promiscuous mode [ 116.808124][ T8620] syzkaller0: entered allmulticast mode [ 116.808570][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 116.813904][ T8620] tipc: Started in network mode [ 116.816918][ T8620] tipc: Node identity fe19e1189c4a, cluster identity 4711 [ 116.820125][ T8620] tipc: Enabled bearer , priority 0 [ 116.862174][ T8614] tipc: Disabling bearer [ 116.862865][ T6054] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.872973][ T6054] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.875389][ T8622] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 116.876801][ T6054] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.876820][ T6054] usb 10-1: SerialNumber: syz [ 116.952881][ T8624] xt_hashlimit: size too large, truncated to 1048576 [ 117.012701][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 117.027011][ T8634] xt_hashlimit: size too large, truncated to 1048576 [ 117.032205][ T8634] syz.4.894: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 117.037648][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.4.894 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 117.037663][ T8634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.037670][ T8634] Call Trace: [ 117.037674][ T8634] [ 117.037679][ T8634] dump_stack_lvl+0x16c/0x1f0 [ 117.037705][ T8634] warn_alloc+0x248/0x3a0 [ 117.037724][ T8634] ? __pfx_warn_alloc+0x10/0x10 [ 117.037743][ T8634] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 117.037756][ T8634] ? __vmalloc_node_noprof+0xad/0xf0 [ 117.037769][ T8634] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 117.037785][ T8634] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 117.037798][ T8634] ? rcu_is_watching+0x12/0xc0 [ 117.037813][ T8634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.037825][ T8634] ? __alloc_pages_noprof+0xb/0x1b0 [ 117.037838][ T8634] ? ___kmalloc_large_node+0x84/0x1e0 [ 117.037851][ T8634] __kvmalloc_node_noprof+0x30a/0x620 [ 117.037864][ T8634] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 117.037877][ T8634] ? net_generic+0xea/0x2a0 [ 117.037887][ T8634] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 117.037901][ T8634] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 117.037913][ T8634] hashlimit_mt_check_common+0x8bb/0x1460 [ 117.037929][ T8634] hashlimit_mt_check+0x71/0x90 [ 117.037940][ T8634] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 117.037952][ T8634] xt_check_match+0x283/0xa50 [ 117.037963][ T8634] ? io_schedule_timeout+0x52/0x150 [ 117.037977][ T8634] ? __pfx_xt_check_match+0x10/0x10 [ 117.037987][ T8634] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 117.038006][ T8634] ? xt_find_match+0x1f6/0x290 [ 117.038020][ T8634] find_check_entry.constprop.0+0x34e/0xa20 [ 117.038036][ T8634] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 117.038052][ T8634] ? kasan_quarantine_put+0x10a/0x240 [ 117.038065][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.038081][ T8634] ? kfree+0x2b4/0x4d0 [ 117.038091][ T8634] ? translate_table+0xc0e/0x17b0 [ 117.038104][ T8634] translate_table+0xd0b/0x17b0 [ 117.038121][ T8634] ? __pfx_translate_table+0x10/0x10 [ 117.038132][ T8634] ? xt_alloc_table_info+0x3e/0xa0 [ 117.038146][ T8634] do_ip6t_set_ctl+0x570/0xb00 [ 117.038157][ T8634] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 117.038170][ T8634] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 117.038183][ T8634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.038205][ T8634] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 117.038217][ T8634] nf_setsockopt+0x8d/0xf0 [ 117.038228][ T8634] ipv6_setsockopt+0x135/0x170 [ 117.038241][ T8634] rawv6_setsockopt+0xc2/0x510 [ 117.038258][ T8634] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 117.038274][ T8634] ? selinux_socket_setsockopt+0x6a/0x80 [ 117.038291][ T8634] ? sock_common_setsockopt+0x2e/0xf0 [ 117.038308][ T8634] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.038324][ T8634] do_sock_setsockopt+0x224/0x470 [ 117.038340][ T8634] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 117.038364][ T8634] __sys_setsockopt+0x1a0/0x230 [ 117.038379][ T8634] __x64_sys_setsockopt+0xbd/0x160 [ 117.038392][ T8634] ? do_syscall_64+0x91/0x4c0 [ 117.038405][ T8634] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.038418][ T8634] do_syscall_64+0xcd/0x4c0 [ 117.038433][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.038444][ T8634] RIP: 0033:0x7f350a18e929 [ 117.038453][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.038463][ T8634] RSP: 002b:00007f350afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.038473][ T8634] RAX: ffffffffffffffda RBX: 00007f350a3b6160 RCX: 00007f350a18e929 [ 117.038479][ T8634] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 117.038485][ T8634] RBP: 00007f350a210b39 R08: 00000000000005c0 R09: 0000000000000000 [ 117.038491][ T8634] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 117.038497][ T8634] R13: 0000000000000001 R14: 00007f350a3b6160 R15: 00007ffe80dddde8 [ 117.038510][ T8634] [ 117.038514][ T8634] Mem-Info: [ 117.168468][ T8634] active_anon:6050 inactive_anon:0 isolated_anon:0 [ 117.168468][ T8634] active_file:14122 inactive_file:40628 isolated_file:0 [ 117.168468][ T8634] unevictable:1768 dirty:200 writeback:0 [ 117.168468][ T8634] slab_reclaimable:12170 slab_unreclaimable:72585 [ 117.168468][ T8634] mapped:25614 shmem:3734 pagetables:1010 [ 117.168468][ T8634] sec_pagetables:310 bounce:0 [ 117.168468][ T8634] kernel_misc_reclaimable:0 [ 117.168468][ T8634] free:453253 free_pcp:16656 free_cma:0 [ 117.185451][ T6054] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 117.187251][ T6054] usb 10-1: USB disconnect, device number 7 [ 117.190163][ T8634] Node 0 active_anon:24200kB inactive_anon:0kB active_file:56300kB inactive_file:162312kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102268kB dirty:792kB writeback:0kB shmem:11400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12336kB pagetables:3816kB sec_pagetables:1240kB all_unreclaimable? yes Balloon:0kB [ 117.200806][ T8634] Node 1 active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.213214][ T8634] Node 0 DMA free:11148kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:0kB free_cma:0kB [ 117.222705][ T8634] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 117.224612][ T8634] Node 0 DMA32 free:197908kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24200kB inactive_anon:0kB active_file:56300kB inactive_file:162312kB unevictable:3536kB writepending:792kB present:2080628kB managed:1264188kB mlocked:0kB bounce:0kB free_pcp:49904kB local_pcp:13540kB free_cma:0kB [ 117.235159][ T8634] lowmem_reserve[]: 0 0 0 0 0 [ 117.236659][ T8634] Node 1 Normal free:1603956kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:188kB inactive_file:200kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:17584kB local_pcp:5540kB free_cma:0kB [ 117.246995][ T8634] lowmem_reserve[]: 0 0 0 0 0 [ 117.248494][ T8634] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 3*16kB (UM) 4*32kB (UM) 1*64kB (U) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 1*4096kB (U) = 11148kB [ 117.253398][ T8634] Node 0 DMA32: 1823*4kB (UM) 1196*8kB (UME) 575*16kB (UME) 449*32kB (UME) 146*64kB (UME) 79*128kB (UM) 73*256kB (UM) 103*512kB (UME) 57*1024kB (UM) 4*2048kB (UM) 0*4096kB = 197868kB [ 117.260296][ T8634] Node 1 Normal: 15*4kB (UME) 15*8kB (UME) 14*16kB (UME) 15*32kB (UME) 14*64kB (UME) 15*128kB (UME) 9*256kB (UME) 7*512kB (UME) 3*1024kB (ME) 1*2048kB (U) 388*4096kB (UM) = 1603956kB [ 117.266498][ T8634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.269796][ T8634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.272770][ T8634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.275691][ T8634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.278747][ T8634] 58482 total pagecache pages [ 117.280822][ T8634] 0 pages in swap cache [ 117.282522][ T8634] Free swap = 124996kB [ 117.284276][ T8634] Total swap = 124996kB [ 117.286044][ T8634] 1048443 pages RAM [ 117.287583][ T8634] 0 pages HighMem/MovableOnly [ 117.289123][ T8634] 283067 pages reserved [ 117.291032][ T8634] 0 pages cma reserved [ 117.342258][ T8641] fuse: Bad value for 'user_id' [ 117.343861][ T8641] fuse: Bad value for 'user_id' [ 117.362252][ T8641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8641 comm=syz.3.898 [ 117.713381][ T8674] netlink: 'syz.5.908': attribute type 12 has an invalid length. [ 117.995985][ T8700] dlm: no local IP address has been set [ 117.998037][ T8700] dlm: cannot start dlm midcomms -107 [ 118.133325][ T8713] rdma_rxe: rxe_newlink: failed to add syz_tun [ 118.136442][ T8713] __nla_validate_parse: 3 callbacks suppressed [ 118.136455][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.924'. [ 118.697100][ T40] kauditd_printk_skb: 320 callbacks suppressed [ 118.697117][ T40] audit: type=1400 audit(118.629:2610): avc: denied { execute } for pid=8730 comm="syz.4.931" name="file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.708815][ T40] audit: type=1400 audit(118.629:2611): avc: denied { execute_no_trans } for pid=8730 comm="syz.4.931" path="/103/file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.716075][ T40] audit: type=1400 audit(118.629:2612): avc: denied { write } for pid=8730 comm="syz.4.931" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.741371][ T40] audit: type=1400 audit(118.669:2613): avc: denied { allowed } for pid=8730 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.749354][ T40] audit: type=1400 audit(118.679:2614): avc: denied { create } for pid=8730 comm="syz.4.931" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.759065][ T40] audit: type=1400 audit(118.679:2615): avc: denied { create } for pid=8730 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.766474][ T40] audit: type=1400 audit(118.679:2616): avc: denied { setopt } for pid=8730 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.773586][ T40] audit: type=1400 audit(118.679:2617): avc: denied { connect } for pid=8730 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.781632][ T40] audit: type=1400 audit(118.679:2618): avc: denied { ioctl } for pid=8730 comm="syz.4.931" path="socket:[25395]" dev="sockfs" ino=25395 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.882895][ T40] audit: type=1400 audit(118.819:2619): avc: denied { create } for pid=8733 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.885939][ T8734] program syz.1.932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.973266][ T8742] rdma_rxe: rxe_newlink: failed to add syz_tun [ 118.976722][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 119.986345][ T8769] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 120.215271][ T8778] NILFS (nbd1): device size too small [ 120.524885][ T8796] comedi: No check for data length of config insn id 4095 is implemented [ 120.528240][ T8796] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 120.533002][ T8796] comedi: Assuming n=15 is correct [ 120.538721][ T8796] bio_check_eod: 3 callbacks suppressed [ 120.538733][ T8796] syz.1.950: attempt to access beyond end of device [ 120.538733][ T8796] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.547586][ T8796] befs: (nbd1): unable to read superblock [ 120.552673][ T8796] syz.1.950: attempt to access beyond end of device [ 120.552673][ T8796] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.557979][ T8796] befs: (nbd1): unable to read superblock [ 120.566035][ T8796] syz.1.950: attempt to access beyond end of device [ 120.566035][ T8796] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.571888][ T8796] befs: (nbd1): unable to read superblock [ 120.576895][ T8796] syz.1.950: attempt to access beyond end of device [ 120.576895][ T8796] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.582390][ T8796] befs: (nbd1): unable to read superblock [ 120.587426][ T8796] syz.1.950: attempt to access beyond end of device [ 120.587426][ T8796] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.591977][ T8796] befs: (nbd1): unable to read superblock [ 120.598886][ T8796] syz.1.950: attempt to access beyond end of device [ 120.598886][ T8796] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.605098][ T8796] befs: (nbd1): unable to read superblock [ 120.647341][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 120.688639][ T8806] qnx4: Unknown parameter 'acxyO>ÔáÇZµãc4cé' [ 120.911300][ T8819] netlink: 160 bytes leftover after parsing attributes in process `syz.5.957'. [ 120.919981][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.5.957'. [ 120.937610][ T8819] hpfs: hpfs_map_sector(): read error [ 121.043118][ T8821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.052476][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.125790][ T8821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.185680][ T8821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.256496][ T8821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.335510][ T8821] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.342847][ T8821] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.349827][ T8821] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.356901][ T8821] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.419611][ T8825] overlayfs: failed to get inode (-116) [ 121.423178][ T8825] overlayfs: failed to get inode (-116) [ 121.592579][ T8833] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 121.611113][ T8833] kvm: pic: level sensitive irq not supported [ 121.612260][ T8833] kvm: pic: non byte read [ 121.619403][ T8833] kvm: pic: level sensitive irq not supported [ 121.620199][ T8833] kvm: pic: non byte read [ 121.629999][ T8833] kvm: pic: level sensitive irq not supported [ 121.630817][ T8833] kvm: pic: non byte read [ 121.638017][ T8833] kvm: pic: level sensitive irq not supported [ 121.638757][ T8833] kvm: pic: non byte read [ 121.645033][ T8833] kvm: pic: level sensitive irq not supported [ 121.645641][ T8833] kvm: pic: non byte read [ 121.653157][ T8833] kvm: pic: level sensitive irq not supported [ 121.653575][ T8833] kvm: pic: non byte read [ 121.722753][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.966'. [ 121.825173][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 121.831415][ T8858] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 121.979937][ T8871] block device autoloading is deprecated and will be removed. [ 122.275841][ T8884] sctp: [Deprecated]: syz.4.977 (pid 8884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.275841][ T8884] Use struct sctp_sack_info instead [ 122.284180][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 122.289011][ T8886] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 122.378277][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 122.407962][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.979'. [ 122.418828][ T8892] sp0: Synchronizing with TNC [ 122.618875][ T8899] kvm: pic: non byte write [ 123.643073][ T8916] sctp: [Deprecated]: syz.1.985 (pid 8916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.643073][ T8916] Use struct sctp_sack_info instead [ 123.697756][ T8927] netlink: 'syz.1.987': attribute type 9 has an invalid length. [ 123.704685][ T40] kauditd_printk_skb: 195 callbacks suppressed [ 123.704700][ T40] audit: type=1400 audit(123.639:2815): avc: denied { ioctl } for pid=8920 comm="syz.5.986" path="socket:[28529]" dev="sockfs" ino=28529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.718967][ T40] audit: type=1400 audit(123.649:2816): avc: denied { node_bind } for pid=8920 comm="syz.5.986" saddr=::1 src=32769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 123.757026][ T40] audit: type=1400 audit(123.689:2817): avc: denied { create } for pid=8928 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.762675][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'. [ 123.766521][ T40] audit: type=1400 audit(123.689:2818): avc: denied { write } for pid=8928 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.776632][ T40] audit: type=1400 audit(123.699:2819): avc: denied { ioctl } for pid=8930 comm="syz.5.989" path="socket:[29822]" dev="sockfs" ino=29822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.785774][ T40] audit: type=1400 audit(123.699:2820): avc: denied { map } for pid=8930 comm="syz.5.989" path="socket:[29818]" dev="sockfs" ino=29818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 123.961434][ T40] audit: type=1400 audit(123.899:2821): avc: denied { create } for pid=8934 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.962045][ T8937] block nbd1: not configured, cannot reconfigure [ 123.967386][ T40] audit: type=1400 audit(123.899:2822): avc: denied { setopt } for pid=8934 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.059360][ T40] audit: type=1400 audit(123.989:2823): avc: denied { create } for pid=8941 comm="syz.5.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.066266][ T40] audit: type=1400 audit(123.989:2824): avc: denied { listen } for pid=8941 comm="syz.5.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.187223][ T8953] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 124.314348][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 124.340880][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.393607][ T8972] geneve1: entered allmulticast mode [ 124.438954][ T8974] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1002'. [ 124.442976][ T8974] 0·: renamed from hsr0 (while UP) [ 124.450214][ T8974] 0·: entered allmulticast mode [ 124.459896][ T8974] hsr_slave_0: entered allmulticast mode [ 124.462484][ T8974] hsr_slave_1: entered allmulticast mode [ 124.465490][ T8974] net_ratelimit: 12 callbacks suppressed [ 124.465503][ T8974] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 124.864258][ T9003] zonefs (nbd4) ERROR: Not a zoned block device [ 124.874319][ T9005] zonefs (nbd4) ERROR: Not a zoned block device [ 125.126769][ T9019] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1013'. [ 125.388143][ T9040] 9pnet_fd: Insufficient options for proto=fd [ 125.486746][ T9057] netlink: 'syz.5.1027': attribute type 1 has an invalid length. [ 125.581266][ T9064] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 125.583434][ T9064] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 125.585684][ T9063] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 125.587801][ T9063] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 125.668714][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1029'. [ 125.680839][ T9062] [U]  [ 125.790849][ T6036] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 125.942946][ T6036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.946799][ T6036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 125.950146][ T6036] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 125.953021][ T6036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.957148][ T6036] usb 9-1: config 0 descriptor?? [ 125.959162][ T9066] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 126.279578][ T9082] netlink: 'syz.1.1035': attribute type 2 has an invalid length. [ 126.474068][ T9102] netlink: 'syz.5.1044': attribute type 4 has an invalid length. [ 126.507416][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 126.511284][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 126.514939][ T9105] netlink: 'syz.1.1045': attribute type 11 has an invalid length. [ 126.565439][ T9108] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1046'. [ 126.589650][ T9110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.590251][ T9108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9108 comm=syz.5.1046 [ 127.242002][ T9114] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 127.253384][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.737869][ T9140] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 127.742811][ T9140] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 127.745235][ T9141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1057'. [ 127.748765][ T9140] program syz.1.1058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.749957][ T9141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1057'. [ 127.805847][ T9148] syz.3.1060: attempt to access beyond end of device [ 127.805847][ T9148] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 127.810163][ T9148] (syz.3.1060,9148,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 127.813050][ T9148] (syz.3.1060,9148,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 127.815632][ T9148] (syz.3.1060,9148,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 127.819117][ T9148] (syz.3.1060,9148,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 127.840842][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 127.970865][ T24] usb 10-1: device descriptor read/64, error -71 [ 128.210876][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 128.350746][ T24] usb 10-1: device descriptor read/64, error -71 [ 128.470854][ T24] usb usb10-port1: attempt power cycle [ 128.572194][ T6036] usbhid 9-1:0.0: can't add hid device: -71 [ 128.574212][ T6036] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 128.578360][ T6036] usb 9-1: USB disconnect, device number 12 [ 128.596486][ T9159] rdma_rxe: rxe_newlink: failed to add syz_tun [ 128.686368][ T9167] i2c i2c-1: Invalid block write size 34 [ 128.764022][ T9172] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 128.777231][ T9175] tmpfs: Bad value for 'huge' [ 128.779120][ T40] kauditd_printk_skb: 135 callbacks suppressed [ 128.779129][ T40] audit: type=1400 audit(128.709:2960): avc: denied { ioctl } for pid=9173 comm="syz.3.1070" path="socket:[29687]" dev="sockfs" ino=29687 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.820883][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 128.841567][ T24] usb 10-1: device descriptor read/8, error -71 [ 128.856587][ T9180] __nla_validate_parse: 4 callbacks suppressed [ 128.856597][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 128.863454][ T9180] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 128.865950][ T9180] nbd: error processing sock list [ 129.100888][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 129.121529][ T24] usb 10-1: device descriptor read/8, error -71 [ 129.224370][ T40] audit: type=1400 audit(129.159:2961): avc: denied { setopt } for pid=9188 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.224485][ T9189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9189 comm=syz.1.1075 [ 129.235712][ T24] usb usb10-port1: unable to enumerate USB device [ 129.238731][ T9171] syz.4.1069 (9171): drop_caches: 2 [ 129.270591][ T40] audit: type=1400 audit(129.199:2962): avc: denied { write } for pid=9192 comm="syz.4.1076" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.272729][ T9193] kAFS: unable to lookup cell '/,c¾ûL' [ 129.295001][ T40] audit: type=1400 audit(129.229:2963): avc: denied { accept } for pid=9188 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.301565][ T40] audit: type=1400 audit(129.239:2964): avc: denied { write } for pid=9188 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.308123][ T40] audit: type=1400 audit(129.239:2965): avc: denied { read } for pid=9188 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.313958][ T40] audit: type=1400 audit(129.239:2966): avc: denied { mount } for pid=9188 comm="syz.1.1075" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 129.359802][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.373010][ T9199] veth0_vlan: left promiscuous mode [ 129.376199][ T9199] veth0_vlan: entered promiscuous mode [ 129.383729][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.392351][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.394999][ T9199] veth0_vlan: left promiscuous mode [ 129.398156][ T9199] veth0_vlan: entered promiscuous mode [ 129.403010][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.413024][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.421332][ T9199] veth0_vlan: left promiscuous mode [ 129.421794][ T9199] veth0_vlan: entered promiscuous mode [ 129.426298][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.429967][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.430221][ T9199] veth0_vlan: left promiscuous mode [ 129.430731][ T9199] veth0_vlan: entered promiscuous mode [ 129.432379][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.443985][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.444437][ T9199] veth0_vlan: left promiscuous mode [ 129.444942][ T9199] veth0_vlan: entered promiscuous mode [ 129.454616][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.457426][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.460206][ T9199] veth0_vlan: left promiscuous mode [ 129.460802][ T9199] veth0_vlan: entered promiscuous mode [ 129.462393][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.470780][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.477800][ T9199] veth0_vlan: left promiscuous mode [ 129.478310][ T9199] veth0_vlan: entered promiscuous mode [ 129.482899][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.485621][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.488770][ T9199] veth0_vlan: left promiscuous mode [ 129.492909][ T9199] veth0_vlan: entered promiscuous mode [ 129.493897][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.500462][ T9199] netlink: 'syz.4.1078': attribute type 10 has an invalid length. [ 129.501030][ T9199] veth0_vlan: left promiscuous mode [ 129.506118][ T9199] veth0_vlan: entered promiscuous mode [ 129.507271][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.507649][ T9205] nbd: must specify an index to disconnect [ 129.509168][ T40] audit: type=1400 audit(129.439:2967): avc: denied { mounton } for pid=9204 comm="syz.3.1080" path="/252" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 129.509457][ T9205] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.509496][ T9205] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 129.509637][ T9205] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.509657][ T9205] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 129.538707][ T9199] veth0_vlan: left promiscuous mode [ 129.539264][ T9199] veth0_vlan: entered promiscuous mode [ 129.540468][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.551791][ T9207] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 129.558151][ T9199] veth0_vlan: left promiscuous mode [ 129.558614][ T9199] veth0_vlan: entered promiscuous mode [ 129.563847][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.568355][ T9199] veth0_vlan: left promiscuous mode [ 129.568819][ T9199] veth0_vlan: entered promiscuous mode [ 129.569869][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.581173][ T9199] veth0_vlan: left promiscuous mode [ 129.581660][ T9199] veth0_vlan: entered promiscuous mode [ 129.585960][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.589746][ T9199] veth0_vlan: left promiscuous mode [ 129.591206][ T9199] veth0_vlan: entered promiscuous mode [ 129.594768][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.597478][ T9199] veth0_vlan: left promiscuous mode [ 129.597949][ T9199] veth0_vlan: entered promiscuous mode [ 129.603546][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.606664][ T9199] veth0_vlan: left promiscuous mode [ 129.607160][ T9199] veth0_vlan: entered promiscuous mode [ 129.611946][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.617658][ T9199] veth0_vlan: left promiscuous mode [ 129.618169][ T9199] veth0_vlan: entered promiscuous mode [ 129.631776][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.649832][ T9199] veth0_vlan: left promiscuous mode [ 129.650433][ T9199] veth0_vlan: entered promiscuous mode [ 129.657147][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.661845][ T9199] veth0_vlan: left promiscuous mode [ 129.662319][ T9199] veth0_vlan: entered promiscuous mode [ 129.667010][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.672861][ T9199] veth0_vlan: left promiscuous mode [ 129.673331][ T9199] veth0_vlan: entered promiscuous mode [ 129.677384][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.680557][ T9199] veth0_vlan: left promiscuous mode [ 129.681189][ T9199] veth0_vlan: entered promiscuous mode [ 129.686600][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.690218][ T9199] veth0_vlan: left promiscuous mode [ 129.690832][ T9199] veth0_vlan: entered promiscuous mode [ 129.694966][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.698243][ T9199] veth0_vlan: left promiscuous mode [ 129.698704][ T9199] veth0_vlan: entered promiscuous mode [ 129.703328][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.706592][ T9199] veth0_vlan: left promiscuous mode [ 129.707027][ T9199] veth0_vlan: entered promiscuous mode [ 129.711323][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.715051][ T9199] veth0_vlan: left promiscuous mode [ 129.715550][ T9199] veth0_vlan: entered promiscuous mode [ 129.716612][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.726317][ T9199] veth0_vlan: left promiscuous mode [ 129.726772][ T9199] veth0_vlan: entered promiscuous mode [ 129.731252][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.735154][ T9199] veth0_vlan: left promiscuous mode [ 129.735619][ T9199] veth0_vlan: entered promiscuous mode [ 129.739994][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.743991][ T9199] veth0_vlan: left promiscuous mode [ 129.744459][ T9199] veth0_vlan: entered promiscuous mode [ 129.748742][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.756999][ T9199] veth0_vlan: left promiscuous mode [ 129.757430][ T9199] veth0_vlan: entered promiscuous mode [ 129.758375][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.766737][ T9199] veth0_vlan: left promiscuous mode [ 129.767233][ T9199] veth0_vlan: entered promiscuous mode [ 129.772109][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.775287][ T9199] veth0_vlan: left promiscuous mode [ 129.775777][ T9199] veth0_vlan: entered promiscuous mode [ 129.780069][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.783240][ T40] audit: type=1400 audit(129.709:2968): avc: denied { create } for pid=9210 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.783689][ T9199] veth0_vlan: left promiscuous mode [ 129.790093][ T40] audit: type=1400 audit(129.719:2969): avc: denied { setopt } for pid=9210 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.793235][ T9199] veth0_vlan: entered promiscuous mode [ 129.806003][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.810617][ T9199] veth0_vlan: left promiscuous mode [ 129.813583][ T9199] veth0_vlan: entered promiscuous mode [ 129.815146][ T9199] team0: Device veth0_vlan failed to register rx_handler [ 129.836641][ T9216] syz1: rxe_newlink: already configured on syz_tun [ 130.173681][ T9245] syz1: rxe_newlink: already configured on syz_tun [ 130.238706][ T9254] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1097'. [ 130.242531][ T9254] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1097'. [ 130.249807][ T9254] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1097'. [ 130.297987][ T9256] SELinux: unknown common r [ 130.300092][ T9256] SELinux: failed to load policy [ 130.309872][ T9256] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.426802][ T9265] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 130.429254][ T9265] SELinux: failed to load policy [ 130.466203][ T9267] Bluetooth: MGMT ver 1.23 [ 130.471709][ T9267] input: syz0 as /devices/virtual/input/input14 [ 130.636730][ T9273] rdma_rxe: rxe_newlink: failed to add syz_tun [ 130.656160][ T9275] nbd: socks must be embedded in a SOCK_ITEM attr [ 130.725219][ T9284] binder: 9282:9284 unknown command 0 [ 130.726939][ T9284] binder: 9282:9284 ioctl c0306201 200000000080 returned -22 [ 130.733085][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 130.761414][ T9289] netlink: 672 bytes leftover after parsing attributes in process `syz.4.1112'. [ 130.765618][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1111'. [ 130.776557][ T9290] batman_adv: batadv0: Adding interface: dummy0 [ 130.790795][ T9290] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.798733][ T9290] batman_adv: batadv0: Interface activated: dummy0 [ 130.814317][ T9290] batadv0: mtu less than device minimum [ 130.817994][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.821777][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.825776][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.829677][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.833475][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.837379][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.841113][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.845087][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.848832][ T9290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.924280][ T9301] syz1: rxe_newlink: already configured on syz_tun [ 130.931142][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 131.221301][ T9336] rdma_rxe: rxe_newlink: failed to add syz_tun [ 131.223827][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1128'. [ 131.277663][ T9342] 9p: Unknown Cache mode or invalid value riadahead [ 131.363038][ T9347] veth0_vlan: left promiscuous mode [ 131.368077][ T9347] veth0_vlan: entered promiscuous mode [ 131.379087][ T9347] team0: Device veth0_vlan failed to register rx_handler [ 131.441017][ T9355] /dev/nullb0: Can't open blockdev [ 131.619614][ T9366] rdma_rxe: rxe_newlink: failed to add syz_tun [ 131.622284][ T9366] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1138'. [ 132.513902][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.516606][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.578700][ T9397] : entered promiscuous mode [ 132.588380][ T9397] dvmrp1: entered allmulticast mode [ 132.727207][ T9405] sp0: Synchronizing with TNC [ 133.801855][ T40] kauditd_printk_skb: 174 callbacks suppressed [ 133.801873][ T40] audit: type=1400 audit(133.739:3144): avc: denied { append } for pid=9425 comm="syz.1.1160" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.856741][ T40] audit: type=1400 audit(133.789:3145): avc: denied { map_create } for pid=9429 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.862803][ T9430] erspan0: entered promiscuous mode [ 133.940521][ T9434] bond1 (unregistering): Released all slaves [ 133.980816][ T40] audit: type=1400 audit(133.909:3146): avc: denied { create } for pid=9433 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.988247][ T40] audit: type=1400 audit(133.919:3147): avc: denied { bind } for pid=9433 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.995604][ T40] audit: type=1400 audit(133.919:3148): avc: denied { create } for pid=9433 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.093970][ T40] audit: type=1400 audit(134.029:3149): avc: denied { module_request } for pid=9437 comm="syz.5.1165" kmod="fs-dax" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 134.111411][ T40] audit: type=1400 audit(134.049:3150): avc: denied { create } for pid=9440 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.117348][ T40] audit: type=1400 audit(134.049:3151): avc: denied { create } for pid=9437 comm="syz.5.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.124183][ T40] audit: type=1400 audit(134.049:3152): avc: denied { connect } for pid=9440 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.132245][ T9441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 134.135024][ T9441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.138509][ T9441] vhci_hcd vhci_hcd.0: Device attached [ 134.144117][ T9442] vhci_hcd: connection closed [ 134.145675][ T1143] vhci_hcd: stop threads [ 134.149555][ T1143] vhci_hcd: release socket [ 134.151617][ T1143] vhci_hcd: disconnect device [ 134.167664][ T40] audit: type=1400 audit(134.099:3153): avc: denied { read write } for pid=9444 comm="syz.5.1167" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.171154][ T9445] fuse: Bad value for 'fd' [ 134.214565][ T9447] __nla_validate_parse: 2 callbacks suppressed [ 134.214582][ T9447] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.1168'. [ 134.294214][ T9451] 9pnet_fd: Insufficient options for proto=fd [ 134.297713][ T9451] misc userio: The device must be registered before sending interrupts [ 134.606178][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 134.689617][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1179'. [ 134.713359][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 134.730037][ T9481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.743216][ T9481] bond1: (slave batadv2): Opening slave failed [ 135.247152][ T9506] binfmt_misc: register: failed to install interpreter file ./file0 [ 135.484687][ T9524] tmpfs: Cannot disable swap on remount [ 135.671179][ T9529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9529 comm=syz.5.1197 [ 135.724468][ T9531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9531 comm=syz.5.1197 [ 135.766829][ T9534] rdma_rxe: rxe_newlink: failed to add syz_tun [ 135.769393][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1198'. [ 136.060623][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 136.154784][ T9558] /dev/nullb0: Can't open blockdev [ 136.288620][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 137.204923][ T9574] overlayfs: failed to resolve './file1': -2 [ 137.219529][ T9574] overlayfs: failed to resolve './file1': -2 [ 137.652612][ T9590] Malformed UNC in devname [ 137.652612][ T9590] [ 137.655101][ T9590] CIFS: VFS: Malformed UNC in devname [ 137.717521][ T9599] gfs2: gfs2 mount does not exist [ 138.213113][ T9605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.216763][ T9605] overlayfs: missing 'lowerdir' [ 138.217899][ T9604] hsr0: entered promiscuous mode [ 138.222456][ T9604] macsec2: entered allmulticast mode [ 138.224624][ T9604] hsr0: entered allmulticast mode [ 138.226621][ T9604] hsr_slave_0: entered allmulticast mode [ 138.228426][ T9604] hsr_slave_1: entered allmulticast mode [ 138.259836][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59152 sclass=netlink_route_socket pid=9608 comm=syz.1.1221 [ 138.264068][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9608 comm=syz.1.1221 [ 138.268192][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9608 comm=syz.1.1221 [ 138.376145][ T9620] overlayfs: missing 'lowerdir' [ 138.418506][ T9626] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 138.444582][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1227'. [ 138.452524][ T9622] net_ratelimit: 13 callbacks suppressed [ 138.452536][ T9622] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 138.457962][ T9622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.491589][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 138.730824][ T4794] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 138.821014][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 138.880816][ T4794] usb 10-1: Using ep0 maxpacket: 32 [ 138.884527][ T4794] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.887942][ T4794] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.891669][ T4794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.895443][ T4794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.899386][ T4794] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.904101][ T4794] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.909435][ T4794] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.913254][ T4794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.918541][ T4794] usb 10-1: config 0 descriptor?? [ 138.983065][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 138.983124][ T40] audit: type=1400 audit(138.919:3305): avc: denied { read write } for pid=9643 comm="syz.1.1233" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.992409][ T40] audit: type=1400 audit(138.919:3306): avc: denied { open } for pid=9643 comm="syz.1.1233" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.124700][ T4794] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.129311][ T4794] usb 10-1: USB disconnect, device number 12 [ 139.132645][ T4794] usblp0: removed [ 139.194836][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.198618][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.202921][ T40] audit: type=1400 audit(139.139:3307): avc: denied { ioctl } for pid=9643 comm="syz.1.1233" path="socket:[33549]" dev="sockfs" ino=33549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.234552][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 139.237735][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 139.240122][ T10] usb 6-1: can't read configurations, error -71 [ 139.345260][ T40] audit: type=1400 audit(139.279:3308): avc: denied { create } for pid=9645 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.351563][ T40] audit: type=1400 audit(139.279:3309): avc: denied { ioctl } for pid=9645 comm="syz.3.1234" path="socket:[32521]" dev="sockfs" ino=32521 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.451807][ T40] audit: type=1400 audit(139.389:3310): avc: denied { create } for pid=9647 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 139.458844][ T40] audit: type=1400 audit(139.389:3311): avc: denied { ioctl } for pid=9647 comm="syz.3.1235" path="socket:[32522]" dev="sockfs" ino=32522 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 139.462180][ T9648] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1235'. [ 139.478601][ T40] audit: type=1400 audit(139.409:3312): avc: denied { write } for pid=9647 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 139.478631][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 139.522442][ T40] audit: type=1400 audit(139.459:3313): avc: denied { create } for pid=9649 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.539384][ T40] audit: type=1400 audit(139.469:3314): avc: denied { load_policy } for pid=9649 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.539517][ T9650] SELinux: failed to load policy [ 139.560757][ T6036] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 139.710983][ T6036] usb 10-1: Using ep0 maxpacket: 32 [ 139.714328][ T6036] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.717019][ T6036] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.719760][ T6036] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.722865][ T6036] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.725929][ T6036] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.728940][ T6036] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.733153][ T6036] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.735999][ T6036] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.740218][ T6036] usb 10-1: config 0 descriptor?? [ 139.798017][ T9659] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1239'. [ 139.831866][ T9662] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 139.847068][ T9662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.851943][ T9662] validate_nla: 28 callbacks suppressed [ 139.851953][ T9662] netlink: 'syz.3.1240': attribute type 2 has an invalid length. [ 139.945806][ T6036] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 139.972550][ T9671] tmpfs: Bad value for 'mpol' [ 140.279129][ T5956] usb 10-1: USB disconnect, device number 13 [ 140.281197][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 140.286870][ T5956] usblp0: removed [ 140.432172][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.435374][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.439334][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.442204][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.651980][ T10] usb 6-1: usb_control_msg returned -32 [ 140.653755][ T10] usbtmc 6-1:16.0: can't read capabilities [ 140.733322][ T9696] loop6: detected capacity change from 0 to 524287487 [ 140.735733][ T9696] buffer_io_error: 23 callbacks suppressed [ 140.735741][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.740608][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.743320][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.745773][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.748239][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.750877][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.753393][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.755851][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.758261][ T9696] ldm_validate_partition_table(): Disk read failed. [ 140.760311][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.763944][ T9696] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.766505][ T9696] Dev loop6: unable to read RDB block 0 [ 140.768408][ T9696] loop6: unable to read partition table [ 140.770244][ T9696] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 140.992406][ T9707] NILFS (nbd5): device size too small [ 141.000083][ T9707] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1253'. [ 141.068797][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 141.080111][ T9709] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.086799][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.090199][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.147219][ T9723] syz.3.1259: attempt to access beyond end of device [ 141.147219][ T9723] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 141.152395][ T9723] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 141.208787][ T9727] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 141.269024][ T9731] xt_SECMARK: invalid mode: 0 [ 141.770759][ T4794] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 141.860767][ T5959] Bluetooth: hci0: command tx timeout [ 141.922193][ T4794] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.925341][ T4794] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.929624][ T4794] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.932965][ T4794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.935630][ T4794] usb 9-1: Product: syz [ 141.936920][ T4794] usb 9-1: Manufacturer: syz [ 141.938308][ T4794] usb 9-1: SerialNumber: syz [ 142.145795][ T9741] overlayfs: upper fs does not support file handles, falling back to index=off. [ 142.154124][ T4794] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 142.156960][ T4794] cdc_ncm 9-1:1.0: bind() failure [ 142.161856][ T4794] usb 9-1: USB disconnect, device number 13 [ 142.688175][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 142.749955][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 142.804916][ T5956] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 142.808615][ T5956] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 142.813931][ T5956] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 142.824360][ T5956] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 142.858515][ T9792] openvswitch: netlink: IP tunnel dst address not specified [ 142.860466][ T9791] random: crng reseeded on system resumption [ 142.888619][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 142.897227][ T9795] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.900111][ T9795] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.903072][ T9795] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.905813][ T9795] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.006963][ T5956] usb 6-1: USB disconnect, device number 11 [ 143.132754][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1289'. [ 143.252961][ T9834] bridge1: entered promiscuous mode [ 143.382237][ T9845] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.384539][ T9845] overlayfs: failed to set xattr on upper [ 143.386304][ T9845] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.388434][ T9845] overlayfs: ...falling back to index=off. [ 143.390310][ T9845] overlayfs: ...falling back to uuid=null. [ 143.392741][ T9845] overlayfs: ...falling back to xino=off. [ 143.432141][ T9848] syz.1.1298: attempt to access beyond end of device [ 143.432141][ T9848] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 143.436474][ T9848] SQUASHFS error: Failed to read block 0x0: -5 [ 143.438456][ T9848] unable to read squashfs_super_block [ 143.449946][ T9852] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1299'. [ 143.480933][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.483941][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.486889][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.489948][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.492987][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.495923][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.498853][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.501917][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.504851][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.507774][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.510741][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.513605][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.516436][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.519246][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.522078][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.524871][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.527698][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.530548][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.534362][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.537254][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.540114][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.543126][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.546043][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.548904][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.551881][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.554782][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.557675][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.560542][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.563521][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.566366][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.569206][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.572125][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.574979][ T9848] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.636463][ T9858] program syz.1.1301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.639628][ T9855] team0: Port device team_slave_0 removed [ 143.728318][ C2] ata1: illegal qc_active transition (00000000->00001000) [ 143.796862][ T9866] ip6gretap0: entered promiscuous mode [ 144.034984][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 144.034995][ T40] audit: type=1400 audit(143.969:3532): avc: denied { create } for pid=9882 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.044042][ T40] audit: type=1400 audit(143.979:3533): avc: denied { ioctl } for pid=9882 comm="syz.5.1308" path="socket:[35999]" dev="sockfs" ino=35999 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.051893][ T1113] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 144.058733][ T1113] ata1.00: configured for UDMA/100 [ 144.096967][ T9861] syz.1.1302 (9861) used greatest stack depth: 17976 bytes left [ 144.140428][ T40] audit: type=1400 audit(144.069:3534): avc: denied { map_create } for pid=9890 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.147139][ T40] audit: type=1400 audit(144.069:3535): avc: denied { bpf } for pid=9890 comm="syz.3.1311" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.153591][ T40] audit: type=1400 audit(144.079:3536): avc: denied { map_read map_write } for pid=9890 comm="syz.3.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.159420][ T40] audit: type=1400 audit(144.079:3537): avc: denied { create } for pid=9882 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.165474][ T40] audit: type=1400 audit(144.079:3538): avc: denied { bind } for pid=9882 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.171350][ T40] audit: type=1400 audit(144.089:3539): avc: denied { listen } for pid=9882 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.177028][ T40] audit: type=1400 audit(144.099:3540): avc: denied { read } for pid=9882 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.201530][ T40] audit: type=1400 audit(144.139:3541): avc: denied { create } for pid=9894 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.411778][ T9916] tipc: Started in network mode [ 144.413430][ T9916] tipc: Node identity ac14140f, cluster identity 4711 [ 144.415968][ T9916] tipc: New replicast peer: 255.255.255.255 [ 144.418820][ T9916] tipc: Enabled bearer , priority 10 [ 144.513362][ T9920] hsr_slave_1 (unregistering): left promiscuous mode [ 144.695675][ T9937] qnx6: unable to set blocksize [ 144.826492][ T9950] __nla_validate_parse: 6 callbacks suppressed [ 144.826503][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 144.833626][ T9950] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 144.842785][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 144.843886][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1329'. [ 144.890183][ T9956] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 144.893844][ T9956] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 144.896626][ T9956] CPU: 3 UID: 0 PID: 9956 Comm: syz.3.1332 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 144.901650][ T9956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.904841][ T9956] RIP: 0010:h5_recv+0x104/0x910 [ 144.906379][ T9956] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 31 77 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 144.912216][ T9956] RSP: 0018:ffffc900039a7c00 EFLAGS: 00010293 [ 144.914107][ T9956] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886e7f9a [ 144.916651][ T9956] RDX: ffff888022e64880 RSI: ffffffff886e7fdf RDI: 0000000000000005 [ 144.918899][ T9956] RBP: ffffc900039a7d88 R08: 0000000000000005 R09: 0000000000000000 [ 144.921233][ T9956] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 144.923687][ T9956] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb36920 [ 144.926186][ T9956] FS: 00007fd0d75a56c0(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 144.928976][ T9956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.931014][ T9956] CR2: 00007fd0d67726e0 CR3: 0000000063788000 CR4: 0000000000352ef0 [ 144.933440][ T9956] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.935753][ T9956] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 144.938204][ T9956] Call Trace: [ 144.939241][ T9956] [ 144.940144][ T9956] ? __pfx_h5_recv+0x10/0x10 [ 144.941553][ T9956] hci_uart_tty_receive+0x251/0x7e0 [ 144.943126][ T9956] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 144.944828][ T9956] tty_ioctl+0x583/0x1640 [ 144.946191][ T9956] ? __pfx_tty_ioctl+0x10/0x10 [ 144.947663][ T9956] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 144.949678][ T9956] ? hook_file_ioctl_common+0x145/0x410 [ 144.951332][ T9956] ? selinux_file_ioctl+0x180/0x270 [ 144.952901][ T9956] ? selinux_file_ioctl+0xb4/0x270 [ 144.954410][ T9956] ? __pfx_tty_ioctl+0x10/0x10 [ 144.955834][ T9956] __x64_sys_ioctl+0x18b/0x210 [ 144.957329][ T9956] do_syscall_64+0xcd/0x4c0 [ 144.958737][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.960545][ T9956] RIP: 0033:0x7fd0d678e929 [ 144.961911][ T9956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.967954][ T9956] RSP: 002b:00007fd0d75a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.970929][ T9956] RAX: ffffffffffffffda RBX: 00007fd0d69b6080 RCX: 00007fd0d678e929 [ 144.973688][ T9956] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 144.976242][ T9956] RBP: 00007fd0d6810b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.978715][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.981126][ T9956] R13: 0000000000000000 R14: 00007fd0d69b6080 R15: 00007ffc344c0f38 [ 144.983516][ T9956] [ 144.984461][ T9956] Modules linked in: [ 144.985777][ C3] vkms_vblank_simulate: vblank timer overrun [ 144.987747][ T9956] ---[ end trace 0000000000000000 ]--- [ 144.990193][ T9956] RIP: 0010:h5_recv+0x104/0x910 [ 144.993188][ T9956] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 31 77 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 144.999370][ T9956] RSP: 0018:ffffc900039a7c00 EFLAGS: 00010293 [ 145.001504][ T9956] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886e7f9a [ 145.003998][ T9956] RDX: ffff888022e64880 RSI: ffffffff886e7fdf RDI: 0000000000000005 [ 145.006362][ T9956] RBP: ffffc900039a7d88 R08: 0000000000000005 R09: 0000000000000000 [ 145.008707][ T9956] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 145.011297][ T9956] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb36920 [ 145.013667][ T9956] FS: 00007fd0d75a56c0(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 145.016346][ T9956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.018385][ T9956] CR2: 00007fd0d67726e0 CR3: 0000000063788000 CR4: 0000000000352ef0 [ 145.020995][ T9956] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.023371][ T9956] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 145.025745][ T9956] Kernel panic - not syncing: Fatal exception [ 145.028299][ T9956] Kernel Offset: disabled [ 145.029611][ T9956] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:53:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8bae0484 RCX=ffffffff8b85b3b6 RDX=ffff888023092440 RSI=0000000000000007 RDI=0000000000000001 RBP=ffffc90004ed78d8 RSP=ffffc90004ed77f8 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000005 R11=0000000030393754 R12=0000000000000405 R13=ffffffff8bae0481 R14=0000000000000405 R15=0000000000000025 RIP=ffffffff81bbf710 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb52c7906c0 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb52c78ff98 CR3=0000000028ae2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde3a78040 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c9c11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c9c11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c9c11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c9c11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c9c11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36c9c11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000010c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000010c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888012af81a0 RCX=ffffffff84963025 RDX=ffff888029f4a440 RSI=0000000000000000 RDI=0000000000000002 RBP=ffff888034659000 RSP=ffffc90004977a28 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88802b76ac00 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81bbf1f0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb52c74e6c0 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb52c74df98 CR3=0000000028ae2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52bb85488 00007fb52bb85480 00007fb52bb85478 00007fb52bb85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52c6ed100 00007fb52bb85440 00007fb52bb85458 00007fb52bb854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52bb85498 00007fb52bb85490 00007fb52bb85488 00007fb52bb85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a742060 RCX=ffffffff81afd92d RDX=ffff888029f48000 RSI=ffffffff81afd909 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900049a7690 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=1ffffffff1cb9fb9 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4e840d R15=ffff88806a63b580 RIP=ffffffff81afd90b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb52c76f6c0 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb52c72dd58 CR3=0000000028ae2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52ba11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52bb85488 00007fb52bb85480 00007fb52bb85478 00007fb52bb85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52c6ed100 00007fb52bb85440 00007fb52bb85458 00007fb52bb854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb52bb85498 00007fb52bb85490 00007fb52bb85488 00007fb52bb85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc1e5 RDI=ffffffff9b0c52a0 RBP=ffffffff9b0c5260 RSP=ffffc900039a7570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0c5260 R15=ffffffff855bc180 RIP=ffffffff855bc20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd0d75a56c0 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd0d67726e0 CR3=0000000063788000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d6811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d6811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d6811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d6811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d6811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0d6811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000033 6365632f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 4046400c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000